How to Collect Telephonic Evidence in Victim PC

[darelk]

First capture the victim’s ram using dump it tool. (For details visit here)

Download bulk extractor viewer (fromhere) and install it in your PC.

Now open bulk extractor viewer and click on to generate report

Now select the dump it image file and select an output folder for the report and click on start bulk extractor as seen below

Now in order to investigate the victim saved information of Telephone/Mobile Click on telephone.txt as seen below

And also click on telephone_histogram.txt