Samsung A727 - SGH Cell Phone 28 MB User Manual download pdf (Page 41)

CAPTURING DATA

CellDEK® User Manual 41

Figure 30 – CF Memory Card in Slot

NOTE: If the suspect Memory Card is not

represented on the Selection Screen, a card

adapter may be required. (e.g. Transflash, Mini SD,

Memory Stick Duo, etc.)

Imaging Flash Media

After capturing data, CellDEK will ask the user if it

should perform a complete image capture of the

flash memory card. If the user chooses to do this,

CellDEK will run the following procedure:

1. CellDEK will make a sector-by-sector copy of

the entire flash media drive.

2. The copy will be stored as an image file in the

“_resource” folder of the extraction directory.

3. CellDEK will then scan the image file for the

following types of JPEG files:

- Extant JPEG: Normal, readable JPEG

files.

- Deleted JPEG

- Embedded JPEG: JPEG files embedded in

emails or other files.

4. Any found JPEG files will be displayed by

CellDEK in the Extended Data screen.

5. The image file can be copied to a thumb drive

and investigated further with hex-editing or

forensic software.

NOTE: CellDEK cannot distinguish between

Extant, deleted or embedded JPEG files. The

image file should be further investigated to

determine the status of any found files, and whether

similar files exist in other formats.

1 2 ... 36 37 38 39 40 41 42 43 44 45 46 ... 213 214

No comments

Samsung A727 - SGH Cell Phone 28 MB User Manual Page 41