What data can be extracted?
MOBILedit Forensic Express automatically uses multiple communication protocols and advanced techniques to capture the maximum potential data from each phone and its operating system. Then it combines all data found, removes any duplicates and presents it all in one complete, easy to read report.
We support over 1000+ applications as of this time and we are still adding more, but if you cannot extract some application there is still a possibility that we have not added it yet. For that occasion read here
how to request apps.
The following is a list of categories of data in a phone that can be selected for data extraction and analysis when using the specific selection option. By selecting categories from this list you are defining what will be extracted from the phone as well as what chapters you will see in the report.
Data - Notifications
Notifications are retrievable from both iOS and Android devices. Application specific notifications gathered from iOS devices include notifications that are no longer active and can contain otherwise unobtainable information such as emails and ...
Data - Deleted data
We do offer more ways to recover deleted data. The first one is recovering the data from SQLite databases, the second one is recovering the files and folders from physical images. SQL databases allow you to recover the data which were marked as ...
Data - data extraction log
Following tab displays information about ongoing extraction: if you select the Data Extraction Log option in the Specific selection, you will get a brief resume of the extraction tab in your report as well:
Data - SIM card
Extracts data from the SIM card such as IMSI, Country, ICCID, and Operator as shown below:
Data - Filesystems
Full FileSystem - if this option is selected then all files from the phone will be copied, and will be included within the list in the report. Please note that this might analysis may take a long time and can consume a considerable disk space, ...