Mobile Device Investigator is one of the best mobile device forensic tools to scan unlocked iOS and Android devices (smartphones and tablets) for rapid collection to speed your mobile investigations with the mobile phone forensic software that gives investigators out-of-the-box or custom search profiles to help you identify any type of cybercrime including fraud, white collar crime, internet crimes against children, CSAM, CEM, Human Trafficking, etc.

• Advanced logical acquisition of iOS/Android data up to 4GB per minute
• Creates Load File during the acquisition of an Android or iOS device
• Live Preview Mode – View phone content immediately without waiting for a backup or imaging to finish
• Screen Recording for Android and iOS (up to Android 14 and iOS 17) with Preserved Audio
• Auto-scroll when taking screenshots of long pages on Android
• Support for the Developer Mode on iOS 17 and Android 14
• Scan and acquisition support for iOS 17 and Android 14
• Artifact collections are collected in parallel to accelerate their collection
• Connect a suspect device via a USB port to preview content instantly
• Capture and organize screenshots of connected devices while navigating with automatic OCR processing to extract and index text for search, annotation, and reporting
• Scan full mobile device acquisitions and detect keychain/keystore files (GrayKey, UFED)
• Scan GrayKey images and present a comprehensive list of files and artifacts
• Direct access to the Capture screen with the ability to define the time range of data collection, define collection per app in a Search Profile, and exclude folders from the scan
• Speed your scan by prioritizing keyword indexing in the viewer to save scan time
• Recover call records, messages, saved contacts, and calendar data
• Recover Web browsers, browsing history, download history, search terms, form data, bookmarks and cache contents
• Recover deleted records from apps using the SQLite database
• Recover WiFi connections, installed applications and Android user accounts
• Recover pictures, videos, audio files, documents, and user-defined file types
• Recover database files and Property Lists for later review
• Recover and process deleted partitions
• Search for specific information using keywords, regular expressions, hash values, and PhotoDNA
• Identify files or artifacts containing terms related to child exploitation
• Categorize files that match Project VIC or CAID datasets in real-time
• Automatically encrypt backup to obtain more data on iOS devices

With our forensic tool for mobile devices, quickly go through recovered data and evidence with ADF’s powerful evidence viewer to explore gigabytes of information in minutes.

• Leverage facial analysis age detection to quickly sort and identify infants, toddlers, children, and adults
• View chat conversations with bubbles to easily identify the senders and receivers with “Message Thread” hyperlink to select individual conversations
• View thumbnail(s) of attached reference files (displays them in the HTML/PDF report as well)
• In gallery view, filter out images that aren’t rendered
• Easily navigate through the recovered files and artifacts in a single timeline view
• View all similar apps on a single standardized view for rapid review
• View recovered pictures in an easy to navigate and configurable gallery view and quickly eliminate pictures that are not photographs
• View videos using MDI’s comprehensive video preview and frame extraction capabilities
• View pictures and videos organized by visual classes such as people, faces, currency, weapons, vehicles, and indecent images of children
• View links between files of interest and user activities such as recently accessed files, downloaded files, attachments, and more
• View highlighted encrypted files in the scan summary
• Viewer: the ability to redact previews when exporting a report
• Viewer: undock Frames panel tab
• Filter search results with sorting and search capabilities (dates, hash values, tags, text filters, and more)
• Search scan results using keywords, with results categorized by record type
• Add tags and comments to document your findings
• ADD-ON: Entity Extraction and Language Translation Gisting (230 languages) available

• Precisely select which files and artifacts to export
• Import hash values from a VICS/CAID database with the possibility to select categories
• Import keyword list and prompt for default tags and comments if none are in the CSV file
• Import hash values from the CSV file and prompt for default tags and comments if none are in the CSV file
• Export errors when importing keywords or hash values
• Log issues when importing data
• Customize your report to show specific columns and redact pictures
• Present information in a table or list
• Include original files or previews only
• HTML, PDF, and CSV reporting options
• Export to other forensics applications with VICS / Project VIC (JSON) or CSV formats
• Share scan results with a portable standalone viewer