Mobile Forensics Cookbook
上QQ阅读APP看书,第一时间看更新

How to do it…

Let's now explore Android device acquisition with MOBILedit Forensic:

  1. When you start the program MOBILedit, the main window of the program displays information about the connected device.

A fragment of the main window with information about the Android device

  1. Click on Report Wizard. It will open MOBILedit Forensic Wizard, which will extract data from the SIM card and generate a report.
  2. Fill in the fields: Device Label, Device Name, Device Evidence Number, Owner Phone Number, Owner Name, and Phone Notes. Click on the Next button.

The MOBILedit Forensic Wizard window

  1. The data will be extracted. The extraction status will be displayed in the MOBILedit Forensic Wizard window. When the extraction is complete, click on the Next button.
  2. Then, MOBILedit Forensic Wizard will display the following window:

The MOBILedit Forensic Wizard  window

  1. Click on <New case>. In the opened window, fill in the fields Label, Number, Name, E-mail, Phone Number, and Notes. Click on the Next button.

 The MOBILedit Forensic Wizard  window

  1. In the next window of MOBILedit Forensic Wizard, select the format in which the report will be generated and click on the Finish button.

The final window of MOBILedit Forensic Wizard

The forensic report about the extraction will be generated in the selected format.