You are investigating a cybersecurity crime that needs mobile forensic analysis. You contacted the companys IT department and they gave you data from all employees mobiles. The data is more than 100 TB and the time for investigation is not long enough that you can analyse all data. How would you address the following questions while preparing your report as a digital forensics investigator?

a) Discuss and analyse on how to perform a full forensics investigation and discuss the steps required in acquiring the evidence in consideration of legal and ethical standards. At each step explain which tool you will use and if you would like to have more information regarding any employee from the company. [5 Marks]

b) Discuss the general procedure to access the content on this mobile phone SIM card. [5 Marks]

c) Explain the considerations you should have when deciding what data-acquisition method to use for your investigation. [5 Marks]

d) Discuss the obstacles that you can expect to encounter when acquiring evidence and your plan to mitigate them. [5 Marks]

e) Explain two acquisition methods that you should use in this situation and explain how do you validate your findings.