Mobile Investigations

Everyone Has a Phone

Today nearly every digital forensic investigation deals with evidence from cell phones and tablets, and we refer to this branch of digital investigations as "mobile forensics". Fortunately there are a number of vendors providing software and hardware tools specifically targeting the needs of mobile forensics.

 

Diagram mobile forensics workflow

Mobile Investigation Workflow

Traditional computer forensics often starts with the imaging of the computer's storage devices: HDDs, SSDs, etc. The workflow for mobile investigations is often much more interactive, involving the selection and extraction of specific data. Software for mobile investigations also typically includes tools specifically geared towards the analysis and visualization of mobile data and artifacts, things like message threads and GPS/location data.

Software for Mobile Investigations

Passware block 300x200

Passware Kit Forensic ● Passware Kit Mobile

Passware

Password Recovery and
Mobile Acquisition
Buy now
Oxygen forensics block 300x200

Oxygen Forensics Detective

Oxygen Forensics

Mobile and cloud forensics
Contact us
Magnet black block 300x200

Axiom

Magnet Forensics

Computer and Cell Phone Forensics
Contact us
Detego block 300x200

Unified
Digital Forensics Platform

Detego

Extract. Exploit. Examine.
Buy now
Hancom block 300x200

MD-Live ● MD-Next ● MD-Red

HancomGMD

Mobile Forensics
Buy now
Blackbag block 300x200

BlackLight ● Mobilyze
● Macquisition

BlackBag Technologies

Forensics for Mac & Windows
Visit BlackBag
Paraben block 300x200

Paraben

 

Computer and cell phone forensics
Contact us
Cellebrite block 300x200

UFED

Cellebrite

Cell Phone Forensics
Visit Cellebrite

Connect

Capturing evidence from cell phones and tablets is one of the biggest hurdles in mobile forensics. Unlike a computer, it's often impractical to create a forensic image of the mobile device's internal storage. Instead, it's generally necessary to use a specialized tool to acquire data from the mobile device.

Passware Kit Mobile

Passware kit mobile apple acquisition

Detego MD-LIVE

Detego md live connect

Select & Extract

Mobile devices have "apps" (mobile applications) and each one can generate data and artifacts that may be relevant in an investigation. Tools like those from Detego and Oxygen Forensics give the investigator the ability to browse and understand data generated by a range of mobile applications.

Detego MD-LIVE

Detego md live select

Analyze & Visualize

Mobile investigation software makes it easy to understand the nature of the data found on the mobile device, grouping data by source application and type (image, etc).

Detego MD-LIVE Analysis

Detego md live analysis

Detego MD-LIVE Visualization

Detego md live visualization

Decryption

It is becoming the norm for Mobile acquisitions to present the investigator with encrypted images and files. Fortunately, Digital Intelligence partners like Passware are at the forefront of dealing with encryption and finding practical ways for investigators to decrypt evidence acquired from mobile devices.

Passware is unique in that it develops its own mobile-focused software - Passware Kit Mobile - while also licensing its decryption technology to many of the top-tier forencis software vendors.

Passware Kit Mobile

Passware kit mobile huawei

 

Oxygen Forensics is one of the top tier forensic vendors that licenses Passware's decryption technology. Oxygen combines Passware's underlying decryption technology with its own proprietary mobile acquistion technology.

Oxygen Forensic Extractor

Oxygen encrypted backups

Jumpstart the Software Learning Curve with Digital Intelligence Training

Acquiring tools is step one. Using them effectively while sifting through complex regulatory challenges often requires a step learning curve. Let Digital Intelligence help. We offer technology, product, and process training to build the skills need to work efficiently in a changing digital landscape.

We define and conduct training based on your experience, knowledge level, and professional goals. At our training location or yours. learn more

Enhance Your In-House Capabilities with Digital Intelligence Forensic Services

Looking for an alternative to the traditional "buy, learn, and use" model of software ownership? Digital Intelligence Forensic Services offers price competitive options. Our skilled, certified, and in-house services staff have decades of digital forensic and eDiscovery case work experience. Contact us to learn more about our capabilities, creative service options, and collaborative approach to working for you. learn more

Technical Support You Can Count On

When you purchase from Digital Intelligence, you’re getting the best forensic products money can buy. But the value doesn’t stop there. You get lifetime technical support and access to a professional, dedicated support team. We measure our success not just by the number of systems we sell but also by the level of support we provide. Whether it’s a question about your FRED, UltraBlock, Imager or software – or a question about a forensic problem you face – we have your back. Call, email, or text. We are here for you.

Ready to buy? Shop in our online store!