MOBILedit Forensic Express pro是一款專業的可用於從手機收集證據的一體化工具。PRO版本專為尋求高級功能的用戶而設計的適用於所有執法人員，行業專家和專業取證。調查員在法醫工作過程中依賴於許多類型的數據。可以提取，分析和呈現的數據類型。提取的實際數據取決於具體的手機型號，操作系統及其狀態。執行移動電話內容提取，並被執法部門，軍隊以及公司和私營部門的專業人員使用。通過USB電纜，Wi-Fi或藍牙連接手機，您可以對大多數可用的移動設備進行單獨檢查，並生成多種格式的報告（PDF，HTML，Excel等），以滿足各種需求。此工具可以檢索消息，呼叫日誌，圖片，聯繫人，應用程序，日曆事件，電子郵件，密碼，媒體，文件系統，已刪除的數據等。在這裡查看所有可能性。您可以選擇要從設備中提取的特定數據 。只需要簡單的幾個點擊就能夠快速開始提取所有數據，即使已經刪除也能夠恢復和提取出來，MOBILedit Forensic Express自動使用多種通信協議和高級技術從每個電話和操作系統獲取最大數據。然後它將所有找到的數據組合在一起，刪除所有重複數據，並將其全部呈現在一個完整，易讀的報告中。MOBILedit Forensic Express版本6.0已經發佈， 我們從頭開發了一個全新的PDF生成器，現在速度更快，需要更少的內存並生成相同的漂亮報告。
MOBILedit Forensic Express is a phone and cloud extractor, data analyzer and report generator all in one solution. A powerful 64-bit application using both the physical and logical data acquisition methods, Forensic Express is excellent for its advanced application analyzer, deleted data recovery, wide range of supported phones including most feature phones, fine-tuned reports, concurrent phone processing, and easy-to-use user interface. With the password and PIN breaker you can gain access to locked ADB or iTunes backups with GPU acceleration and multi-threaded operations for maximum speed.
Forensic Express offers maximum functionality at a fraction of the price of other tools. It can be used as the only tool in a lab or as an enhancement to other tools through its data compatibility. When integrated with Camera Ballistics it scientifically analyzes camera photo origins.
All-in-one tool used to gather evidence from phones
With MOBILedit Forensic Express, you can extract all the data from a phone with only a few clicks. This includes deleted data, call history, contacts, text messages, multimedia messages, photos, videos, recordings, calendar items, reminders, notes, data files, passwords, and data from apps such as Skype, Dropbox, Evernote, Facebook, WhatsApp, Viber, Signal, WeChat and many others.
MOBILedit Forensic Express automatically uses multiple communication protocols and advanced techniques to get maximum data from each phone and operating system. Then it combines all data found, removes any duplicates and presents it all in a complete, easily readable report.
Phone unlocking
Forensic Express has a built-in phone unlocking feature for many phone models, allowing you to acquire a physical image even when the phone is protected by a password or gesture. It can bypass the lock-screen on a wide range of Android phones. It is ready to utilize the full potential of modified recovery images in order to perform physical acquisition with just a few clicks. Lock-screen patterns, gestures, PINs and passwords are no longer an obstacle in your way of acquiring any data from a wide variety of Android devices.
Physical data acquisition and analysis
In addition to advanced logical extraction we also provide Android physical data acquisition, allowing you to extract physical images of investigated phones and have exact binary clones. Physical analysis allows you to open image files created by this process, or those obtained through JTAG, chip-off or other tools to recover deleted files plus all other deleted data where our product is known to be excellent.
Advanced application analysis
The use of apps to communicate and share has grown rapidly. Many apps are released or updated everyday. It is obvious that the analysis of apps is vital to retrieving as much evidence as possible. This is the strongest point of MOBILedit Forensic Express, we dedicate a large part of our team specifically for application analysis. We employ adaptive and in-depth methods to ensure you retrieve the most data available for each app- especially recovering deleted data. Data is analyzed for its meaning so you see it on a timeline as a note, a photo, a video or a flow of messages no matter what app was used to send them.
Live Updates
The use of apps to communicate and share has grown rapidly. Many apps are released or updated everyday. It is obvious that the analysis of apps is vital to retrieving as much evidence as possible. This is the strongest point of MOBILedit Forensic Express, you get updates of application analysis live and as often as needed. Data is analyzed for its meaning so you see it on a timeline as a note, a photo, a video or a flow of messages no matter what app was used to send them.
Deleted data recovery
Deleted data is almost always the most valuable information in a device. It often hides in applications; and because this is our strongest expertise, we deliver great results in finding deleted data. Our special algorithms look deeply through databases, their invalidated pages and within caches to find any data that still resides in a phone. MOBILedit Forensic Express retrieves the deleted data and presents it clearly in a special section of the report.
Fine-tuned reports
A tremendous amount of effort has been dedicated to refining reports so they are customizable, easy to read, concise and professional. An enhanced report configurator allows you to define exactly which data will be extracted from the phone and how the report will look. Each report is divided into sections, labeled with icons, pictures, and highlighted relevant data so you can find evidence quickly. A complete, configurable and comprehensive list of all events with a time-stamp is shown on a timeline and messages can be filtered by conversation or by contact names.
Reports are available in PDF, XLS, or HTML formats, and you can generate data exports compatible with the other data analysis tools you use in your lab, such as UFED.
Password breaker with GPU acceleration
Gain access to locked backups of a phone by using our password and PIN breaker. Passwords can be cracked by performing a dictionary attack using our built-in dictionary, or you can use your own dictionary for other languages. Password breaker uses GPU acceleration and multi-threaded operations for maximum speed. Although iOS has well-protected data due to its on-the-fly hardware encryption, MOBILedit Forensic Express is able to penetrate this protection and retrieve the data using the lockdown method.
Concurrent extractions and new 64-bit engine
The new 64-bit engine provides stability and the ability to analyze huge amounts of data, apps with hundreds of thousands of messages, photos and other items, plus several phones at once. Speed up your investigation process by extracting multiple phones at the same time, and generating multiple outputs for each one. All you need is a USB hub, cables and a computer powerful enough to perform concurrent jobs. You can finish a week's worth of work overnight!
Easy to use UI
Having the right tool is not enough, you need the right staff to work with it. The shorter the learning curve the better. Because we have designed software for millions of consumers, it was a welcome challenge for us to make MOBILedit Forensic Express the most user-friendly forensic tool available. With a straightforward interface, each step is simple and guided with clear instruction. It is also optimized for touch screens allowing for easy use in the field.
Camera Ballistics - scientific image analysis
When combined with Camera Ballistics you are able to identify which images present on the analyzed phone were actually taken by the phone's camera using a sensor fingerprint. This process delivers new insight into the images such as make, model, GPS, camera settings, mean square error, fingerprint presence result, probability, and correlation will be organized into a well designed and comprehensive PDF report suitable for submission as evidence.
and more...
|
專業軟體光碟
