Getting started with ADF
Congratulations! You've received your new ADF digital forensic software and you're ready to get started with your digital investigations. Find the information for your product below: Digital Evidence Investigator (DEI), Triage-Investigator (TINV), Triage-G2 (TG2), and Mobile Device Investigator (MDI).
What's in the Kit?
DEI and TINV
- Authentication Key: A USB dongle containing your license file
- Collection Key: A 500 GB high-speed USB SSD drive
- 4 Port USB Hub: To attach multiple USB devices
TG2
- Collection Key: A 500 GB high-speed USB SSD drive with a license file
- 4 Port USB Hub: To attach multiple USB devices
PRO Versions also Include
- Android cables: USB-A to Micro-USB; USB-A to USB-C
- iOS cables: USB-A to iOS Lightning; USB-A to iOS 30-pin
MDI
- Android cables: USB-A to Micro-USB; USB-A to USB-C
- iOS cables: USB-A to iOS Lightning; USB-A to iOS 30-pin
How to Obtain your License File
Follow the instructions from our user guide.
Important Links
System Requirements
See the system requirements in the Installing the ADF Application guide.
Installation
- Download and execute the installer of your product from www.adfsolutions.com/downloads
- Follow the installation wizard instructions
- Some additional libraries are required for the correct functioning of the ADF desktop applications. See the complete procedure in the Installing the ADF Application guide.
- After the installation is complete, the application will start automatically and search for the license file
- For DEI, TINV, and PRO versions, insert the Authentication Key
- For TG2 and TG2 PRO, insert the Collection Key
- For MDI, place your license file as indicated here
Using the Application
DEI and TG2 Home Page
- Scan - to scan attached storage devices, drive images, phone logical acquisitions, and folders
- Prepare Collection Key - to prepare a USB Collection Key to be used directly on a suspect computer
- Image - to image attached storage devices and backup mobile devices
- Review Scan Results - to review existing scan results and create reports
- Setup Scans - to define your own search criteria and save in a Search Profile
- Settings - to view licenses and modify tags and data folders
- User Guides - to view the User Guides
TINV Home Page
- Scan - to scan attached storage devices, drive images, phone logical acquisitions, and folders
- Prepare Collection Key - to prepare a USB Collection Key to be used directly on a suspect computer
- Image - to image attached storage devices and backup mobile devices
- Review Scan Results - to review existing scan results and create reports
- Settings - to view licenses and modify tags and data folders
- User Guides - to view the User Guides
MDI Home Page
- Scan - to scan a connected Android/iOS device or an Android/iOS advanced logical acquisition
- Acquire Android/iOS Devices - to perform an advanced logical acquisition of a connected Android/iOS device
- Screenshots - to take screenshots of a connected Android/iOS device that can later be scanned
- Preview - to collect media files and artifacts without waiting for the backup to complete
- Review Scan Results - to review existing scan results and create reports
- Setup Scans - to define your own search criteria and save in a Search Profile
- Settings - to view licenses and modify tags and data folders
- User Guides - to view the User Guides
How to Scan a Suspect Computer (DEI, TINV, TG2)
Prepare the Collection Key first (Home page > Prepare Collection Key) and then use it on:
- A Windows computer that is turned on by plugging-in the Collection Key, opening a file explorer, and double-clicking the start.bat file
- A Mac, Linux, or Windows computer that is turned off by plugging-in the Collection Key, accessing the UEFI firmware or BIOS to boot the system from USB devices. You can find out how to access the UEFI or BIOS by searching online for “bios hotkey” and the brand/model of the computer
How to Scan a Mobile Device (MDI and PRO)
To scan an Android/iOS device, from the Home page:
- Select Scan
- Select the target by clicking the Add Phone button
- A wizard will guide you through how to properly connect the device. It is best to use the provided cables on a USB 3.0 port.
- Once the device is ready it will appear selected in the Target Devices section
- Select the Search Profile that best corresponds to your data collection goals
- Verify the scan information
- Click on the SCAN button
How to Prepare an Android Device for Scanning
In general, for Android devices to be backed-up or scanned, you have to:
- Know the passcode to unlock the device
- Prevent auto-locking
- Place the device in airplane mode
- Activate the developer mode
- Activate the USB debugging mode
- Authorize the execution of apps from unknown sources
- Upon connecting the device, if it is not seen by Windows, make sure the USB connection mode is set to transfer file
- Allow USB debugging when prompted on the device (always allow)
How to Prepare an iOS Device for Scanning
In general, for iOS devices to be backed-up or scanned, you have to:
- Know the passcode to unlock the device
- Prevent auto-locking
- Place the device in airplane mode
- Trust the host computer when prompted on the device
How to View the Scan Results
It is possible to view the data collected (scan results) during a scan, while a scan is paused, or after a scan. From the Home page:
- Select Review Scan Results
- Click on the View button of the scan result to open
- Navigate through the collected data from the left Navigation bar or the Summary page
- Use the right toolbar to see more or less columns, filter records, assign tags and comments, and view the classifier progress
How to Create a Report
To share relevant findings, navigate to the Report screen:
- Select the report format
- Select the content to include in the report per view and per tagged record
- Click on the EXPORT button
Have more questions? We're here to help!
