Getting started with ADF
Congratulations! You've received your new ADF digital forensic software and you're ready to get started with your digital investigations. Find the information for your product below: ADF PRO, Digital Evidence Investigator (DEI) and Mobile Device Investigator (MDI).
What's in the Kit?
DEI
- Authentication Key: A USB dongle that will store your license file (see how to obtain it below)
- Collection Key: A 500 GB high-speed USB SSD drive
- 4 Port USB Hub: To attach multiple USB devices
- HDMI capture device and 2 HDMI cables
ADF PRO Version also Include
- Android cables: USB-A to Micro-USB; USB-A to USB-C
- iOS cables: USB-A to iOS Lightning; USB-A to iOS 30-pin
- Bluetooth dongle to remote control iOS devices
MDI
- Android cables: USB-A to Micro-USB; USB-A to USB-C
- iOS cables: USB-A to iOS Lightning; USB-A to iOS 30-pin
- HDMI capture device and 2 HDMI cables
- Bluetooth dongle to remote control iOS devices
How to Obtain your License File
Follow the instructions from our user guide.
Important Links
System Requirements
See the system requirements in the Installing the ADF Application guide.
Installation
- Download and execute the installer of your product from www.adfsolutions.com/downloads
- Follow the installation wizard instructions
- After the installation is complete, the application will start automatically and search for the license file
- For the ADF PRO and DEI versions, insert the Authentication Key
- For MDI, place your license file as indicated here
Installing 3rd Party Libraries
The following 3rd party libraries should be installed to activate some features:
- Acquire and scan iOS devices: you need to download and install iTunes
- Boot scan Windows computers: you need to download and install both the Windows ADK and the WinPE add-on.
- Play video files inside the ADF application: you need to download and install these video codecs.
- Acquire and scan Android devices: you need to download Samsung Android USB Driver.
Using the Application
DEI Home Page
- Scan - to scan attached storage devices, drive images, phone logical acquisitions, and folders
- Prepare Collection Key - to prepare a USB Collection Key to be used directly on a suspect computer
- Image - to image attached storage devices and backup mobile devices
- Review Scan Results - to review existing scan results and create reports
- Setup Scans - to define your own search criteria and save in a Search Profile
- Settings - to view licenses and modify tags and data folders
- User Guides - to view the User Guides
MDI Home Page
- Scan - to scan a connected Android/iOS device or an Android/iOS advanced logical acquisition
- Acquire Android/iOS Devices - to perform an advanced logical acquisition of a connected Android/iOS device
- Screenshots - to take screenshots of a connected Android/iOS device that can later be scanned
- Preview - to collect media files and artifacts without waiting for the backup to complete
- Review Scan Results - to review existing scan results and create reports
- Setup Scans - to define your own search criteria and save in a Search Profile
- Settings - to view licenses and modify tags and data folders
- User Guides - to view the User Guides
How to Scan a Suspect Computer (DEI and ADF PRO)
Prepare the Collection Key first (Home page > Prepare Collection Key) and then use it on:
- A Windows computer that is turned on by plugging-in the Collection Key, opening a file explorer, and double-clicking the start.bat file
- A Mac, Linux, or Windows computer that is turned off by plugging-in the Collection Key, accessing the UEFI firmware or BIOS to boot the system from USB devices. You can find out how to access the UEFI or BIOS by searching online for “bios hotkey” and the brand/model of the computer
How to Scan a Mobile Device (MDI and ADF PRO)
To scan an Android/iOS device, from the Home page:
- Select Scan
- Select the target by clicking the Add Phone button
- A wizard will guide you through how to properly connect the device. It is best to use the provided cables on a USB 3.0 port.
- Once the device is ready it will appear selected in the Target Devices section
- Select the Search Profile that best corresponds to your data collection goals
- Verify the scan information
- Click on the SCAN button
How to Prepare an Android Device for Scanning
In general, for Android devices to be backed-up or scanned, you have to:
- Know the passcode to unlock the device
- Prevent auto-locking
- Place the device in airplane mode
- Activate the developer mode
- Activate the USB debugging mode
- Authorize the execution of apps from unknown sources
- Upon connecting the device, if it is not seen by Windows, make sure the USB connection mode is set to transfer file
- Allow USB debugging when prompted on the device (always allow)
How to Prepare an iOS Device for Scanning
In general, for iOS devices to be backed-up or scanned, you have to:
- Know the passcode to unlock the device
- Prevent auto-locking
- Place the device in airplane mode
- Trust the host computer when prompted on the device
How to View the Scan Results
It is possible to view the data collected (scan results) during a scan, while a scan is paused, or after a scan. From the Home page:
- Select Review Scan Results
- Click on the View button of the scan result to open
- Navigate through the collected data from the left Navigation bar or the Summary page
- Use the right toolbar to see more or less columns, filter records, assign tags and comments, and view the classifier progress
How to Create a Report
To share relevant findings, navigate to the Report screen:
- Select the report format
- Select the content to include in the report per view and per tagged record
- Click on the EXPORT button
Have more questions? We're here to help!
