With the rapid development and increased availability of mobile cloud computing, it is a logical step for us to provide enhanced capability for our customers to be able to investigate and extract data from clouds.

Cloud services are an easy way for app developers and software service providers to not only increase the amount of storage available for their end-users, yet also to provide cross-device and cross-platform integration for one account on many devices.

There are two options for how to use MOBILedit Cloud Forensic:

  1. With MOBILedit Forensic PRO

  2. Cloud Forensic standalone product

To be able use this feature, it is necessary to have a computer connected to the internet.

 

There is usually cached cloud data available on an examined device, however, being able to extract data directly from the cloud service is much more beneficial.

Our cloud extractor gives investigators the ability to access and extract data from some of the most popular cloud services, with the following clouds currently supported:

Name

Platform

Support of 2FA

What data can be extracted

Box

Android (rooted) / iOS / Credentials

Yes

Image files, audio files, video files, documents, files

Dropbox

Android (rooted) / Credentials

Yes

Image files, audio files, video files, documents, files

Facebook

Android (rooted) / iOS / Credentials

Yes

 Contacts, messages

Facebook Messenger

Android (rooted) / iOS / Credentials

Yes

Contacts, messages 

Google Cloud (drive, contacts, calendar, etc.)

Android (rooted) / Credentials

Yes

Contacts, organizer, files, image files, documents, audio files, video files

LinkedIn

Android (rooted) / Credentials

No

Accounts, contacts, messages

Instagram

Android (rooted) / iOS / Credentials

 Yes

Contacts, messages

Microsoft Onedrive

Android (rooted) / iOS / Credentials

Yes

Image files, audio files, video files, documents, files

Slack

Credentials

Yes

Account, contacts, messages,

Twitter

Android (rooted) / Credentials

Yes

Accounts, contacts, messages, notifications

FTP

 Credentials

 No

 Files, images, documents, audio, video

IMAP

Credentials

No

Messages

POP3

Credentials

No

Messages