Growth of Data Artifacts Covered by CFTT Mobile | |
2025 | Will be adding financial data (Google Pay, Apple Pay, Venmo, Cash App, PayPal); Social Media (Discord, Reddit, Telegram, Signal) and more functions (not yet determined). |
2024 | Timeline analysis ; Fitness data; Wi-Fi data |
2022 | Added TikTok to social media; SQLite Database viewer; SQLite command functionality |
2019 | Added Pinterest, Snapchat, WhatsApp to social media |
2016 | Added Instagram to social media |
2014 | Social media related data (Facebook, Twitter, LinkedIn) |
2008 | Subscriber and equipment identifiers (IMEI, MEID/ESN); PIM data (contacts, calendar, memos, etc.); Call logs (incoming, outgoing, missed calls); Text messages (SMS, MMS ); Stand-alone files (audio, documents, graphic, video); Email; Web activity (history, bookmarks); Location data (GPS, longitude and latitude coordinates); SIM/UICC |
Mobile Device Acquisition Tool | JTAG, Chip-off
NOTE: Test reports are being updated to ensure 508 compliance. Currently some reports are unavailable. If you need one that is not linked above, please contact: cftt [at] nist.gov (cftt[at]nist[dot]gov)
SP 800-101 Rev. 1, Guidelines for Mobile Device Forensics, was released in May 2014.