Faraday Bag
Definition
A signal-blocking pouch with conductive mesh lining that prevents cellular, Wi-Fi, Bluetooth and NFC signals from reaching a seized phone. The standard control to stop a remote wipe or remote lock between seizure and lab. Tested against the venue's signal environment before each scene.
- Key signals blocked
- Cellular, Wi-Fi, Bluetooth, NFC, and GPS
- Primary purpose
- Prevent remote wipe and evidence alteration during seizure and transport
- Material
- Conductive mesh lining with RF shielding
Common questions
What does a Faraday bag do?+
A Faraday bag is a pouch with conductive mesh lining that blocks radio signals like cellular, Wi-Fi, Bluetooth, and NFC from reaching a mobile device inside. This isolation prevents remote wipe, remote lock, Find My pings, and live updates that could alter evidence between seizure and lab.
When should a seized phone go into a Faraday bag?+
A Faraday bag is the standard control measure used immediately after seizure, during transport to the lab, and whenever a device needs to be isolated from the network. It should be tested against the signal environment at each scene to ensure proper shielding.
Related terms
- Chip-Off
- NIST SP 800-101 R1 Level 5 acquisition. Desoldering the NAND or eMMC chip from the PCB and reading it directly with a...
- Order of Volatility
- The sequence in which digital evidence should be collected, ranked from most to least transient. Defined in RFC 3227. CPU registers and...
- Write Blocker
- A hardware or software device interposed between a digital storage medium and the forensic workstation that prevents any write commands from reaching...
- Bit-Stream Image
- Sector-by-sector exact copy of a storage medium, including unallocated and slack space. Created with dd, FTK Imager, EnCase or X-Ways. Output formats:...
- BSA 2023 Section 63 Certificate
- Mandatory certificate accompanying any electronic record produced as secondary evidence in Indian court. Replaces IEA Section 65B from 1 July 2024. Signed...
- CDR
- Call Detail Record. Telco-side log of A-party, B-party, start time, duration, IMEI, IMSI and serving cell ID. Lawful-intercept output under the IT...
- Cellebrite UFED
- Cellebrite Universal Forensic Extraction Device. The dominant commercial mobile forensics platform in Indian state cyber cells and at CFSL Hyderabad. Combines acquisition...
- Computer Forensics
- Application of investigative and analytical techniques to identify, preserve, acquire, examine and present digital evidence in a legally defensible manner. Five-stage pipeline:...
- Digital Evidence
- Any information of probative value stored or transmitted in binary form. Latent, volatile in part, easily altered, and admissible only if integrity...
- FDE
- Full Disk Encryption. Default on modern Android (file-based encryption since Nougat) and iOS. Encryption keys are tied to the user passcode and...
- Forensic Image
- A bit-for-bit verified copy of a storage medium, created using a write-blocker to prevent modification of the original. The copy is verified...
- Hash Value
- A fixed-length digital fingerprint produced by running a file through a cryptographic algorithm such as SHA-256 or MD5. Identical files produce identical...
Explained in these topics
- Computer Forensics: Cyber Crimes, Digital Evidence, Seizure and AcquisitionConductive shielded pouch that blocks radio signals (cellular, Wi-Fi, Bluetooth, GPS) reaching a seized mobile device, preventing remote wipe or evidence alter...
- The Digital First Responder: Order of Volatility, Seizure and ImagingAn RF-shielded pouch used to isolate mobile and wireless devices from cellular, Wi-Fi and Bluetooth signals during transport, preventing remote wipe and live u...
- Mobile Phone Forensics: Acquisition and ExaminationRF-shielded pouch that isolates a seized handset from cellular, Wi-Fi and Bluetooth networks, preventing remote wipe and Find My pings.
- Mobile Phone Forensics: Acquisition, JTAG and Chip-OffA signal-blocking pouch with conductive mesh lining that prevents cellular, Wi-Fi, Bluetooth and NFC signals from reaching a seized phone. The standard control...