Modern MP3 players have a large amount of functionality. Some are essentially computers with streamlined functionality. As such, a substantial quantity of data can potentially be extracted from them.


MP3 players such as the Apple iPod (Touch, Nano & Shuffle) (Sytech - Apple iPod Forensics) and the Microsoft Zune can browse the Internet and will therefore contain records of this activity, all of which can be forensically analysed.


This class of MP3 player can also use Applications or 'Apps' which are downloadable from the manufacturer's virtual marketplace. These Apps can perform a wide variety of functions and dependent upon the App data pertaining to their use may be recoverable and of interest.


It is possible to use the majority of MP3 players as external storage devices. This means that when connected to a computer via USB, Firewire or a Wireless based technology the device can then be used to store files. This is not limited to audio files and therefore an MP3 player can potentially hold any type of file.


Recent cases worked on by Sytech have shown instances where data was hidden upon MP3 players. Forensic analysis of such devices would yield this data.