MOBILedit Forensic

MOBILedit Forensic is an all-in-one solution for data extraction from phones, smartwatches and clouds. It uses both physical and logical data collection, has excellent application analysis, deleted data recovery, wide range of supported devices, fine-tuned reports, concurrent processing and user-friendly interface. With a whole new approach, MOBILedit Forensic is much stronger than ever at security bypass.

MOBILedit Forensic offers maximum functionality at a fraction of the price of other tools. It can be used as the sole tool in a lab or as a complement to other tools due to its data compatibility. When integrated with Camera Ballistics, it scientifically analyzes the provenance of camera photos.

MOBILedit performed very well in extensive tests by NIST - the US government organization.

All-in-one phone evidence collection tool

With MOBILedit Forensic you can extract all data from a phone in just a few clicks. This includes deleted data, call logs, contacts, text messages, multimedia messages, photos, videos, recordings, calendar items, reminders, notes, data files, passwords and data from apps like Skype, Dropbox, Evernote, Facebook, WhatsApp, Viber, Signal, WeChat and many others.

MOBILedit Forensic automatically uses multiple communication protocols and advanced techniques to get maximum data from any phone and operating system. It then summarizes all the data found, removes duplicates and presents everything in a complete, easy-to-read report.

security bypass

MOBILedit Forensic has a built-in security bypass for many phone models that allows you to capture a physical image even if the phone is protected by a password or pattern. Bypass the lock screen on a variety of Android phones so you can advance the investigation. We're introducing a new approach to security bypass with Live Updates technology - new phone models can be added even without reinstalling MOBILedit, just like updating antivirus software!

Physical data acquisition and analysis

In addition to advanced logical extraction, we also offer Android physical data collection, allowing you to extract physical images of the examined phones and create exact binary clones. Physical analysis allows you to open image files created by this process or obtained by JTAG, Chip-Off or other tools to recover deleted files as well as any other erased data that our product is known to excel at.

Advanced application analysis

The use of apps to communicate and share has increased rapidly. Many apps are released or updated every day. It is obvious that analyzing apps is crucial to get as much evidence as possible. This is the strength of MOBILedit Forensic. We devote a large part of our team specifically to application analysis. We use adaptive and deep methods to ensure you get the most available data for each app - especially recovering deleted data. The data is analyzed for its meaning, so you can see it on a timeline as a note, photo, video, or message flow, no matter what app sent it. Check out our database of supported apps.

Smart screenshots

The Smart Screenshots feature provides a solution to get evidence from applications that cannot be accessed through logical extraction. This advanced feature allows extracting conversations and other information from popular messaging apps like Instagram, Signal, Skype, Telegram, Viber and WhatsApp. Screenshoting is automatic with no user interaction required on the device.

live updates

Thanks to live updates, we are able to add additional device models (or chipsets) or new supported applications in the form of packages without having to reinstall the software. Live updates are a unique feature and strength of MOBILedit Forensic. They provide instant updates of application analysis, security bypass, and other features live and as often as needed.

Cloud Forensics

Besides capturing phone content, cloud extraction is a necessity to get all sorts of data. MOBILedit Cloud Forensic supports the most popular cloud-based services like Booking, Microsoft Teams, Dropbox, Box, Microsoft OneDrive, Google Drive, Facebook, Instagram, LinkedIn, Twitter, Facebook Messenger, Slack and many others. This powerful feature is available as a standalone product or can be integrated into MOBILedit Forensic Pro.

Learn more about MOBILedit Cloud Forensic

Smartwatch Forensics

As wearable devices become more popular, smartwatch forensics plays an essential role and is critical when a smartwatch is the only digital evidence available. MOBILedit Forensic supports smartwatches from manufacturers such as Apple, Garmin, Samsung, TCL and others through dedicated readers available in our Smartwatch Kit .

Recovery of deleted data

Deleted data is almost always the most valuable information on a device. It often hides in applications; And since this is our strongest expertise, we deliver excellent results when searching for deleted data. Our special algorithms thoroughly search databases, their invalid pages and caches to find all the data still on a phone. MOBILedit Forensic retrieves the deleted data and clearly presents it in a special section of the report.

Fine-grained reports

Enormous effort has gone into refining the reports to be customizable, easy to read, concise, and professional. An advanced report configurator allows you to define exactly what data is extracted from the phone and what the report should look like. Each report is divided into sections labeled with icons, images, and relevant data highlighted so you can find evidence quickly. A complete, configurable, and comprehensive list of all time-stamped events is displayed on a timeline, and messages can be filtered by conversation or by contact name.

Reports are available in PDF, XLS, or HTML formats, and you can generate data exports that are compatible with the other data analysis tools you use in your lab, such as B. UFED. Check out the sample report.

Simultaneous extractions and new 64-bit engine

The new 64-bit engine provides stability and the ability to analyze huge amounts of data, apps with hundreds of thousands of messages, photos and other items, and multiple phones at the same time. Speed ​​up your investigative process by extracting multiple phones at once and generating multiple outputs for each. All you need is a USB hub, cables, and a computer powerful enough to run simultaneous tasks. You can do a week's work overnight!

malware detection

The new malware detection is based on the Yara project. Yara works on the basis of rules that describe arbitrary data patterns, in our case patterns that can indicate malware. MOBILedit Forensic applies these rules and scans the file to see if it meets any of these rules and returns a list of results. This means that it contains the data patterns described.

Easy to use interface

It's not enough to have the right tools, you also need the right people to work with them. The shorter the learning curve, the better. Having developed software for millions of consumers, it was a welcome challenge for us to make MOBILedit Forensic the most user-friendly forensic tool on the market. With a straightforward user interface, every step is simple and guided by clear instructions. It is also optimized for touchscreens, allowing for easy use in the field.

Camera ballistics - scientific image analysis

In combination with Camera Ballistics, you can use a sensor fingerprint to determine which images present on the analyzed phone were actually taken by the phone's camera. This process provides new insights into the images such as make, model, GPS, camera settings, mean square error, result of fingerprint presence, probability and correlation. These are organized into a well-designed and comprehensive PDF report that can be submitted as evidence.

Learn how camera ballistics can aid your investigations

Reports in any language

Reports are now under user control. You can customize reports to your own style or translate them into your language to meet the criteria set by law.

photo recognizer

This module automatically locates and detects suspicious content in photos and videos, such as B. Guns, drugs, nudity, currency and documents. Photo Recognizer uses artificial intelligence and deep machine learning to quickly analyze an unlimited number of photos and videos, and is designed to save countless hours of manually searching for key evidence in vast databases of visual media. Each piece of media is classified into its own specific category, allowing investigators to organize their cases well and easily present the suspicious content in a fine-grained report.

Face Matcher

This important feature easily finds photos and videos of people you are looking for. Based on the latest deep learning techniques, Face Matcher quickly analyzes even large amounts of visual media that users often have on their phones or PCs. Save countless hours spent manually searching through photo and video albums. Just specify photos of faces you want to find and let Face Matcher find the right photos and videos.