Since MOBILedit is a forensic software tool, it is important for us to preserve the privacy of our customers or potentially sensitive content obtained during the acquisition of data from mobile devices. You can find different logs in MOBILedit Forensic that help you to troubleshoot the issue:

Extraction logs

The extraction log describes the process during extraction.

The main log of the extraction process is located in the export folder, the filename is “summary_full”. It contains information about extracted files and everything else you can see on the screen during the extraction process and during the report generation.

The summary of items that were extracted and what has failed during the extraction process (if there were failures) is in the "summary_short".

Screenshots of user settings are located in the export folder, at “pdf_files/wizard_screenshots” or “html_files/wizard_screenshots”.

MOBILedit Application Logs

MOBILedit Application logs store information about how the application runs and possible errors, it is stored in file main.log located in “Documents/MOBILedit Forensic Express/Logs”. If the incident is reproducible, we recommend deleting this file and run the program again in order to get fresh logs.

The MOBILedit log and Crash dump file do not contain any personal information or sensitive data about the connected device.

Communication logs

Communication logs are located in “Documents/MOBILedit Forensic Express/Logs”. If the incident is reproducible, we recommend deleting its content and run the program again in order to get fresh logs of the incident.

The communication log may contain sensitive data from the device.

When you get any of such issues, you will need to collect the MOBILedit Forensic logs to investigate further and if possible, you likely need to share the logs with the support team for further help. We want MOBILedit to serve you well, so we are keen to know if you have any trouble, so please don't hesitate to send us your log.

How to get logs for troubleshooting?

  1. Start MOBILedit Forensic Express

  2. On the MOBILedit home screen click on "Settings"

  3. Find a LOGGING section

  4. Choose from the options Debug (if the issue is reproducible)

  5. Set maximum log size if needed, otherwise, keep the default value

  6. Try to reproduce the issue (problem with the device connection, etc.)

  7. Press the Archive reports button

  8. We recommend packing All log files

  9. In a report folder, you can find the final ZIP file

  10. Send the ZIP file to us as an attachment here!

If you are in a situation where you are working on a case that may contain sensitive data or it is not possible to share information for legal reasons, please go to the Log folder and manually choose the main log and/or crash dump file.

What to do in case the program crashes unexpectedly?

  1. Try to start MOBILedit Forensic Express again

  2. On the MOBILedit home screen click on "Settings"

  3. Find a LOGGING section

  4. Press the Archive reports button

  5. Choose packing All log files

  6. In a report folder, you can find the final ZIP file

  7. Send the ZIP file to us as an attachment here!

The needed files can also be found in a destination folder: C:\Users\...\Documents\MOBILedit Forensic Express\Logs