Skip to main content
User Guide - MOBILedit Forensic
Product details
Buy license
Support
Who we are
Auto
Light
Dark
Main navigation
User Guide - MOBILedit Forensic
Auto
Light
Dark
Close navigation
Main
Product details
Buy license
Support
Who we are
Main
Introduction to MOBILedit Forensic
Mobile forensic terminology
Getting Started
System Requirements
Notifications
Description of editions
The differences between MOBILedit Forensic PRO and ULTRA
MOBILedit Forensic ULTRA Device Compatibility Overview
How to purchase
Educational license activation
Supported phones
Mobile Device Assessment and Identification
Accessibility and Compatibility Features
MOBILedit User Portal
Download & Installation
How to register to MOBILedit User Portal
How to add Activation Key purchased under my registered email
How to add Activation Key purchased under another email
User portal - MFA
Security Bypassing Search
Application Analysis Search
License upgrade from PRO to ULTRA.
Home Screen
License activation
Dongle license activation
Single phone license activation
Offline activation
Deactivation
Live Updates
Live Update Packages
Dongle Key update
Offline updates
File Manager
Settings
Global settings & Investigator details
Logs & troubleshooting
Which log level will be appropriate in which situation?
How to set the Basic Log level
How to set the Detailed Log level
How to set the Debug Log level
How to send Logs to MOBILedit Forensic Support for analysis
How to send Crash Dump files to MOBILedit Forensic Support for analysis
About
Training
Connection screen
Connected device or import
Info button on the connection screen
Remove connector / Stop communication service
Phone data preview
Browse content
How to connect
Android
How to enable USB debugging
How to enable "Stay awake" option
How to confirm RSA fingerprint
Connecting in MTP mode
How to install a universal Android driver
How to install HTC drivers (Windows 7 only)
ADB backup (Extraction)
MOBILedit Forensic Connector app
Forensic Connector installation
Connector permissions
Extraction without the Connector app
Set Forensic Connector app as default SMS app
iOS
How to install correct Apple drivers
How to disable the auto-lock option
Developer Mode for iOS 16 and higher
iTunes backup (Extraction)
Allow accessories to connect
Lockdown method - Bypassing a passcode-protected iPhone
Connecting Windows phone
Other phones
Nokia feature phones
Connect BlackBerry via Wi-Fi
Blackberry OS devices
Troubleshooting device connection
Connect device
Connect Wi-Fi
Connecting via Bluetooth
Connect cloud
Add other evidence
Import data - Overview
Security bypassing - Overview
Next - Choose action
Logical extraction - Choose what to extract
Specific selection - Overview
Full content
Application analysis
Deleted data only
Device info only
Parental check
Load report configuration
Camera and screen capture
Smart screenshots
Phone photo sequence
Webcam
Manual screenshots
Import images
Specify report details
Report Localisation
Report customization
Outputs - reports, exports, and backups
Adjusting report content and size
Files & Acquired data folder structure
Camera Ballistics
About Camera Ballistics technology
Minimum system requirements
How to activate
Main page
Camera Ballistics - Updates
Learn - Create fingerprint
Analyze - process photos
Image quality requirements
How to create Logs
Export name and destination
Logical extraction - General info
Full content vs. Specific selection
Password toolbox
Disconnecting phone
Specific selection
What data can be extracted?
Data - Screenshots of report settings
Data - Summary
Data - Highlighted data
Data - Deleted data
Data - Captured phone photos
Data - Accounts
Data - Contacts
Data - Messages
Data - Emails
Data - Calls
Data - Organizer
Data - Applications
Data - Application list
Data - Photo Recognizer
Data - Face Matcher
Data - Photos
Data - Image files
Data - Large images
Data - Audio files
Data - Video files
Data - Video storyboard (FFmpeg)
Data - Documents
Data - Files
Data - Matched Files
Data - Activities
Data - Application usage
Data - Bluetooth pairings
Data - Cell towers
Data - Clouds
Data - Contact analysis
Data - Cookies
Data - GPS locations
Data - Malware detection
Data - Notifications
Data - Passwords
Data - Screen unlocking history
Data - SIM card
Data - System logs
Data - User dictionary
Data - WiFi networks
Data - Web
Data - Timeline
Data - Data extraction log
Filtering
Global Filters
Local filters
Applications
Supported applications
Advanced techniques to get more information from the device
How to make an application backup
Request to add support for analysis of an application
App downgrade (Android)
Advanced data extraction (Android)
AirTags & Bluetooth Beacons
Import data
MOBILedit backups
Android backups
ADB backup (Import)
Huawei backup
Xiaomi MIUI backup folder
Samsung Smart Switch backup
Samsung feature phone backup
iOS imports
iTunes backup folder (Import)
Reveal iTunes Backup
Apple sysdiagnose file
Data from Folder/ZIP & Import file system
Physical image
Garmin backup
Cellebrite imports
Cellebrite UFD
Cellebrite UFDR
Cellebrite filesystem backup
GrayKey backup folder
Oxygen backup XML
Security Bypassing
What is Root / Jailbreak
Supported phones in Unlocking database
Android - Rooting (Temporary)
Android - Rooting (Permanent)
How to root an Android phone?
How to boot into recovery on Android
How to unlock bootloader on Android
Use TWRP to bypass Android lockscreen
Flash phone with recovery image - TWRP
CMD method - Flashing TWRP on non-Samsung devices
Android recovery data acquisition
Android - Acquiring manufacturer backups
iOS/iPadOS - Jailbreaking
Bootable USB Flash Disk with Jailbreaking Capability
Jailbreaking with checkra1n
Jailbreaking with palera1n
Jailbreak versus Encrypted iTunes backup
MOBILedit Smartwatch Forensics
Smartwatch Kit
Samsung Watch
Apple Watch
Apple Watch with physical diagnostic port
Apple Watch with wireless diagnostic port
Garmin Watch
Other Smartwatch Brands
Connecting Smartwatches - Bluetooth
WearOS applications
Dive computers
Dive Computer Kit
MOBILedit Cloud Forensic
Cloud Forensic standalone product
FTP, IMAP & POP3
MOBILedit Export XML documentation
MOBILedit Forensic BETA test program
Other information
Running extractions
Built-in SIM Cloning
ODIN method - Flashing TWRP on Samsung devices
Odin mode
FASTBOOT mode
PRO - Physical images
Get physical dump from ADB
Android - Español
Conexión Wi-Fi con Android
Android - Habilitar la opción "Permanecer activo"
Conexión en modo MTP
Android - Confirmar la huella digital RSA
Cómo instalar el controlador universal de Android
Cómo habilitar la depuración USB
Android - Português
Conexão Wi-Fi Android
Conectando no modo MTP
Android - Confirme a impressão digital da RSA
Android - Ativar a opção "Fique acordado"
Como instalar o driver do Universal Android
Como viabilizar a verificação do USB
FAQ
Full-file system vs. File system
How to buy additional licenses?
How to make reports smaller?
Does MOBILedit Forensic offer a viewer or a data analysis tool?
Crypt14 - Key failed to load
SQLite Write-Ahead Log (WAL) in MOBILedit Forensic
Where to find previous Android backup?
iTunes backup password is required each time I run analysis
How reliable is recovered data?
I connected the phone but can not press 'next' to next step
What if the connector installation has failed?
What if the connection is suspended during extraction?
What is the difference between software and individual package update?
How to get as much data from secure apps - WhatsApp and others
Damaged/broken phone data extraction
Connection to the server has failed
Mobile Device Management (MDM) solutions
Common issues preventing the installation and operation of MOBILedit Forensic software
Is it Possible to Recover Data After a Factory Reset?
Empty or incomplete reports
MOBILedit Forensic PRO: Security Bypassing, Data Extraction, and Connection Methods Explained
Breadcrumbs
Specific selection
On this Page
Data - Screen unlocking history
Allows you to see the history of users screen unlocks:
