ASTM E3046-15

Standard Guide for Core Competencies for Mobile Phone Forensics (Withdrawn 2024)

SIGNIFICANCE AND USE
3.1 This guide provides an outline of the knowledge, skills, and abilities all practitioners of mobile phone forensics should possess. The core competencies provide a basis for training and testing programs. This basis is suitable for certification, competency, and proficiency testing.
SCOPE
1.1 This guide identifies the core competencies necessary for the handling and forensic processing of mobile cellular (cell) telephones (phones). It applies to both first responders and laboratory personnel.  
1.2 Different levels of cell phone analysis are discussed as well as the basic skills required at each of these levels.  
1.3 This guide does not address core competencies for chip-off or MicroRead extraction methods.  
1.4 Refer to the Scientific Working Group on Digital Evidence (SWGDE) Guidelines and Recommendations for Training in Digital and Multimedia Evidence for general training requirements of forensic practitioners.  
1.5 This standard does not purport to address all of the safety concerns, if any, associated with its use. It is the responsibility of the user of this standard to establish appropriate safety and health practices and determine the applicability of regulatory limitations prior to use.
WITHDRAWN RATIONALE
This guide identified the core competencies necessary for the handling and forensic processing of mobile cellular (cell) telephones (phones). It applied to both first responders and laboratory personnel.
Formerly under the jurisdiction of Committee E30 on Forensic Sciences, this guide was withdrawn in January 2024 in accordance with section 10.6.3 of the Regulations Governing ASTM Technical Committees, which requires that standards shall be updated by the end of the eighth year since the last approval date.

General Information

• Status: Withdrawn
• Publication Date: 30-Nov-2015
• Withdrawal Date: 02-Jan-2024
• ICS: 33.070.99 - Other mobile services
• Technical Committee: E30 - Forensic Sciences
• Drafting Committee: E30.12 - Digital and Multimedia Evidence

Standards Content (Sample)

This international standard was developed in accordance with internationally recognized principles on standardization established in the Decision on Principles for the
Development of International Standards, Guides and Recommendations issued by the World Trade Organization Technical Barriers to Trade (TBT) Committee.
Designation: E3046 − 15 An American National Standard
Standard Guide for
1
Core Competencies for Mobile Phone Forensics
This standard is issued under the fixed designation E3046; the number immediately following the designation indicates the year of
original adoption or, in the case of revision, the year of last revision. A number in parentheses indicates the year of last reapproval. A
superscript epsilon (´) indicates an editorial change since the last revision or reapproval.
1. Scope 3. Significance and Use
3.1 This guide provides an outline of the knowledge, skills,
1.1 This guide identifies the core competencies necessary
and abilities all practitioners of mobile phone forensics should
for the handling and forensic processing of mobile cellular
possess.Thecorecompetenciesprovideabasisfortrainingand
(cell) telephones (phones). It applies to both first responders
testing programs. This basis is suitable for certification,
and laboratory personnel.
competency, and proficiency testing.
1.2 Different levels of cell phone analysis are discussed as
well as the basic skills required at each of these levels.
4. Core Competencies Overview
1.3 This guide does not address core competencies for
4.1 First responders are defined as individuals that might be
chip-off or MicroRead extraction methods.
responsible for the collection and minimal examination of a
mobile phone. There are two levels of first responders. Level 1
1.4 Refer to the Scientific Working Group on Digital Evi-
first responders are individuals that collect or manually exam-
dence (SWGDE) Guidelines and Recommendations for Train-
ine mobile phones or both. Level 2 first responders are
ing in Digital and Multimedia Evidence for general training
individuals that use a tool or software to extract data from the
requirements of forensic practitioners.
mobile phone. Laboratory personnel are defined as individuals
1.5 This standard does not purport to address all of the
that might be responsible for the collection and extensive
safety concerns, if any, associated with its use. It is the
examination of a mobile phone in a laboratory environment
responsibility of the user of this standard to establish appro-
andtheircompetenciesareoutlinedinSection7below.Theuse
priate safety and health practices and determine the applica-
of any tool to download/extract data from a mobile phone
bility of regulatory limitations prior to use.
necessitatesthatpropertrainingbecompletedbytheindividual
using that tool.
2. Referenced Documents
4.2 The mobile phone forensics field continues to be dy-
2
namic and shares some aspects of traditional computer foren-
2.1 2.1 SWGDE Documents:
sics. A practitioner should have an overall understanding of
SWGDE Guidelines and Recommendations for Training in
mobile forensics analysis and can remain current by reading
Digital and Multimedia Evidence
trade journals, taking classes, participating in professional
SWGDE Minimum Requirements for Quality Assurance in
organizations,takingcontinuingeducation,on-the-jobtraining,
the Processing of Digital and Multimedia Evidence
and hands-on experience.
SWGDE’s Best Practices for Mobile Phone Forensics
4.3 An examiner shall adhere to:
SWGDEBestPracticesforExaminingMobilePhonesUsing
4.3.1 All appropriate standard operating procedures, and
JTAG
3 policies and
2.2 NIST Documents:
4.3.2 A code of ethics including neutrality in the scientific
NIST Special Publication 800-101 Revision 1—Guidelines
processes.
on Mobile Device Forensics
4.4 An examiner should apply all principles as defined in
the SWGDE Minimum Requirements for QualityAssurance in
the Processing of Digital and Multimedia Evidence.
1
This guide is under the jurisdiction of ASTM Committee E30 on Forensic
Sciences and is the direct responsibility of Subcommittee E30.12 on Digital and
4.5 An examiner might be assigned casework that falls
Multimedia Evidence.
within one or more of the following levels and should,
Current edition approved Dec. 1, 2015. Published February 2016. DOI: 10.1520/
therefore, have the appropriate level of training to perform the
E3046-15.
2
Available from the Scientific Working Group on Digital Evidence (SWGDE), examination.
https://www.swgde.org.
3
4.6 The concept of levels of extraction for mobile devices is
Available from National Institute of Standards and Technology (NIST), 100
Bureau Dr., Stop 1070, Gaithersburg, MD 20899-1070, http://www.nist.gov. not new to the mobile forensics field, but, it is important that
Copyright © ASTM International, 100 Barr Harbor Drive, PO Box C700, West Conshohocken, PA 19428-2959. United States
1

---------------------- Page: 1 ----------------------
E3046 − 15
the reader have a basic unders
...