Forensic Investigation Procedure for Data Acquisition and Analysis of Firefox OS based Mobile devices

Firefox OS based mobile phones were introduced in market by Mozilla Corporation in 2013, after its successful demonstration through Boot2Gecko project a year prior to its release. The Firefox OS is an Open Source, Linux based, Standalone, Open Web Operating System. The Android and iOS phones, due to their presence and wide acceptance over the past decade, are ruling the mobile market. Therefore, numerous forensic investigation tools that follow standard and structured forensic procedures are available for such platforms. But, as the Firefox OS is relatively new, limited research is being done on the forensic front. The rate of mobile crimes are increasing, thus forensic analysis procedures for such unique operating system should be designed at the earliest. A way to acquire data is already known as per earlier research work done on this OS. However, the internal data acquisition was not working and only limited data could be acquired. In this paper we present a methodology for acquisition of internal data from Firefox operating system based mobile device and its complete analysis to recover important evidence. The paper gives a way to start the process of acquiring data by use of Android Debug Bridge, followed by identification of important files which can be analyzed to obtain valid results. Further it exhibits how use of Magnet AXIOM toolkit helped us to recover images, documents, audio files and web related data from the acquired evidence. We also show how tools like qtADB, FTK Imager and SQLite Forensics helped us in forensic investigation.