This document is intended to familiarize the investigator with various methodologies and tools available to perform a forensic examination of a RIM (BlackBerry) device. The procedures and tools presented are by no means all encompassing, but are intended to elicit design of custom tools by those more programmatically inclined. The methods contained within have been tested using an Exchange Edition RIM pager model 950 and an Exchange Edition RIM handheld model 957.

Computer Forensics: Hacking for Cops.