PRO - Physical images

Physical extraction

It is not possible to perform a physical extraction using MOBILedit Forensic PRO, as there is no function to decrypt the physical image.

Therefore, the next best option is to use “Rooting” to obtain a full file system and create a MOBILedit Forensic backup, which can then be used as a full file system backup and re-imported at a later date if required.

For more information on rooting a phone, please go to How to root an Android phone? 

Once the phone is rooted and connected successfully, the word “Rooted” will be displayed below the picture of the connected device.

A physical image can be imported into MOBILedit Forensic, yet if the physical image is encrypted, it will not be possible to import it.

Physical extraction for iOS devices is not supported in MOBILedit Forensic due to iOS security.