Android device acquisition with MOBILedit Forensic
The best mobile forensic software, such as: UFED (Cellebrite), Oxygen Forensic, XRY (Micro Systemation), Secure View (Susteen), MOBILedit Forensic can extract data from Android devices by installing an agent program on the device. It allows to make logical extraction of data from a device.
We will use the MOBILedit Forensic program to demonstrate this method of data extraction. This program has been described in the Chapter 1, SIM Cards Acquisition and Analysis.
How to do it…
Let's now explore Android device acquisition with MOBILedit Forensic:
- When you start the program MOBILedit, the main window of the program displays information about the connected device.
A fragment of the main window with information about the Android device
- Click on
Report Wizard
. It will openMOBILedit Forensic Wizard
, which will extract data from the SIM card and generate a report. - Fill in the fields:
Device Label
,Device Name
,Device Evidence Number
,Owner Phone Number...