Looking for feedback from people actually using the software. I know its matured over the last year and looking to possibly make a purchase. I recently did one of there sales webinar sessions as well.
What tools do you currently have?
What phones do you normally see?
What sort of investigations do you normally perform? By that I mean are you interested in quick logical reads or is your standard to search in-depth with physical reads?
There may or may not be more suitable tools to add to your arsenal D
Doug
I have Cellebrite standard not the physical add on, Paraben, BitPim. Mostly get smart phones of all types Droid's Windows Phones, iPhones, Blackberry's the gambit. Most cases want physical if available. I use FTK and Encase just got an offer from Access Data to get MPE and want to know anyone that uses it currently how its working out for them just feedback don't see any recent comments on it.
jwells,
Since you have the Cellebrite UFED, use the 30 day free trial of UFED PA.
Register your UFED here and get the trial
https://
UFED Physical has
Blackberry Physical extraction and decoding
iPhone Physical extraction and decoding
Android Physical extraction and decoding including user/pattern lock bypass for many devices and many more to come.
Nokia BB5 physical extraction is also around the corner.
Chinese Phones physical extraction and decoding (also bypassing user lock)
Ron
We've had the New MPE+ and tablet in our lab for a few months now. MPE+ is now a decent and progressing tool however it doesn't give us the support we needed compared to our UFED and other tools that we use. UFED is our primary tool for physical support. If you do purchase MPE+ we would advise to stick with the software and do not add the tablet.
MrKameren thanks for the reply this is the type of info I was looking for and welcome similar comments from others I know more than 1 other person on this forum must own and use MPE by now! I ordered it should arrive soon I didn't get the tablet and I have 30 days to try it out and I plan on doing so. I don't want to get stuck with yet another tool like encase7 that doesn't work and is not fit for duty.
jwells I anticipate when you begin using your MPE+ you'll see it has positive qualities but you'll also note it has limitations. It is a decent edition to have in a forensics arsenal however it is not where it needs to be for us to consider it our primary tool. In regards to EnCase v7, it was certainly released prematurely and initially had a lot of issues. However, the EnCase v7.03 update patched a lot of bugs and errors. Though EnCase 6.19.3 is still more solid for the time being we've seen certified training pick up more v7 students and we're running a lot of our own investigations on it now because within a few more updates we anticipate it will redeem itself from the original disappointment. Plus the mobile device support function is pretty cool.
I have been using MPE for a couple of years it is the predominant software we are using. However it has had some problems for me personally with some devices not being supported and it not being able to do the extraction. We have recently been looking at finding a supportive tool to use with it.
MPE is very user friendly and can be a powerfull tool when it can extract the phone and it is supported. To me it has been invaluable. I would say yes get it, but also keep an extra tool for those days when it does not support a phone.
I am partial to Accessdata's software but also they have as all their limitations and you always need more than one.
Good luck
Hello, i'm using FTK and MPE as primary tool and i'm very disapointed.
No bluetooth support (lots of chinese phones only extract data this way), call the accessdata, and they are not planning to develop this feacture.
The cable Kit is very, very, very weak comparing the XRY and others. I pay for the cable SMS and accessdata don't send the cables that are missing.
The software in most cases does not indicate the number of the cable that is necessary to the phone that you are extracting.
The software HELP is NULL, comparing with other tools like XRY and others…
You can not translate the reports (only in english).(they told me to use google translate)
If you export the reports to RTF format to translate them, most of items like labels disapear.
The supported phones are very small. even MOBILEDIT that costs 400 USD has better phone support, buetooth, reporting models, etc.
If you have a proxy, most f items in MPE don't connect to WEB, has no place to configure a proxy
Accessdata support is NULL when you call them
In my Opinion XRY is lots better, MPE+
(sorry for my bad english)
Save your money, upgrade your UFED Logical to a UFED Physical Touch.
MPE has a long way to go before it matures as a forensics tool, in my opinion they shot themselves in the foot in a huge way by limiting the software by locking it in to FTK.