±Forensic Focus Partners

Become an advertising partner

±Your Account


Forgotten password/username?

Site Members:

New Today: 0 Overall: 35503
New Yesterday: 0 Visitors: 106

±Follow Forensic Focus

Forensic Focus Facebook PageForensic Focus on TwitterForensic Focus LinkedIn GroupForensic Focus YouTube Channel

RSS feeds: News Forums Articles

±Latest Articles

±Latest Webinars

Examination Practice - ESD

Computer forensics discussion. Please ensure that your post is not better suited to one of the forums below (if it is, please post it there instead!)
Reply to topicReply to topic Printer Friendly Page
Forum FAQSearchView unanswered posts

Senior Member

Examination Practice - ESD

Post Posted: Feb 11, 18 12:12

For members of the LinkedIn Mobile Telephone Examination Board (MTEB) group I put together a small observations training post for beginners about digital device examination and Electro-Static Discharge (ESD). I hope it can help others get started to consider whether adopting an internal ESD policies, practices and procedures is relevant to your work.

ESD Basics

Do you, for your own purposes, follow ESD procedures or does your lab include ESD Basics during in-house training? Some may think that smartphones don't require these procedures the same way ESD procedures are applied when removing RAM or SSD/HDD from a PC/laptop etc. Even the humble USB Type-C Port Controller specifies ESD tolerances (http://www.cypress.com/file/140151/download).

I have acquired many books and manuals over the years dealing with mobile/smart phone examination demonstrating JTAG, chip off or in-house lab repairs in order to extract and harvest data. Surprisingly only a few wrote about ESD procedures to be followed.

An early ENFSI publication 2009: Best Practice Guide v6 states "In the area of digital forensics it is important to ensure that the testing environment is suitable for the examination before any tools are used. In cases where direct access to the chips is required ESD protection is required". The Guide was intended to be advisory when dealing with ISO/IEC17025.

ENFSI-BPM-FIT-01 November 2015 Best Practice Manual for the Forensic Examination of Digital Technology states "When handling exposed electronic components and circuit boards it is important to ensure that all appropriate Electrostatic Discharge (ESD) and Interference (ESI) requirements are in place. This is especially relevant if there is a need to handle individual circuit boards, or desoldering/soldering operation are to be undertaken. If the laboratory does not have existing ESD and ESI standard operating procedures in place, then they should consider referencing EN-61000-4-2 before proceeding."

I have prepared some additional information you may find helpful produced in a .pdf on ESD Basics update.pdf - www.dropbox.com/s/mjdp...update.pdf

Institute for Digital Forensics (IDF) - www.linkedin.com/groups/2436720
Mobile Telephone Examination Board (MTEB) - www.linkedin.com/groups/141739
Universal Network Investigations - www.linkedin.com/groups/13536130
Mobile Telephone Evidence & Forensics trewmte.blogspot.com 

Page 1 of 1