FINALMobile Forensics 4 2020.02.03

Features
• Capture and/or analyze data from mobile devices through logical or physical acquisitions.

Analysis
The Main purpose of FINALMobile Forensics is to create an accurate and detailed parsing of the data within the file system.
• Program is able to read our own generated phone images (MEFs), along with files generated by other means.
• Once data is loaded, the program will apply the appropriate parsing rules (CDF scripts) to the designated files and folders based on the model number of the mobile device.
• If desired model is not listed, users can run all scripts against the files to appropriate the parsing.
• Results are displayed in an easy-to-read and exportable spreadsheet format.
• Engine is built to reconstruct the file system, and then to parse the data.

Verifying Results
• Users can verify their results by simply looking over the results for irregular formats. Double-clicking any part of the entry will display the file, or part of the file, in the Hexviewer. Also, by using the [Display File Path] option, users can confirm that each file was parsed.

Acquisitions
• FINALMobile Forensics uses a database wizard to streamline the acquisition procedure.

Exporting Results
• Results can be exported in HTML, PDF, or Excel formats.

• Operating System: Windows 2000 / XP / 2003 Server / Vista / 7 / 8 / 10
• CPU: Pentium4 / 2GHz or better / Athlon or better
• RAM: 512 MB or more
• HDD: 10 GB or more
• Graphic Card: 1024 x 768 resolution or better
Supporting Data Types:
· EFS 1, EFS 2, FAT 16/32, ExFAT, TFS4
· EXT2/3/4, YAFFS2
· HFS/HFS+
· NTFS

finaldata.com/news/?uid=12&mod=document