Category
Mobile forensics
Articles filed under Mobile forensics. These pieces cover the practical questions Canadian counsel, in-house legal teams, HR, and corporate security leaders ask us most often when a matter turns on digital evidence. Every article is written by a working forensic examiner, grounded in the Canadian legal framework — the Canada Evidence Act, the Sedona Canada Principles, PIPEDA, and the provincial rules of court — and reviewed against the tooling and methodology we actually use on live engagements.
Use the mobile forensics pieces below as background reading before you brief a client, scope a matter, or draft an affidavit. If you have a question a published article does not answer, the fastest way to get a usable answer is to book a short scoping call with our lab. We do not charge for scoping conversations, and we can usually tell you within fifteen minutes whether the evidence you need actually exists, where it lives, and what a defensible collection would look like.
Physical vs logical mobile acquisitions: what Canadian counsel needs to know
A plain-language comparison of physical and logical mobile phone acquisitions — what each method captures, when each is available, and how the choice affects the strength of evidence in a Canadian court.
Read articleWhy deleted text messages can't be recovered from a modern phone
A plain-language explanation of why deleted SMS and iMessage/Android messages are gone for good on modern phones — full-disk encryption, per-file keys, the Secure Enclave, and flash TRIM.
Read articleNeed digital evidence handled defensibly?
Book a confidential consultation. Our team will reach out as soon as possible.
