FINALMobile Forensics

FINALMobile Forensics offers the most advanced data-carving tool for our forensic community. With our extensive knowledge of file systems and data patterns, FINALMobile can turn raw data into easy-to-understand data with a few simple clicks. Mobile devices store data in specific formats, and in many cases, the data is not erased. By searching for specific patterns, these hidden gems, “deleted entires,” are recoverable, along with the full scope of the “live” data. Moreover, since many devices share the same pattern, we may already have a solution for tomorrow’s phones as well. If the file system fails to populate, we can still analyze data by searching each sector for specific data. The data can be organized in a variety of ways to make it easier for the user. It can be exported to Excel or PDF reports.

Features

Capture and/or analyze data from mobile devices through logical or physical acquisitions.

Acquisitions

FINALMobile Forensics uses a database wizard to streamline the acquisition procedure.

Analysis

• The Main purpose of FINALMobile Forensics is to create an accurate and detailed parsing of the data within the file system.
• 
  
• Program is able to read our own generated phone images (MEFs), along with files generated by other means.
• Once data is loaded, the program will apply the appropriate parsing rules (CDF scripts) to the designated files and folders based on the model number of the mobile device.
• If desired model is not listed, users can run all scripts against the files to appropriate the parsing.
• Results are displayed in an easy-to-read and exportable spreadsheet format.
• Engine is built to reconstruct the file system, and then to parse the data.
• Verifying Results
• Users can verify their results by simply looking over the results for irregular formats. Double-clicking any part of the entry will display the file, or part of the file, in the Hexviewer. Also, by using the [Display File Path] option, users can confirm that each file was parsed.
• Exporting Results
• Results can be exported in HTML, PDF, or Excel formats.

Download