ABSTRACT
Digital evidence is "information of probative value that is stored or transmitted in binary form". Digital evidence is not only limited to traditional computer crimes such as hacking and intrusion, but also extends to include every crime category in which digital evidence can be found. Some devices might contain modules such as a digital camera, Global Positioning, wireless and network modules, and even a small hard disk. Hand held device forensic tools and toolkits are still immature in dealing with these advances in mobile phone technology. Advances in technologies and circuitry enabled external memory support to become main stream in higher end mobile phones. Mobile forensic toolkits are developed by third party companies and the toolkits are not independently verified or tested for forensic soundness. The need for standardisation and good forensic practice is recognised as not just being for the need of matters that are to be the subject of litigation.
