±Forensic Focus Partners

Become an advertising partner

±Your Account


Forgotten password/username?

Site Members:

New Today: 0 Overall: 33842
New Yesterday: 1 Visitors: 163

±Follow Forensic Focus

Forensic Focus Facebook PageForensic Focus on TwitterForensic Focus LinkedIn GroupForensic Focus YouTube Channel

RSS feeds: News Forums Articles

±Latest Articles

RSS Feed Widget

±Latest Webinars

Most comprehensive mobile forensic tool?

Discussion of forensic issues related to all types of mobile phones and underlying technologies (GSM, GPRS, UMTS/3G, HSDPA, LTE, Bluetooth etc.)
Subforums: Mobile Telephone Case Law
Reply to topicReply to topic Printer Friendly Page
Forum FAQSearchView unanswered posts
Go to page 1, 2  Next 

Most comprehensive mobile forensic tool?

Post Posted: Tue Jun 03, 2014 8:19 pm

If you were to obtain training on mobile forensics, what would you pick? I am looking for the most comprehensive tool as well as the best overall training. I understand the value of vendor neutral training, I am currently a CFCE. The best vendor neutral training I find is the SANS training, however that runs a hefty 5K.

Suggestions, from the front lines much appreciated.  


Re: Most comprehensive mobile forensic tool?

Post Posted: Wed Jun 04, 2014 4:38 am

What other courses have you turned up in your search? Which country are you in? How far would you be willing to travel for training? I'm not from the front lines whatsoever, but answering these questions may help get a more tailored answer in regards to your situation.  


Re: Most comprehensive mobile forensic tool?

Post Posted: Wed Jun 04, 2014 1:26 pm

Very fair. Sorry newbie status.

I am in the US. Willing to travel anywhere domestically for the training. Currently I have highlighted Parabin, AccessData, Oxygen as the three top contenders but that is only due to popularity of the tools which may or may not be reflective of their popularity inside the courtroom.  


Re: Most comprehensive mobile forensic tool?

Post Posted: Wed Jun 04, 2014 6:46 pm

As your in the US, take a look at Teel Technologies. They have been highly recommended in the past!  

Senior Member

Re: Most comprehensive mobile forensic tool?

Post Posted: Wed Jun 04, 2014 7:44 pm

Most comprehensive tool Cellebrite/XRY very close contenders, both have pros and cons, different levels of skills needed to get into both.

Training wise in the UK I cannot recommend Kevin Mansel of Control F forensics enough to give a newbie a good baseline of knowledge as well as his expert series.

All the best in your upcoming career. If you dig deep enough and do your research you will do very well.

Youtube is defiantly your friend for dis assembly guides  

Senior Member

Re: Most comprehensive mobile forensic tool?

Post Posted: Thu Jun 05, 2014 12:28 am

For mobile forensics the clear stand out tools are Cellebrite UFED and Microsystemation XRY, if you want vendor specific training IMO you would be wasting your time with anyone other than one of those two.

You are fortunate being in the US as by comparison to us poor Australians you have fantastic access to training.  

Senior Member

Re: Most comprehensive mobile forensic tool?

Post Posted: Thu Jun 05, 2014 4:47 am

Funnily enough a similar question appeared on LinkedIn about becoming a mobile phone examiner and at this early stage it is pretty much agreed that vendor training offers the solution to certify the person is capable to use their tool correctly, but does not certify the person is a mobile phone examiner.

Alternatively, training courses that impart (and the person gains) experience proves far more valuable in order to know which tools (note the plural) to buy.

I am more of an advocate of the second option because I train others and have learned first-hand the concepts people have when first coming into a training course and become aware of their concepts changing quite significantly after they finish the course. However, I have equally performed vendor training even though I am not the manufacturer of the products. The vendor training was undertaken for two reasons. In the late 1990s early 2000s there were few tools around and the names/tools around today weren't there. Moreover, the examiners energy was spent on discovery and made the examiner learn the science, product and usage, skills of handling and examination following which it released value to the examiner to understand what is evidence and where it might reside. Later I changed to a more advanced tool because it helped me further demonstrate about how to find evidence and the tools open platform approach allowed for upgrade as new technology came along. Thus keeping open the door of opportunity to enhance my examination skills and look for a diagnosis and identify potential lines for prognosis.

It is very important when dealing with tools to understand (a) which tools allows you to inform yourself in order to translate the meaning of the evidence and (b) which tools tell you what it means by simply translating the answers for you. Both paths will bring you an education one way or another.
Institute for Digital Forensics (IDF) - www.linkedin.com/groups/2436720
Mobile Telephone Examination Board (MTEB) - www.linkedin.com/groups/141739
Universal Network Investigations - www.linkedin.com/groups/13536130
Mobile Telephone Evidence & Forensics trewmte.blogspot.com 

Senior Member

Page 1 of 2
Go to page 1, 2  Next