Mobile Forensics

Mobile Forensics

.

Cellebrite Premium

Unprecedented lawful access to iOS and high-end Android devices. Cellebrite Premium is the only onsite solution that enables you to recover the password, unlock and perform a full file – system extraction on Apple devices running the latest iOS versions.

Cellebrite Premium can also bypass locks and perform a physical extraction on many Android devices. Accessing 3rd party application data, stored passwords and tokens, chat conversations, location data, email attachments, system logs, as well as deleted content, increases the chances of finding incriminating evidence.

Cellebrite UFED

The industry standard for lawfully accessing mobile data. Cellebrite UFED helps to bypass locks, performs advanced unlocks, perform logical/full file system/physical extraction of apps data and cloud token and much more. With support for more than 32k device profiles, and the widest device coverage from the leading Android vendors and Apple, Cellebrite UFED becomes the market – leading solution for accessing digital data.

Cellebrite Responder

Securely and lawfully, collect and review digital data whether at a police station, correction facility, border control checkpoint or on the move. Cellebrite Responder allows users to quickly surface key insights anytime, anywhere, saving important investigation time. As a key component of Cellebrite’s investigation solutions, Cellebrite Responder allows users to perform selective or full physical data extraction, saving time and increasing community trust. With minimal training, Cellebrite Responder users can easily surface critical insights that speed up investigative work flows and solve cases faster.

MSAB OFFICE

The All-in-One Mobile Forensic System from MSAB, designed for digital forensic labs. MSAB Office allows investigators to access all possible methods to recover data from a mobile device. It allows full access to thousands of mobile devices with all the necessary hardware supplied to operate on your Windows PC. XRY is a purpose-built software-based solution, complete with all necessary hardware for recovering data from mobile devices in a forensically secure manner. MSAB Office can achieve more and go deeper into a mobile device to recover vital data.

With a choice of Logical, Physical, Cloud and Pinpoint recovery tools for all supported devices: the Office kit works on your PC to produce a secure forensic report containing data extractions from mobile handsets.

MSAB Field

Ideally suited for mobile units in demanding conditions who need rugged technology. MSAB has developed this shock resistant and weather-proof all-in-one version of its mobile forensic system which works effectively, minimizing problems and support issues. The MSAB Field Version meets the tough specifications of MIL-STD – 810G and IP65 compliance.

The MSAB Field is a flexible platform which is quick and easy to use and export data in different formats for Triage, Analysis and operational decision making. The MSAB Field incorporates all of these features to allow users to perform a complete and rapid extraction in one black box solution.

XAMN Horizon

XAMN Horizon provides an immediate overview of the connections between different people of interest, and helps you discover additional individuals that may be relevant to your investigation. XAMN Horizon builds on XAMN Spotlight with four added viewing capabilities. These views enable you to discover and investigate data from different perspectives. The Geographic view lets you navigate data by location to see where calls were made or received, pictures taken and more. The Conversation view enables to view messages in a thread – including direction (to and from) as well as timestamps, attachments, and other important data. Use the incredibly powerful Connection view to discover and investigate the interactions between different device owners and accounts.

XAMN Element

The fastest route from undecoded data to solid evidence. XAMN Elements is the most advanced tool available today for mobile forensic data analysis and reconstruction. It is an advanced hex carving tool for experts, designed to help expert users dig deeply into undecoded or fragmented data in order to bookmark, reconstruct, and validate crucial pieces of information that would otherwise be unavailable. And very importantly, Elements makes it easier to defend the validity of your findings. Its intuitive modern user interface combined with the software’s high performance significantly cuts down processing time.

XRY PinPoint

The solution for non-standard mobile devices. PinPoint is not just another Chinese chipset solution. It is a totally integrated solution for undocumented mobile devices, typically manufactured in Eastern Asia, with an advanced solution comprised of compact hardware and powerful software. Fully integrated, it uses the familiar and easy to use interface of the XRY application. It is continuously updated so it stays current and improves over time. PinPoint supports devices with chipsets from MediaTek, SpreadTrum, Coolsand/RDA and Infineon.

MD-NEXT

MD-NEXT is the forensic software for the data extraction of mobile devices. It supports physical and logical extraction methods for Android, iOS, Windows OS, Tizen OS and another smartphone OS. Bootloader, Custom image, ADB Pro, Chip-off flash memory with MD-READER, JTAG-connected board with MD-BOX, OS standard backup protocol, Device specific backup protocol, extraction agent app and other cutting-edge extraction technology are integrated into MD-NEXT.

MD-RED

MD-RED is the mobile forensic analysis software supporting the decryption, recovery, advanced filtering, visualization and reporting of the mobile device data image extracted with MD-NEXT or other extraction tools. The analysis software can help forensics examiners, investigators and corporate auditors to find out digital artifacts faster and exactly. The forensic reports are used for the investigation of crimes and accidents. Also, the analysis scripts of latest mobile apps are quickly updated by continuous research.

MD-BOX

MD-BOX is the forensic hardware for extracting data directly from the mainboard using JTAG interface. When the mobile device has damage on the external parts, but the mainboard still works, the examiner can connect the mainboard to MD-BOX through the JTAG interface. Then, the data can be extracted at the menu of JTAG Extraction in the MD-NEXT program.

MD-READER

MD-READER is the forensic hardware for extracting data directly from the flash memory detached from the mainboard of a digital device. The detached flash memory needs to be mounted into one of the memory sockets bundled with MD-READER. Then, the data extraction can be done at Chip-off menu in MD-NEXT program

MD-MR

MD-MR is the package of hardware devices for detaching memory chips from mainboard of a mobile phone or a digital device. When the device is severely broken, burnt, or drowned, MD-MR is used before Chip-off forensics. MD-MR includes 5 flash memory sockets for MD-READER, heat blower, soldering station, fume extractor, microscope with optional components of mobile device dryer, rework system and mobile device safety bo

PC-3000 Mobile

The PC-3000 Mobile is a hardware-software solution intended for recovering evidence from mobile devices such as mobile phones, smartphones, tablets as well as other devices that use solid-state drives and NAND memory chips as internal memory. Depending on the condition of the device and circumstances of the exact case, the PC-3000 Mobile provides several approaches to get evidence: high-level access by conventional means, in-depth research that includes the disassembling of the storage media and Chip-off methods, or uploading previously created images for further analysis.

E3:DS

E3:DS is an advanced mobile forensic extraction and analysis system. The E3:DS system supports Logical extractions, Physical extractions, Lock & password bypassing, File system extraction, Cloud data extraction, Chip Dump extraction and processing of extractions from all types of smartphones, feature phones, and GPS devices.

In addition to extraction options, E3:DS supports analytics of the data collected to include the processing of App data, searching and indexing, OCR of data, image carving, and data recovery.