Specify report details

This screen enables you to customise the settings and appearance of the report output.

Report settings

Within report settings, you can customise the following options:

Report time zone

This should be the time zone of your workstation according to your location.

Report language

You can choose the language of your report output by selecting one of the pre-installed languages or you can add your preferred language if it is not already supported.

Time format

Within the list of time formats, you will see that they are shown according to the supported languages as well as generic options, including local time.

Show data sources

By selecting to show the data sources, the file path will be shown in the report output as to the location of the extracted file in the report output “Phone files” directory.

Examples of how the data source is shown in the reports:

PDF report

HTML report

XLSX report

Clutter filtering

When enabled, the final report does not contain duplicated data and clutter is reduced to a minimum. If set as no, all data records are displayed in the report.

Changes that you make in report details will be saved and remain the same even if MOBILedit Forensic is closed and re-opened or if the computer is restarted.

Case details

To keep track of your cases you can enter specific case details. Once details are entered, these fields will remain populated until you change or delete them which is especially useful if you are examining multiple devices in the same case. All of the fields can hold unlimited text.

To clear the details, click on “Clear Case details”.

Available fields and recommendations for use are shown below however, feel free to use them according to your organisational policies or procedures.

Case label

The operation name or type of offence.

Evidence number

The crime or case reference number.

Evidence details

A description of the offence or investigation.

Case notes

Any notes or instructions relating to the case.

Phone details

Here you can enter specific details about the device you are examining. The device name will always be populated according to the connected device or imported file.

Below are some recommendations for filling in the fields:

Device label

Description of the device according to the evidence label.

Device name

This should be auto-populated yet, it can be changed and should reflect the make and make model.

Device ID

If you wish to enter a specific device ID you can.

Device evidence number

This should be the evidential exhibit number that will be referred to in court or other prodceedings.

Owner name

This can be entered to attribute the device to an owner or user.

Owner phone number

The phone number should be entered if it has been obtained from the owner or other means. MOBILedit Forensic will detect the phone number of the device during the extraction.

Phone notes

This field can be used to enter details about the condition of the device, circumstances around the seizure or, any other useful information you would like to record and show in the report.

Investigator details

Investigator details can be entered and saved as a global profile from within Home > Settings. To clear details that have been populated using global settings just click on “Clear Investigator details” and then you can enter new details. The next time MOBIledit Forensic starts it will take the investigator’s details as set up in Settings.

Investigator name

A full name can be used or a reference number in high-profile or sensitive cases.

Investigator designation

The job title or role performed by the examiner.

Investigator email

An email address for contact regarding any questions surrounding the case or examination.

Investigator phone number

A contact telephone of the department or individual.

Permission document

A reference number for a document or, relevant legislation that shows authorised permission to examine the device.

Investigator logo

This can be an individual avatar or profile picture or, the organisational logo.

How information is shown in reports

The details you entered will be displayed in the final HTML/PDF report. On the Title Page, you will see the Case Label name, Case Evidence number and Case Evidence Notes will be displayed in the upper-right section of the page. Below this information on the Title Page will be the Device details. On the bottom of the Title Page, you will find the Investigator details such as the investigator’s name, investigator logo, email, phone number and permission document.

In the header of each page of the PDF report, you will find the Case Label, the Case evidence number and the Device label.