Drfone wondershare

Yes, if you got a rooted phone, USB debug enabled, the software can save your data or even carve for deleted stuff. But it is not a forensic software for sure…

"But it is not a forensic software for sure…"

I agree the tool is currently marketed as a pure consumer application but……

I have downloaded and used the software and was most impressed by the tool's ability to mirror one's phone's screen as a window within Windows. The desktop version mirrors icon clicks and all content being performed on the actual phone itself in real time.

I have no idea how they are doing this, but it could be similar to Citrix' VPN technology.

If there is content on an Android phone that could not be extracted by forensic tools currently, say a new niche app that just appeared, in my opinion, using the Wondershare tool's screen mirroring capability in conjunction with Camtasia screen capture software, would be a reasonable method to record and capture the content of that Android phone, for example. One could narrate the capture process using one's computer microphone at the same time.,

So, properly used, in my opinion Wondershare could capture evidence in a manner wholly replicatable by another forensic professional that could be substantiated in a court of law.

A Cellebrite UFED file is certainly one of the gold standards, in my personal opinion, in terms of forensic captures, but I also believe other tools and methods can be used successfully if one follows forensic best practices.

I had to use a tool called SyncCell (http//www.synccell.com/) one time to recover deleted messages from an ancient Motorola flip phone. SyncCell, also a purely consumer target product, allowed me to view the folder contents of the phone and export a BIN file, which I was able to carve with OSForensics to successfully recover deleted text messages.

I actually think the Wondershare VPN/Screen mirroring technology is brilliant and could be used in interesting ways.

For example, if Wondershare could auto-scroll the phone screen, text messages could all be captured using Camtasia. Not text searchable and a pain to use, probably, but a preservation nonetheless.

Thanks for sharing your experience regarding this!

I used the software in the past and I gave up on it, because the results given by it were different or partial compared to other forensic programs. My statement was based on my experience )

I actually think the Wondershare VPN/Screen mirroring technology is brilliant and could be used in interesting ways.

For example, if Wondershare could auto-scroll the phone screen, text messages could all be captured using Camtasia. Not text searchable and a pain to use, probably, but a preservation nonetheless.

Not at all familiar with the specific tool, but if the virtual screen/window can be scrolled with the keyboard or mouse, usually a scriptable automating tool like AHK (Auto Hot Key) can be used to do this kind of scrolling automation.

As a side-side note, tools like Camtasia tend to create in my experience senselessly huge .AVI (or similar video formats) in the hundreds of megabyte size range, to record screen activities, where (say) 90% of the captured area remains the same and you don't actually need fast game-like FPS.
Some time ago I found this nice freeware tool that can capture screen or windows saving the result in either (animated) .gif or into its own (very compressed) format, Licecap
http//www.cockos.com/licecap/
At least on Windows the "installer" is actually a self-extracting that can be opened by - say - 7-zip and executed directly, see also
http//www.msfn.org/board/topic/171205-licecap-useful-screenshot-to-animated-gif-recorder/

As a further side-side-side not/consideration be aware however, that Wondershare/Spotmau/iSkysoft/Aimersoft has a far from "reputable" history of quality of their software (and marketing tactics).

jaclaz