Today, we are going to demonstrate a MOBILedit Forensic Express for Advanced Mobile Phone Forensics Investigation.
So, let’s start. Please check the POC Video at the end of the article.
What is Mobile Phone Forensics?
Mobile phone forensics is a type of electronic data gathering for legal evidence purposes. It is a useful software for investigators as a method of gathering criminal evidence from a trail of digital data, which is often difficult to delete. The Extraction of deleted mobile phone files used as criminal evidence is the primary work of mobile phone forensics investigators.
With MOBILedit Forensic Express, you can extract all the data from a phone with only a few clicks. It includes deleted data, call history, contacts, text messages, multimedia messages, photos, videos, recordings, calendar items, reminders, notes, data files, passwords, and data from apps such as Skype, Dropbox, Evernote, Facebook, WhatsApp, Viber, Signal, WeChat and many others.
MOBILedit Forensic Express automatically uses multiple communication protocols and advanced techniques to get maximum data from each phone and operating system. Then it combines all data found, removes any duplicates and presents it all in a complete, easily readable report.
MOBILedit Forensics is advanced phone forensic software, it is Extract and deeply analyze phone content including, deleted data, application’s data, passwords, geolocations, and anything that might reside in the phone. Professional software for authorities as well as for enterprise and end-users. It’s also able to bypass the passcode, PIN, and phone backup encryption.
- MOBILedit forensics Express
- Mobile Phone with (USB Debugging must be enabled.)
Download the MOBILedit Forensic Express from
Install on your PC.
Now Click on MOBILedit Forensic and click on start.
In the next step, it will start searching for devices connect your device with data cable
Note: USB Debugging must be enabled.
Now select your device and then click next option.
It will ask to acquire all phone data that we needs to install connector app on the device, click on Install.
Click ok if your phone is not rooted.
Rooted is required if you want to get maximum information including deleted and application data like Whatsapp and Facebook messages and more .
Select specific selection and click on next button.
Click on select all and next button. In this step you can select the specified data which you want to extract form the device .
In this step fill the case details in the text field then click on next.
Now select the report format and also the exports backup.
Here, we have 4 options for backup our exports like MobiLedit backup, MobiLedi export, Cellebrite UFDR and ADB backup.
Select the destination folder where you want to save the result and backup, after that click on export.
Now wait for the exporting and analyzing data once it completed, click on the report folder and see the result.
Result in PDF format
Result of 009_calls.pfd
Watch POC Video
Disclaimer: This tutorial is knowledge purpose only.