Quantcast
Channel: Forensic Focus Forums - Recent Topics
Viewing all articles
Browse latest Browse all 20102

Mobile Phone Forensics: FTK Mobile Phone Examiner

$
0
0
AFTER A YEAR WORKING WITH MPE Version 5.4 does not bring much changes.... Some issues. 1- Data carving is always blocKing PC and when MPE shutdown loses al project data (5 more hour lost) (yes i have 500Gb free space on MPE temp directory) 2- Can't add phone files or photos to report!!!!!! 3- But if the files or photos are "carved" can be added to report!!!!, but you can't export them!!!! (ahahah), and carving most of times stucks!!!! ups... this is hard... 4- Lots and lots of phone templates have the wrong cable information or none information at all (we tell the support and in the next release is all the same) 5- About the cables, i informed Lee that this was hapening "supported phones had no cables in KIT" and he told me the cables where already sent. (told me this a year ago, nothing never arrived) (iphone5 has released at months cable never arrived.) 6- Some SAMSUNG phones (NOT ANDROID) just turn MPE+ OFF, without no error (and then we try with mobiledit or xry and extracts OK, support team has this one for months to solve), already tried in a fresh SO install in a new PC just for MPE+ installed, did not solved... 7- GPS Localization tables are a joke, never finds GPS locations, XRY in the same phone extracts lots of them! 8- It Root directly, a small amount of androids comparing to others. 9- When we explore the files and folders in contents of a phone the most time MPE blocks and restart again with no error. 10- When you export one file or folder from the Tree explorer, he closes all left explorer tree, and you have to search again the folder you where before.... 11- Additional report information fields does not support strange characters like "áç", so most this i write look like errors in court (OK, i have to write in English and then ask a English translator in court, AHAHAH) 12- Exporting long reports most of times MPE blocks and have to restart, and loses all additional information you typed and files carved to(restart all again) 13- Version 5.4 still with NO BLUETOOTH Support, (lots of chinese phones only extract data this way), This one sucks!!!!!!!!!!!!!!! 14- I tested in at least 2 or 3 phones an XRY logical extracts more data then MPE physical extraction, you have to search al DB by hand... 15- XLS report export its a joke, puts about 20 contacts or 20 sms in each sheet and generates hundreds of sheets!!! (This is great to my Analyst import to Analyst Notebook, lol) 16- Social Analyzer takes a eternity to open sometimes blocks also, and you can only select identified contacts, if one not identified contact has 3000 calls in call history, you can not select it, you can only select the contacts that are in identified in phonebook... 17- No observation or comments field to write something relevant found in report. 18- Some text boxes at RTF report cover part of text, you have to check all manually (sometimes reports with more than 200 pages.) 19- Software doesn't have a HELP DB that tell us what we can extract for that kind o cell phone (SMS, contacts, etc...). 20- Software doesn't has a DB that tell us what extraction Physical or logical can made to diferent phones (eg iphone 4s --> physical yes or no). 21- As a example like Nokia C2 and lots other simmilar Nokia's only extracts few contacts and no SMS or files (If you try with another toll like Mobiledit or Xry or celebrite it extracts much more information), support told me that this had something to do with extraction software made by "Oxygen. 22- Why in a physical extraction MPE+ recovered 44 SMS and in same image IEF recovered 5234??? (yes lee i "parsed DB for deleted data", IEF catch this on unallocated space.) 23- About the cables, "Supported phone have no cable in Kit???" no problem, support just says that this specific cable is not included you have to pay for the cable, or sent you a link with an ebay store to buy it..... 24- Lots of Samsung Android Phone, MPE does not extracts contacts without root, only extracts Google contact groups titles. If we test the extraction with any other software extracts all contacts without root... 25- Phones with 2, 3 or more years still not supported.... ......... Sorry, can't any more, have to work. Hope MPE-- be a MPE+ and better product SOON, Still Waiting Sorry for long POST and for Faulty English....

Viewing all articles
Browse latest Browse all 20102

Trending Articles