Hello,
Please seriously consider Katana Forensic's Lantern tool as well. Lantern v.4 runs around $745.00 per license, which is in the range of Mobiledit Forensic.
I also own Mobiledit Forensic and run both tools (Mobiledit and Lantern) on the same devices in my cases so that I can compare results.
As a side note, I have learned that one needs many tools in the mobile forensics space and have collected many along the way.
For example, I purchased SyncCell (http://www.synccell.com/) for $24.99 for a case involving an old Motorola flip-phone that none of my other tools would work on.
SyncCell was able to reveal the file and folder structure of the flip-phone and sure enough I found a "messages" folder that contained an "I" sub-folder and an "O" sub-folder from which I was able to recover deleted text messages; "I" equaled the inbox and "O" equaled the outbox.
SyncCell allowed me to extract the the "I" and "O" folders as .BIN files, which I then brought in to OSForensics. OSForensics' file viewer let me view the .BIN files as text and extract out the deleted text messages.
I was also able to use ProofFinder ($100.00) to process Blackberry backup files and extract out the results as PDF files on a recent case.
So, check the forums for different tools to arm your tool kit with.
LL
↧