Tool to view and an...
 
Notifications
Clear all

Tool to view and analyze backups extracted with magnet acquire

6 Posts
2 Users
0 Likes
2,638 Views
(@flysqt78)
Posts: 11
Eminent Member
Topic starter
 

Magnet acquire is a free tool and allows you to extract both android and ios, are there free tools to view and analyze backups extracted with magnet acquire?

 
Posted : 10/09/2021 8:31 pm
UnallocatedClusters
(@unallocatedclusters)
Posts: 577
Honorable Member
 

Autopsy (sleuthkit.org)

 
Posted : 19/10/2021 2:53 pm
(@flysqt78)
Posts: 11
Eminent Member
Topic starter
 

@unallocatedclusters 

I had a hard time importing it into Autopsy, how exactly should it be imported?

 
Posted : 13/02/2022 11:20 am
UnallocatedClusters
(@unallocatedclusters)
Posts: 577
Honorable Member
 

https://sleuthkit.org/autopsy/docs/user-docs/3.1/android_analyzer_page.html

"Using the Module

Simply add your physical images or file system dumps as data sources and enable the Android Analyzer module."

 
Posted : 14/02/2022 4:49 pm
UnallocatedClusters
(@unallocatedclusters)
Posts: 577
Honorable Member
 

I really do advise you invest in at least one smartphone forensic analysis tool if you can.

Certainly if one is performing forensic work in a professional setting, a paid tool is preferred and also most importantly, one should engage is high quality training and certification.

For example, Compelson's MOBILedit Forensic has a $99.00 single phone license option which allows one to both image and analyze a smartphone.

The most important aspect of smartphone forensics, IMHO is understanding how smartphone operating systems and applications work.

Cellebrite's CASA class was the most informative class I have ever taken and was worth every penny.   Take a look at the Cellebrite CASA syllabus and you will see exactly what subjects you should be mastering in terms of smartphone forensic analysis:

https://www.cellebritelearningcenter.com/mod/page/view.php?id=11904

 
Posted : 14/02/2022 4:57 pm
(@flysqt78)
Posts: 11
Eminent Member
Topic starter
 

Thanks for the help, I personally extract android with adb and ios with itune backup.
If you want to use authopsy, ok you enable the android module and for ios you enable ileapp if I remember the name correctly, but in authopsy you can only import physical copies? Logical copies right?

 
Posted : 14/02/2022 5:11 pm
Share: