Skip to main content

User Guide - MOBILedit Forensic

Product details
Buy license
Support
Who we are

User Guide - MOBILedit Forensic

Main

Product details
Buy license
Support
Who we are

Main

Introduction to MOBILedit Forensic

Mobile forensic terminology
Getting Started
System Requirements
Notifications
Description of editions
The differences between MOBILedit Forensic PRO and ULTRA
MOBILedit Forensic ULTRA Device Compatibility Overview
How to purchase
Educational license activation
Supported phones
Mobile Device Assessment and Identification
Accessibility and Compatibility Features

MOBILedit User Portal

Download & Installation
How to register to MOBILedit User Portal
How to add Activation Key purchased under my registered email
How to add Activation Key purchased under another email
User portal - MFA
Security Bypassing Search
Application Analysis Search
License upgrade from PRO to ULTRA.

Home Screen

License activation

Dongle license activation
Single phone license activation
Offline activation
Deactivation

Live Updates

Live Update Packages
Dongle Key update
Offline updates

File Manager

Settings

Global settings & Investigator details

Logs & troubleshooting

Which log level will be appropriate in which situation?
How to set the Basic Log level
How to set the Detailed Log level
How to set the Debug Log level
How to send Logs to MOBILedit Forensic Support for analysis
How to send Crash Dump files to MOBILedit Forensic Support for analysis

About
Training

Connection screen

Connected device or import

Info button on the connection screen
Remove connector / Stop communication service
Phone data preview
Browse content

How to connect

Android

How to enable USB debugging
How to enable "Stay awake" option
How to confirm RSA fingerprint
Connecting in MTP mode
How to install a universal Android driver
How to install HTC drivers (Windows 7 only)
ADB backup (Extraction)

MOBILedit Forensic Connector app

Forensic Connector installation
Connector permissions
Extraction without the Connector app
Set Forensic Connector app as default SMS app

iOS

How to install correct Apple drivers
How to disable the auto-lock option
Developer Mode for iOS 16 and higher
iTunes backup (Extraction)
Allow accessories to connect
Lockdown method - Bypassing a passcode-protected iPhone

Connecting Windows phone

Other phones

Nokia feature phones
Connect BlackBerry via Wi-Fi
Blackberry OS devices

Troubleshooting device connection

Connect device

Connect Wi-Fi
Connecting via Bluetooth

Connect cloud
Add other evidence
Import data - Overview
Security bypassing - Overview

Next - Choose action

Logical extraction - Choose what to extract

Specific selection - Overview
Full content
Application analysis
Deleted data only
Device info only
Parental check
Load report configuration

Camera and screen capture

Smart screenshots
Phone photo sequence
Webcam
Manual screenshots
Import images

Specify report details

Report Localisation
Report customization

Outputs - reports, exports, and backups

Adjusting report content and size
Files & Acquired data folder structure

Camera Ballistics

About Camera Ballistics technology
Minimum system requirements
How to activate
Main page
Camera Ballistics - Updates
Learn - Create fingerprint
Analyze - process photos
Image quality requirements
How to create Logs

Export name and destination

Logical extraction - General info

Full content vs. Specific selection
Password toolbox
Disconnecting phone

Specific selection

What data can be extracted?
Data - Screenshots of report settings
Data - Summary
Data - Highlighted data
Data - Deleted data
Data - Captured phone photos
Data - Accounts
Data - Contacts
Data - Messages
Data - Emails
Data - Calls
Data - Organizer
Data - Applications
Data - Application list
Data - Photo Recognizer
Data - Face Matcher
Data - Photos
Data - Image files
Data - Large images
Data - Audio files

Data - Video files

Data - Video storyboard (FFmpeg)

Data - Documents
Data - Files
Data - Matched Files
Data - Activities
Data - Application usage
Data - Bluetooth pairings
Data - Cell towers
Data - Clouds
Data - Contact analysis
Data - Cookies
Data - GPS locations
Data - Malware detection
Data - Notifications
Data - Passwords
Data - Screen unlocking history
Data - SIM card
Data - System logs
Data - User dictionary
Data - WiFi networks
Data - Web
Data - Timeline
Data - Data extraction log

Filtering

Global Filters
Local filters

Applications

Supported applications
Advanced techniques to get more information from the device
How to make an application backup
Request to add support for analysis of an application
App downgrade (Android)
Advanced data extraction (Android)
AirTags & Bluetooth Beacons

Import data

MOBILedit backups

Android backups

ADB backup (Import)
Huawei backup
Xiaomi MIUI backup folder
Samsung Smart Switch backup
Samsung feature phone backup

iOS imports

iTunes backup folder (Import)
Reveal iTunes Backup
Apple sysdiagnose file

Data from Folder/ZIP & Import file system
Physical image
Garmin backup

Cellebrite imports

Cellebrite UFD
Cellebrite UFDR
Cellebrite filesystem backup

GrayKey backup folder
Oxygen backup XML

Security Bypassing

What is Root / Jailbreak
Supported phones in Unlocking database
Android - Rooting (Temporary)

Android - Rooting (Permanent)

How to root an Android phone?
How to boot into recovery on Android
How to unlock bootloader on Android
Use TWRP to bypass Android lockscreen
Flash phone with recovery image - TWRP
CMD method - Flashing TWRP on non-Samsung devices
Android recovery data acquisition

Android - Acquiring manufacturer backups

iOS/iPadOS - Jailbreaking

Bootable USB Flash Disk with Jailbreaking Capability
Jailbreaking with checkra1n
Jailbreaking with palera1n
Jailbreak versus Encrypted iTunes backup

MOBILedit Smartwatch Forensics

Smartwatch Kit
Samsung Watch

Apple Watch

Apple Watch with physical diagnostic port
Apple Watch with wireless diagnostic port

Garmin Watch
Other Smartwatch Brands
Connecting Smartwatches - Bluetooth
WearOS applications

Dive computers

Dive Computer Kit

MOBILedit Cloud Forensic

Cloud Forensic standalone product
FTP, IMAP & POP3

MOBILedit Export XML documentation
MOBILedit Forensic BETA test program

Other information

Running extractions
Built-in SIM Cloning
ODIN method - Flashing TWRP on Samsung devices
Odin mode
FASTBOOT mode
PRO - Physical images
Get physical dump from ADB

Android - Español

Conexión Wi-Fi con Android
Android - Habilitar la opción "Permanecer activo"
Conexión en modo MTP
Android - Confirmar la huella digital RSA
Cómo instalar el controlador universal de Android
Cómo habilitar la depuración USB

Android - Português

Conexão Wi-Fi Android
Conectando no modo MTP
Android - Confirme a impressão digital da RSA
Android - Ativar a opção "Fique acordado"
Como instalar o driver do Universal Android
Como viabilizar a verificação do USB

FAQ

Full-file system vs. File system
How to buy additional licenses?
How to make reports smaller?
Does MOBILedit Forensic offer a viewer or a data analysis tool?
Crypt14 - Key failed to load
SQLite Write-Ahead Log (WAL) in MOBILedit Forensic
Where to find previous Android backup?
iTunes backup password is required each time I run analysis
How reliable is recovered data?
I connected the phone but can not press 'next' to next step
What if the connector installation has failed?
What if the connection is suspended during extraction?
What is the difference between software and individual package update?
How to get as much data from secure apps - WhatsApp and others
Damaged/broken phone data extraction
Connection to the server has failed
Mobile Device Management (MDM) solutions
Common issues preventing the installation and operation of MOBILedit Forensic software
Is it Possible to Recover Data After a Factory Reset?
Empty or incomplete reports
MOBILedit Forensic PRO: Security Bypassing, Data Extraction, and Connection Methods Explained

Breadcrumbs

Import data

On this Page

iOS imports

Aside from connecting a live device, the following are supported for importing for iOS.

iTunes backup folder (Import)
Reveal iTunes Backup
Apple sysdiagnose file

Copyright Compelson s.r.o.
Powered by Scroll Sites & Atlassian Confluence