Scan unlocked iOS and Android devices (smartphones and tablets) for rapid collection to speed your investigations with the best mobile phone forensic software that features out-of-the-box or custom search profiles.
- Screen Recording for Android and iOS Devices (up to Android 14 and iOS 16)
- Screenshots: auto-scroll when taking screenshots of long pages on Android
- Screenshot: support for the Developer Mode on iOS 16 and Android 14
- Scan and acquisition support for iOS 16 and Android 14
- Live Mobile Preview - start viewing phone content immediately without waiting for a backup or imaging to finish
- Scan GrayKey images and present a comprehensive list of files and artifacts
- Scan full mobile device acquisitions and detect keychain/keystore files (GrayKey, UFED)
- Artifact collection are collected in parallel to accelerate their collection
- Capture and organize screenshots of connected devices while navigating with automatic processing to extract and index text for search, annotation, and reporting
- Speed your scan by prioritizing keyword indexing in the viewer to save scan time
- Recover call records, messages, saved contacts and calendar data
- Recover Web browsers, browsing history, download history, search terms, form data, bookmarks and cache contents
- Recover deleted records from apps using the SQLite database
- Recover WiFi connections, installed applications and Android user accounts
- Recover pictures, videos, audio files, documents and user-defined file types
- Recover database files and Property Lists for later review
- Recover and process deleted partitions
- Search for specific information using keywords, regular expressions, hash values and PhotoDNA
- Scan Setup: define the time range of data collection, define collection per app in a Search Profile, and exclude folders from the scan
- Scan Setup: deploy user-created Captures to the Collection Key when not using Search Profiles
- Scan Setup: direct access to the new Capture screen
- Scan: process logical images from the new data container
- Image: create new log files for logical images
- Image: use new and simplified data container to store Mac logical images (no more experimental AFF4-L)
- Scan: add scan and acquisition support for iOS 16.x
- Identify files or artifacts containing terms related to child exploitation
- Categorize files that match Project VIC or CAID datasets in real-time (VICS 2.0)
- Comprehensive advanced logical backup using default platform backup protocol, backup agent and media transfer protocol
- iOS devices: Automatically encrypt backup to protect collected data
- Acquire up to 4GB of data per minute
Quickly go through the recovered data with the powerful results viewer to explore gigabytes of information in minutes.
- View chat conversations with bubbles to easily identify the senders and receivers with “Message Thread” hyperlink to select individual conversations
- Easily navigate through the recovered files and artifacts
- View all files and artifacts in a single timeline view
- View all similar apps on a single standardized view for faster review
- View recovered pictures in an easy to navigate and configurable gallery view
- Quickly eliminate pictures that are not photographs
- View videos using MDI's comprehensive video preview and frame extraction capabilities
- View pictures and videos organized by visual classes such as people, faces, currency, weapons, vehicles and indecent pictures of children
- View links between files of interest and user activities such as recently accessed files, downloaded files, attachments and more
- View highlighted encrypted files in the scan summary
- Viewer: ability to redact previews when exporting a report
- Viewer: undock Frames panel tab
- Filter search results with sorting and search capabilities (dates, hash values, tags, text filters and more)
- Leverage facial analysis age detection to quickly identify infants, toddlers, children, adults
- Add tags and comments to document your findings
- ADD-ON: Rosoka Entity Extraction and Language Translation Gisting (230 languages) available
Easily create comprehensive reports to highlight your Mobile Device Forensics findings and select the format most suitable for your audience.
- Precisely select which files and artifacts to export
- Customize your report to show specific columns and redact pictures
- Present information in a table or list
- Include original files or previews only
- HTML and PDF reporting options
- Export to other forensics applications with VICS / Project VIC (JSON) or CSV formats
- Share scan results with a portable standalone viewer
.
The Mobile Device Investigator Field Tablet Kit includes:
- Dell Latitude 7220 (USA) with Intel® Core™ i5, 8GB RAM, 512GB
- The tablet is licensed with Mobile Device Investigator® Software
- USB cables for iOS
- USB cables for Android
- PelicanTM case
- Software Maintenance and Support
Request a Quote
Recommended Technical Specs:
- Windows 10 64-bit
- Intel i7 CPU
- 16GB of RAM
- 500GB PCIe NVMe SSD hard drive
Request a Quote
ADF Solutions digital forensic experts designed the Mobile Device Investigator (MDI) Certified User training to equip both technical and non-technical investigators with the knowledge and skills they need to use MDI to immediately extract conclusive intelligence and evidence from iOS and Android devices.
Course Length
8 Hours: Learners typically take approximately 8 hours to successfully complete the exercises and the final certification exam.
Course Outline
- Mobile Device Investigator - Introduction and Installation
- Connecting a Device and Instant Preview
- Conducting a Scan and Capturing Mobile Screenshots
- Case Study 1 - Navigating and Analysis
- Case Study 2 - Hash Captures
- Case Study 3 - Keywords
- Case Study 4 - Identification and Embedded Files
- Wrap-up and Final Exam Preparation
- Final Exam
Cost
$695 Online Self-Paced Class (Buy Online Now)
In-Person for Your Team (Request a Quote)