ORGANIZATION OF MOBILE FORENSICS PROCEDURES IN SLOVENIAN POLICE

Forenzika mobilnih elektronskih naprav je ena najnovejših panog v slovenski kriminalistični policiji. Postopki, ki jih je potrebno izvesti za uspešno pridobitev pravnodopustnih digitalnih dokazov z mobilnih telefonov, tabličnih računalnikov, GPS in drugih mobilnih naprav, ne zajemajo le forenzičnega kopiranja, zavarovanja in analize podatkov, temveč so pomembne tudi aktivnosti policistov, kriminalistov in preiskovalcev ob samem zasegu teh naprav. Standardni operativni postopki zasega, zavarovanja in preiskave podatkov z mobilnih elektronskih naprav v slovenski policiji še niso bili natančno definirani. Sedanji postopki temeljijo le na osnovnih principih digitalne forenzike in usmeritvah za delo, ki niso zapisane v skladu z novejšimi dognanji strokovnjakov in inštitucij, ki se ukvarjajo s področjem forenzike mobilnih naprav. Postopke forenzike mobilnih elektronskih naprav v slovenski policiji smo zato na novo opredelili na podlagi informacij, ki smo jih zbrali iz strokovnih virov. Izdelali smo diagrame poteka dela, ki zajemajo vse tri osnovne standardne operativne postopke forenzike mobilnih naprav. Ti bodo v pomoč pri izobraževanju in delu policistov, kriminalistov in preiskovalcev, da bodo pri obravnavi kaznivega dejanja na pravilen način izvedli zaseg mobilne elektronske naprave, zavarovanje in preiskavo elektronskih podatkov, ki se nahajajo na njej, ter predstavili pravno dopustne, digitalne dokaze v postopku na sodišču.Digital forensics of mobile devices or mobile forensics is one of the latest practices in the Slovenian Criminal Police. Procedures that need to be carried out within it, to successfully obtain legally admissible digital evidence from mobile phones, tablet computers, GPS and other mobile devices, do not include only extraction and forensic analysis of the digital data held inside, but also all activities performed by the police officers, crime inspectors and investigators upon their seizure. Standard operating procedures for seizure, acquisition and investigation of digital data from mobile devices, have not yet been precisely defined in the Slovenian police. Current procedures are based only on the basic principles of digital forensics and guidelines for the work, that do not follow the recent findings of experts and professional institutions that deal with the mobile forensics. Therefore we redefined mobile forensics procedures in Slovenian police, based on the informations that we\u27ve gathered from professional sources. We prepared several workflow diagrams, covering all three of the basic standard operating procedures of mobile forensics. These will assist in the education and work of police officers, crime inspectors and investigators, with guiding them properly trough the seizure of mobile devices, acquisition and investigation of their electronic data and presenting legally admissible evidence in court hearings