The role of digital forensics in law enforcement investigations is to identify, acquire, process, analyse, and report electronically stored data which could be used as a valid proof in the court of justice. Mobile phones are always a valuable source of data, due to their intensive use in everyday life and to the wide adoption of mobile device management solutions by companies. During the acquisition phase, data integrity must be preserved to avoid invalidating the proof. However, integrity is often put at risk by several factors. Mobile spyware are a major threat to data integrity, because of their ability to control and modify the infected device, and could potentially cause data alteration or even destruction.