MobilEdit Forensic Express

MOBILedit Forensic Express – Cellphone Data Extraction
It is a phone and cloud data extractor, data analyzer and report generator all in one solution. A powerful 64-bit application using both the physical and logical data acquisition methods, MOBILedit is excellent for its advanced application analyzer, deleted data recovery, cellphone applications immediate updates, wide range of supported phones including most feature phones, fine-tuned reports, concurrent phone processing, and easy-to-use user interface. (All Logical Acquisition, Physical Acquisition, File System Acquisition, Triage)

 

Features
Main Features:

 

Phone Unlocking
Physical Data Acquisition – Android and KaiOS
Advanced Cellphone Application Analysis
Immediate Cellphone Application Update
Retrieve Deleted Data
Comprehensive and Easy to Read Reports
Reports in any Language
Concurrent Extractions of Multiple Phones at the same time
Easy to use UI
Data Live View

 

There are more feature with the Pro version

 

Technical Specs
Main functions
Phone extractor with extremely wide range of supported phones
iTunes backup analyzer
Android ADB backup analyzer
Applications data analyzer
Report generator
Phone unlocking
Supported platforms
Logical and advanced logical extraction
Android from version 1.x to 11.x
iOS from version 1.x to 14.x
Windows 10 Mobile
Windows Phone 7 – 8.1
Windows CE
BlackBerry OS
Symbian
Samsung Bada
Many feature phones from various vendors
Apple Watch with WatchOS – direct reading through diagnostic connector
SIM cloning by using smart-card reader (sold separately)

 

Physical extraction
Android
KaiOS
Various feature phones

 

Open/Import files
iTunes backup
Android ADB backup file
Reveal iTunes backups
Data from folder
Data from the ZIP file
Physical image
Huawei backup folder
Xiaomi MIUI backup folder
Samsung SmartSwitch backup file
Samsung feature phone
MOBILedit Backup XML
MOBILedit backup package

 

Exports and reports
HTML – creates site structure for easy data browsing using any browser
PDF – Acrobat reader single file or multiple files
XML – Excel
XLS – Excel workbook
UFDR – Cellebrite report file
MOBILedit export structure of files with parsed data from phone
MOBILedit backup structure of raw files from phone
MOBILedit export and backup can be compressed and encrypted using AES and protected by MD5 or SHA256 hashes.

 

Live cellphone applications updates
We believe that phone forensics strongly relies on updates, so we have introduced unique Live Update system, which allows for a fast and frequent updates of important functionalities without reinstalling the software.
Live updates are available for following modules
Application analysis script files
Report translations
Application downgrade files
Recovery images
iOS developer images for screenshot support
File Exclude List

 

Supported file systems for physical analysis
ext4/ext3/ext2 F2FS APFS HFS+/HFS NTFS FAT32/FAT16/FAT12 ExFAT YAFFS2 UFS2/UFS1 ISO 9660

 

Application downgrade
AliExpress
Google Chrome
BBM
Dropbox
Evernote
Facebook
Facebook Messenger
Google Docs
Google Maps
Instagram
KakaoTalk
Keepsafe
Wickr
Skype
Snapchat
WeChat
Todoist
Truecaller
Twitter
Viber
WhatsApp
Wunderlist
MiTalk
LINE
Dolphin browser
Firefox
Telegram
Periscope

 

Languages
Generated reports are available in following languages
English/ Spanish/ Portuguese/ German/ Estonian/ Chinese/ Korean/ Dutch /Polish /Slovak /Czech

 

Full product User Interface
English /Spanish /Portuguese /Chinese /Slovak /Czech

 

Integration
We understand an investigator may use many tools in an investigation. We’ve designed our software with the ability to integrate with other forensic tools in your lab. Import and analyze data files exported from Cellebrite UFED and Oxygen reports to uncover potentially overlooked data. Export all MOBILEdit Forensic Express data to UFED, so you can use the UFED Viewer or Analytics for further processing to move your investigation forward.

 

Contacts
Three unique reports help uncover the suspect’s connections.
The Contacts Report presents all contact details fully retrieved and analyzed, including deleted contact details when available. Contact recovery scope is from multiple sources such as phone book and memory, vCard files, SIM card, cloud accounts and applications. Search a report directly for names, numbers, deleted contacts or other information. The report informs the investigator when the contact was created, when it was last modified and which account type it is (WhatsApp, Cloud, Gmail, Facebook etc.). Find important information such as phone numbers, email address, home address, birthday, employer, and contact profile pictures to help you put a face to a name.
With a Contact Analysis Report find out who the suspect has been in contact with the most, and discover crucial connections. Contact Analysis will detail the number of sent and received messages and calls including total minutes of talk-time for each contact, sorted in descending order by the number of communication events with the suspect.
The Contact Accounts Report will help the investigator find all phone, email, cloud and applications accounts associated with the suspect’s device.