SIM Card Plug-in

Device Seizure's SIM card plug-in works with a SIM card reader to forensically acquire data from the SIM card including deleted text messages. Device Seizure has Unicode support to read multiple languages such as Arabic, Chinese, & Russian. The SIM card plug-in can obtain all of the stored data from the following list that can potentially have evidentiary value:

• Phase (Phase ID)
• SST (SIM Service table)
• ICCID (Serial Number)
• LP (Preferred languages variable)
• SPN (Service Provider name)
• MSISDN (Subscriber phone number)
• AND (Short Dial Number)
• FDN (Fixed Numbers)
• LND (Last Dialed numbers)
• EXT1 (Dialing Extension)
• EXT2 (Dialing Extension)
• GID1 (Groups)
• GID2 (Groups)
• SMS (Text Messages)
• SMSP (Text Message parameters)
• SMSS (Text message status)
• CBMI (Preferred network messages)
• PUCT (Charges per unit)
• ACM (Charge counter)
• ACMmax (Charge limit)
• HPLMNSP (HPLMN search period)
• PLMNsel (PLMN selector)
• FPLMN (Forbidden PLMNs)
• CCP (Capability configuration parameter)
• ACC (Access control class)
• IMSI (IMSI)
• LOCI (Location information)
• BCCH (Broadcast control channels)
• Kc (Ciphering key)
• AD (Administrative data)

The SIM plug-in also acquires the whole catalog system with data in a tree-view presentation. Additionally, this plug-in can recover deleted SMS data by analysis of unallocated space. This plug-in now parses all acquired data in a convenient format.