Tool to view and an...
 
Notifications
Clear all

Tool to view and analyze backups extracted with magnet acquire

6 Posts
2 Users
0 Reactions
4,286 Views
(@flysqt78)
Eminent Member
Joined: 5 years ago
Posts: 11
Topic starter  

Magnet acquire is a free tool and allows you to extract both android and ios, are there free tools to view and analyze backups extracted with magnet acquire?


   
Quote
UnallocatedClusters
(@unallocatedclusters)
Honorable Member
Joined: 13 years ago
Posts: 576
 

Autopsy (sleuthkit.org)


   
ReplyQuote
(@flysqt78)
Eminent Member
Joined: 5 years ago
Posts: 11
Topic starter  

@unallocatedclusters 

I had a hard time importing it into Autopsy, how exactly should it be imported?


   
ReplyQuote
UnallocatedClusters
(@unallocatedclusters)
Honorable Member
Joined: 13 years ago
Posts: 576
 

https://sleuthkit.org/autopsy/docs/user-docs/3.1/android_analyzer_page.html

"Using the Module

Simply add your physical images or file system dumps as data sources and enable the Android Analyzer module."


   
ReplyQuote
UnallocatedClusters
(@unallocatedclusters)
Honorable Member
Joined: 13 years ago
Posts: 576
 

I really do advise you invest in at least one smartphone forensic analysis tool if you can.

Certainly if one is performing forensic work in a professional setting, a paid tool is preferred and also most importantly, one should engage is high quality training and certification.

For example, Compelson's MOBILedit Forensic has a $99.00 single phone license option which allows one to both image and analyze a smartphone.

The most important aspect of smartphone forensics, IMHO is understanding how smartphone operating systems and applications work.

Cellebrite's CASA class was the most informative class I have ever taken and was worth every penny.   Take a look at the Cellebrite CASA syllabus and you will see exactly what subjects you should be mastering in terms of smartphone forensic analysis:

https://www.cellebritelearningcenter.com/mod/page/view.php?id=11904


   
ReplyQuote
(@flysqt78)
Eminent Member
Joined: 5 years ago
Posts: 11
Topic starter  

Thanks for the help, I personally extract android with adb and ios with itune backup.
If you want to use authopsy, ok you enable the android module and for ios you enable ileapp if I remember the name correctly, but in authopsy you can only import physical copies? Logical copies right?


   
ReplyQuote
Share: