Full user data acquisition from Symbian smart phones

Currently there is a lack of non-intrusive methods to create linear bitwise copies of the internal flash memory of Symbian smart phones. Furthermore, little is known about the locations and the format in which Symbian OS stores data. The goal of this research is to create a software tool that can be executed on the Symbian OS and creates linear bitwise copies of the internal flash memory. The result is the Symbian Memory Imaging Tool (SMIT) which can image the volumes of the internal flash memory and copies the images to a removable memory device. The SMIT opens the way to retrieve deleted data in a non-intrusive manner. Additionally, a preliminary exploration of the Symbian user volume was performed to determine the locations of forensically important (deleted) data.