I have been searching for any papers or published studies comparing many of the different tools for extracting and processing a mobile device. The comparison between gray key, magnet, cellebrite, etc. The data that is seen in one and not the other. Mostly it is the extraction I'm interested in. Not the comparison of logical to physical or file system, but let say a logical but what's the data differences across the platforms.
As many of you probably have the same conundrum, the balance between a device waiting in the forensic queue for weeks to months or using something to get the actionable intel/evidence within a day. I suppose it's the balance.
NIST has an outdated but thorough comparison test.
If you own some tools, why not run a comparison yourself and publish the results?
@unallocatedclusters yeah I only have access to one tool at this time. Which is why I was hoping someone else had done a comparison. With everyone claiming favorites there doesn't seem to be any whitepapers written on the topic.
