3g Forensics
This article will showcase some of the more popular features of SIMIS 2G
Select Card Reader
Types of Card
Automatic detection of card type -
|
Watch List
With the watch list loaded, SIMIS will 'watch' all card data as it is recovered and should a mobile number be retrieved that appears in the watch list an alarm is sounded and a visual warning is presented to the examiner.
Archive
SIMIS provides an Archive facility to allow easy review of the reports associated with previously read cards.
Within this aspect of the application, the examiner may review the report data, verify the hashes against the HTML data files and make duplicates of reports.
Search
The search feature provides a comprehensive interface to the internal SIMIS database. Data recovered from every card that is interrogated by SIMIS is stored in a locally stored database file. Compatible with Microsoft Access and many third party applications.
The search feature provides a quick and easy solution for the most popular search queries. Search operations may be limited to a single case, based on case reference. Or they may search on a database wide basis. Various options are available as can be seen form the screen shot below.
The search feature is very useful for investigations officers, when building a 'picture' of the "hierarchy"mobile communications related to a specific crime. In a large database it is interesting to note that, often the same mobile numbers occur across many crimes, possibly highlighting relationships that may not have been obvious from other lines of investigation.
PIN Admin
PIN and PUK entry facilities allow the PIN to be entered and Deactivated, or the PUK to be entered to reset the PIN. PIN and PUK entry are handled correctly in accordance with the relevant specifications.
Resetting the PIN on a card does not affect the integrity of other data stored on the card.The entry of a new PIN after PUK entry is the only exception to the rule that SIMIS does NOT change any data on the card. The exception is only permitted after the examiner has been warned and the examiners confirmation received.
Site Navigation