Mobile Device Forensics

"With an ever-increasing number of adults owning a smartphone, it is no wonder that more and more crime investigations now commonly require mobile device evidence collection and analysis. Most frontline agents own smartphones themselves and they likely have some familiarity with how to operate different types of devices but collecting mobile device evidence on-scene can be challenging, especially in volatile, high-pressure, or time-based environments."  - ADF Solutions

Mobile Phone Forensics

Today's smartphones can perform functions that were possible only with a computer a few years ago. Many applications are only supported by smartphones, with developers choosing to ignore cross-platform development for computers entirely. You may use your computer at work and at other intermittent times throughout the day, but you don't have constant access all the time as you do with the phone in your pocket.

Cell phones are used for everything from making calls and sending texts to transferring money and storing confidential documents and storing pictures of all kinds. Cell phones store millions of data records in the form of emails, messages, pictures, location data, financial information, and thousands of other types of data. Much of this data can be recovered even if it has been deleted.

digital-forensics-mobile-phone-forensics.webp
laptop.png

iOS and Android Forensic Software

With the easy-to-use Mobile Device Investigator forensic software from ADF, we can leverage the power of Artificial Intelligence (AI) and Machine Learning (ML) to quickly and easily collect evidence from iOS and Android phones and tablets. ADF MDI is the ultimate field mobile forensics software for the front-line solution for our field agents and investigators. 

Our mobile forensic software tools allow for smartphone triage and empower our field agents to collect witness and suspect evidence on scene. Our investigators can leverage the power of Artificial Intelligence (AI) and Machine Learning (ML) to quickly and easily collect evidence on mobile devices.

 

Data Collection

Our forensic agents can scan unlocked iOS and Android devices for rapid collection to speed up the mobile investigation with our MDI custom search profiles to help identify any type of cybercrime including fraud, white collar crime, internet crimes against children, CSAM, CEM Human trafficking, and more.

  • Connect a suspect device via USB port to preview content instantly

  • Capture and organize screenshots of connected devices while navigating with automatic OCR processing to extract and index text for search, annotation, and reporting

  • Scan GrayKey images and present a comprehensive list of files and artifacts

  • Speed your scan by prioritizing keyword indexing in the viewer to save scan time

  • Recover call records, messages, saved contacts, and calendar data

  • Recover Web browsers, browsing history, download history, search terms, form data, bookmarks, and cache contents

  • Recover deleted records from apps using the SQLite database 

  • Recover WiFi connections, installed applications, and Android user accounts

  • Recover pictures, videos, audio files, documents, and user-defined file types

  • Recover database files and Property Lists for later review

  • Search for specific information using keywords, regular expressions, hash values and PhotoDNA

  • Identify files or artifacts containing terms related to child exploitation

  • Categorize files that match Project VIC or CAID datasets in real-time

  • iOS devices: Automatically encrypt backup to obtain more data

field triage.jpg
forensic anlyasis.jpg

Analyze Data

With our forensic tool for mobile devices, we can quickly go through recovered data and evidence with our MDI's powerful evidence viewer to explore gigabytes of information in minutes. 

  • View chat conversations with bubbles to easily identify the senders and receivers with “Message Threads” hyperlink to select individual conversations

  • Easily navigate through the recovered files and artifacts in a single timeline view

  • View all similar apps on a single standardized view for rapid review

  • View recovered pictures in an easy-to-navigate and configurable gallery view and quickly eliminate pictures that are not photographs

  • View videos using MDI's comprehensive video preview and frame extraction capabilities

  • View pictures and videos organized by visual classes such as people, faces, currency, weapons, vehicles, and indecent images of children

  • View links between files of interest and user activities such as recently accessed files, downloaded files, attachments, and more

  • Filter search results with sorting and search capabilities (dates, hash values, tags, text filters, and more)

  • Leverage facial analysis age detection to quickly sort and identify infants, toddlers, children, and adults 

  • Add tags and comments to document your findings

Forensic Report

ADF's mobile investigator software can easily create comprehensive reports to highlight your findings and select the format most suitable for your audience.

  • Precisely select which files and artifacts to export

  • Customize your report to show specific columns and redact pictures

  • Present information in a table or list

  • Include original files or previews only

  • HTML and PDF reporting options

  • Export to other forensics applications with VICS / Project VIC (JSON) or CSV formats

  • Share scan results with a portable standalone viewer

mobile-forensics.jpg