RetroScope

RetroScope Opens Doors to the Past in Smartphone Investigations
By Purdue University News

August 4, 2016

Researchers at Purdue University are developing a technique that could help law enforcement recover evidence from smartphones when investigating crimes.

The technique, RetroScope, gathers data from a device's random-access memory, which is more volatile than the information stored on a phone's hard drive.

"We argue this is the frontier in cybercrime investigation in the sense that the volatile memory has the freshest information from the execution of all the apps," says Purdue professor Dongyan Xu. "Investigators are able to obtain more timely forensic information toward solving a crime or an attack."  ... "