Extracting Forensic Evidence from Smartwatch Data: A CID Hackathon Experience

Extracting Forensic Evidence from Smartwatch Data: A CID Hackathon Experience
Smartwatches are emerging as crucial forensic tools in crime investigations, capable of providing valuable data on GPS movements, communications, and transactions. The recent CID Hackathon highlighted the process of extracting and analyzing this data to support law enforcement in solving crimes. Affected: law enforcement, forensic investigations

Keypoints :

  • Smartwatches can provide a wealth of forensic data beyond health metrics.
  • The CID Hackathon aimed to extract critical data from smartwatches for criminal investigations.
  • Data types included GPS logs, call and messaging records, multimedia files, and payment transactions.
  • Extraction utilized advanced tools like the Smart Development Bridge (SDB) for accessing system files.
  • Smartwatch data can assist in establishing alibis, tracking suspect movements, and analyzing communication patterns.
  • Data cleaning and structuring are essential for improving usability in investigations.
  • The use of real-time hosting and visualization tools can speed up the investigative process.
  • Smartwatches act as continuous digital witnesses in crime scene investigations.
  • The project secured runner-up at the CID Hackathon, receiving recognition and a cash prize.

MITRE Techniques :

  • TA0006 – Credential Dumping: Retrieved call logs and messaging records for communication analysis.
  • TA0010 – Application Layer Protocol: Extracted payment transaction logs using NFC services.
  • TA0001 – Initial Access: Connected to the smartwatch using the Smart Development Bridge (SDB) for data extraction.
  • TA0020 – Data from Information Repositories: Extracted and analyzed GPS logs and stored media evidence.
  • TA0002 – Execution: Used advanced debugging tools for extracting secrets and system data, enabling deeper forensic analysis.

Full Story: https://infosecwriteups.com/extracting-forensic-evidence-from-smartwatch-data-a-cid-hackathon-experience-8a45b6ef7d5b?source=rss—-7b722bfd1b8d—4