Services
Mobile Forensics
Mobile Device Forensics
Mobile Forensics is a branch of Digital Forensics that focuses on the acquisition, analysis, and preservation of data on mobile devices such as smartphones, tablets, and IoT devices. Unlike Computer Forensics, mobile device analysis presents unique challenges due to the ever-evolving operating systems, advanced encryption, and cloud integration.
Main Phases of Mobile Forensics
1. Data Acquisition
Physical Acquisition: Creating a complete image of the device's memory, including deleted data and system files. Often requires exploits or an unlocked bootloader.
Logical Acquisition: Extracting user-accessible files, without bypassing security systems.
Cloud Acquisition: Recover data from remote backups or cloud accounts, using valid credentials or with legal authorization (warrant).
2. Data Analysis
Messaging App Review: Analyzing communications on WhatsApp, Telegram, Signal and other chat apps.
Activity history reconstruction: Calls, SMS, emails, web browsing and social media usage.
System File and Metadata Analysis: Tracks user location, identifies file changes, and detects suspicious activity.
Decoding geolocalized information: Studying GPS data and Wi-Fi connections to determine movements and interactions with the surrounding environment.
3. Reporting and Forensic Testimony
Detailed Technical Reports: Clear and comprehensive documentation for forensic experts and technicians.
Readable Reports for the Judiciary: Structured to be Understandable Even by Non-Experts.
Testimony in court: The forensic expert may be called upon to present the results of the analysis in a court proceeding.
Tools Used in Mobile Forensics
Cellebrite UFED – Used to extract and analyze data from smartphones and tablets.
Magnet AXIOM – In-depth analysis tool for files and metadata.
Oxygen Forensic Detective – Specializing in cloud communications and data analysis.
Autopsy + Plaso – Software for reconstructing the timeline of activities on a device.