• PRODUCTS
  • FINALMobile Forensics
FINALMobile Forensics
The essential tool for mobile forensic investigators!

FINALMobile Forensics offers the most advanced data-carving tool for our forensic community. With our extensive knowledge of file systems and data patterns, FINALMobile can turn raw data into easy-to-understand data with a few simple clicks. Mobile devices store data in specific formats, and in many cases, the data is not erased. By searching for specific patterns, these hidden gems, “deleted entires,” are recoverable, along with the full scope of the “live” data. Moreover, since many devices share the same pattern, we may already have a solution for tomorrow’s phones as well. If the file system fails to populate, we can still analyze data by searching each sector for specific data. The data can be organized in a variety of ways to make it easier for the user. It can be exported to Excel or PDF reports.

Main Features
Features
  • Capture and/or analyze data from mobile devices through logical or physical acquisitions.
Acquisitions
  • FINALMobile Forensics uses a database wizard to streamline the acquisition procedure.
Analysis

The Main purpose of FINALMobile Forensics is to create an accurate and detailed parsing of the data within the file system.

  • Program is able to read our own generated phone images (MEFs), along with files generated by other means.
  • Once data is loaded, the program will apply the appropriate parsing rules (CDF scripts) to the designated files and folders based on the model number of the mobile device.
  • If desired model is not listed, users can run all scripts against the files to appropriate the parsing.
  • Results are displayed in an easy-to-read and exportable spreadsheet format.
  • Engine is built to reconstruct the file system, and then to parse the data.
Verifying Results
  • Users can verify their results by simply looking over the results for irregular formats. Double-clicking any part of the entry will display the file, or part of the file, in the Hexviewer. Also, by using the [Display File Path] option, users can confirm that each file was parsed.
Exporting Results
  • Results can be exported in HTML, PDF, or Excel formats.
Overview
  • Operating System: Windows 2000 / XP / 2003 Server / Vista / 7 / 8 / 10
  • CPU: Pentium4 / 2GHz or better / Athlon or better
  • RAM: 512 MB or more
  • HDD: 10 GB or more
  • Graphic Card: 1024 x 768 resolution or better
  • Supporting Data Types: EFS 1, EFS 2, FAT 16/32, TFS4, Mobile Internal File
+ Main Features
Main Features
Features
  • Capture and/or analyze data from mobile devices through logical or physical acquisitions.
Acquisitions
  • FINALMobile Forensics uses a database wizard to streamline the acquisition procedure.
Analysis

The Main purpose of FINALMobile Forensics is to create an accurate and detailed parsing of the data within the file system.

  • Program is able to read our own generated phone images (MEFs), along with files generated by other means.
  • Once data is loaded, the program will apply the appropriate parsing rules (CDF scripts) to the designated files and folders based on the model number of the mobile device.
  • If desired model is not listed, users can run all scripts against the files to appropriate the parsing.
  • Results are displayed in an easy-to-read and exportable spreadsheet format.
  • Engine is built to reconstruct the file system, and then to parse the data.
Verifying Results
  • Users can verify their results by simply looking over the results for irregular formats. Double-clicking any part of the entry will display the file, or part of the file, in the Hexviewer. Also, by using the [Display File Path] option, users can confirm that each file was parsed.
Exporting Results
  • Results can be exported in HTML, PDF, or Excel formats.
+ Overview
Overview
  • Operating System: Windows 2000 / XP / 2003 Server / Vista / 7 / 8 / 10
  • CPU: Pentium4 / 2GHz or better / Athlon or better
  • RAM: 512 MB or more
  • HDD: 10 GB or more
  • Graphic Card: 1024 x 768 resolution or better
  • Supporting Data Types: EFS 1, EFS 2, FAT 16/32, TFS4, Mobile Internal File