The IT Law Wiki


NIST, Guidelines on PDA Forensics (NIST Special Publication 800-72) (Nov. 2004) (full-text).


This guide provides an in-depth look into PDAs and explaining the technologies involved and their relationship to forensic procedures. It covers three families of devicesPocket PC, Palm OS, and Linux-based PDAs — and the characteristics of their associated operating systems. This guide also discusses procedures for the preservation, acquisition, examination, analysis, and reporting of digital information present on PDAs, as well as available forensic software tools that support those activities.

The objective of the guide is twofold: to help organizations evolve appropriate policies and procedures for dealing with PDAs, and to prepare forensic specialists to deal with new situations involving PDAs, when they are encountered.