From ForensicsWiki
Revision as of 00:37, 25 April 2006 by Uwe Hermann (Talk | contribs) (s/Blackberry/BlackBerry/.)

Jump to: navigation, search

The RIM BlackBerry is a personal wireless handheld device that supports e-mail, mobile phone capabilities, text messaging, web browsing, and other wireless information services. It is most commonly utilized for business purposes.


The BlackBerry was first introduced in 1999 by a company called Research In Motion (RIM).

Operating System

The BlackBerry OS provides easy access to applications such as e-mail, to do list, memos, address book, and many other features. With the newer operating systems 4.1 and later, composing messages are much more convenient by providing auto text.


  • 7100 Series
  • 7700 Series
  • 7520
  • 7700 Series
  • 8700 Series


RIM's push technology adds a new and different look at the forensics investigation of a PDA. Unlike traditional PDAs that need to be synchronized with a host computer with the use of a cradle or docking station, BlackBerrys are synchronized wirelessly by the pushing of data onto the device. This means that the data on the device could potentially be changing at any moment. Also, a BlackBerry is never really off. What seems like “off” to the user is really only the display, keyboard, and radio being disabled. So when the device is powered back on to the user, items that have been waiting to be pushed to the device from the server begin immediately. This does not give the forensics examiner the time needed to shut down the device. For this reason, the first step in the acquisition of a BlackBerry is to leave it off. The device should only be turned back on when it is in a place that cannot receive a signal and thus nothing can be pushed to it.