My company processes 20-30 mobile devices a month. In the way of forensic tools we have several copies of Katana Forensic's Lantern, Cellebrite UFED Ultimates, Secureview, and Paraben Device Seizure. In addition we have tools to JTAG and chip off I personally like the people at Paraban and their products, but as a normal course of business we track every phone (make, model, OS) that we process and which tool we process it with. We find that overwhelmingly we use the Cellebrite UFED and Lantern. The Paraben and Secureview were used as alternatives and when we were unable to process the devices by the other tools or the results were suspected to be less than what was wanted. Paraben and Secureview tools are good second tier tools for us, but we have a tremendous investment in our infrastructure. I also believe they are good first tier alternatives if funding is an issue. It is important to remember, however you do pay for what you get.
I hear so many great things about Lantern and would love to try it, but for me that would mean purchasing a Mac machine to run it on.
While my lab feels a little empty without a Mac analysis machine it's hard to justify the huge expense when Mac's make up less than 1% of my business, I think I've only seen 2 in the last 4 years.
I keep hoping I'll get a job with 10 mac machines to examine then I could build a business case to go buy a nice new shiny toy, but until then…
When we were in law enforcement we saw a much wider variety of mobile devices. We do still see a lot of androids but based upon our exam tracking we see iPhones 65% of all smartphones and iPads as almost 85% of tablets. Several of us have speculated that this is because of type of customers who can afford our services.