mpe+ mobile phone examiner plus - complexbiz · data recovery, sqlite database browsing and...

2
MPE+ Mobile Phone Examiner Plus With support for more than 6,800 cell phones and mobile devices, including iOS ® , Android , Blackberry ® , Chinese MTK chip devices and Windows Mobile , MPE+ enables examiners to perform advanced mobile device investigations without having to purchase an overpriced suite of modules or cumbersome hardware. Mobile Phone Examiner Plus® (MPE+) delivers an intuitive interface, data visualization and smart device support, including application analysis, in a single mobile forensics solution. MPE+ supports even the most challenging mobile device profiles and offers the broad capabilities of high-priced tools at a fraction of the cost. Featuring advanced carving, deleted data recovery, SQLite database browsing and filtering options; MPE+ is the perfect choice for mobile forensics examiners looking to upgrade their capabilities. Features Physical Imaging of Android™ Devices: MPE+ enables physical imaging of Android devices. MPE+ features built-in rooting functions that allow the physical analysis of any partition on an Android device. No need to pay for additional “rooting” suites. Bypass passwords on select Android Devices: MPE+ enables physical imaging of Android password protected devices. It bypasses all password protection and conducts full partition imaging on all devices with USB debugging turned on and on select devices with USB debugging turned off. iOS® Devices: MPE+ supports physical image acquisition and logical support for iPhone® (both CDMA and GSM), iPad® and iPod Touch® devices, without jail breaking. Additionally, investigators can acquire physical and logical data simultaneously, without the need for iTunes®. With this MPE+ feature, investigators no longer need to purchase a separate analyzer module or pricey suite to work with iOS devices. Automated Deleted Data Recovery: MPE+ has one-click recovery of deleted data from both Android and iOS devices. Additionally, MPE+ will allow the recovery of deleted data from any SQLite Database with its built-in FreeFile parser. Automated Application Recovery: MPE+ delivers one-click recovery of smart device app data, including but not limited to LinkedIn, Twitter, Facebook, GoogleVoice, Skype, WeChat and QQ… and the list continues to grow. SIM/USIM/RUIM/CSIM: MPE+ allows for not only contacts, SMS and calls to be recovered but the filesystem. Included with MPE+ is a deep fileystem scan that uncovers additional files not typically located on a subscriber identity module. Advanced Analytics with Graphical Data Visualization: e new graphical interface allows for more intuitive analysis. MPE+ has an enhanced gallery view, as well as an industry-first graphical data visualization tool with timeline and social analysis. Generate Customized Reports in the Field and Email Back to the Lab: Generate reports to detail phone data. With wireless access, you can securely email the report to your lab. Integrates with FTK®: MPE+ created images integrate seamlessly with FTK®, allowing investigators to correlate evidence from multiple mobile devices with evidence from multiple computers within a single interface Solution Highlights MPE+ Software • Supports 6800+ mobile devices • Industry-first data visualization • Extensive analysis of iOS and Android Devices • One-click deleted data recovery • Automated smart device app recovery • On-the-fly decryption • Forensic SIM cloner • Data carving • PLIST viewer SQLite database & iTunes backup browsers • Intuitive Graphical Interface Preconfigured Touch Tablet • Multi-Touch 10.1" Capacitive Screen • Intel ATOM Dual Core Processor • 2Gb DDR3 SDRAM • 16Gb SATA Solid State Drive • 16Gb 3.0 MPE+ Tablet Flash Drive • SD Card Slot • Ethernet Adapter MPE+ is available as a software solution or preconfigured on a sleek tablet for use in the field.

Upload: others

Post on 25-Jun-2020

6 views

Category:

Documents


0 download

TRANSCRIPT

Page 1: MPE+ Mobile Phone Examiner Plus - ComplexBiz · data recovery, SQLite database browsing and filtering options; MPE+ is the perfect choice for mobile forensics examiners looking to

MPE+ Mobile Phone Examiner Plus

With support for more than 6,800 cell phones and mobile devices, including iOS®, Android™, Blackberry®, Chinese MTK chip devices and Windows Mobile™, MPE+ enables examiners to perform advanced mobile device investigations without having to purchase an overpriced suite of modules or cumbersome hardware.Mobile Phone Examiner Plus® (MPE+) delivers an intuitive interface, data visualization and

smart device support, including application analysis, in a single mobile forensics solution.

MPE+ supports even the most challenging mobile device profiles and offers the broad

capabilities of high-priced tools at a fraction of the cost. Featuring advanced carving, deleted

data recovery, SQLite database browsing and filtering options; MPE+ is the perfect choice for

mobile forensics examiners looking to upgrade their capabilities.

FeaturesPhysical Imaging of Android™ Devices: MPE+ enables physical imaging of Android devices. MPE+ features built-in rooting functions that allow the physical analysis of any partition on an Android device. No need to pay for additional “rooting” suites.

Bypass passwords on select Android Devices: MPE+ enables physical imaging of Android password protected devices. It bypasses all password protection and conducts full partition imaging on all devices with USB debugging turned on and on select devices with USB debugging turned off.

iOS® Devices: MPE+ supports physical image acquisition and logical support for iPhone® (both CDMA and GSM), iPad® and iPod Touch® devices, without jail breaking. Additionally, investigators can acquire physical and logical data simultaneously, without the need for iTunes®. With this MPE+ feature, investigators no longer need to purchase a separate analyzer module or pricey suite to work with iOS devices.

Automated Deleted Data Recovery: MPE+ has one-click recovery of deleted data from both Android and iOS devices. Additionally, MPE+ will allow the recovery of deleted data from any SQLite Database with its built-in FreeFile parser.

Automated Application Recovery: MPE+ delivers one-click recovery of smart device app data, including but not limited to LinkedIn, Twitter, Facebook, GoogleVoice, Skype, WeChat and QQ… and the list continues to grow.

SIM/USIM/RUIM/CSIM: MPE+ allows for not only contacts, SMS and calls to be recovered but the filesystem. Included with MPE+ is a deep fileystem scan that uncovers additional files not typically located on a subscriber identity module.

Advanced Analytics with Graphical Data Visualization: The new graphical interface allows for more intuitive analysis. MPE+ has an enhanced gallery view, as well as an industry-first graphical data visualization tool with timeline and social analysis.

Generate Customized Reports in the Field and Email Back to the Lab: Generate reports to detail phone data. With wireless access, you can securely email the report to your lab.

Integrates with FTK®: MPE+ created images integrate seamlessly with FTK®, allowing investigators to correlate evidence from multiple mobile devices with evidence from multiple computers within a single interface

Solution HighlightsMPE+ Software• Supports 6800+ mobile devices• Industry-first data visualization• Extensive analysis of iOS and Android Devices• One-click deleted data recovery• Automated smart device app recovery• On-the-fly decryption• Forensic SIM cloner• Data carving• PLIST viewer• SQLite database & iTunes backup browsers• Intuitive Graphical Interface

Preconfigured Touch Tablet• Multi-Touch 10.1" Capacitive Screen• Intel ATOM Dual Core Processor• 2Gb DDR3 SDRAM• 16Gb SATA Solid State Drive• 16Gb 3.0 MPE+ Tablet Flash Drive• SD Card Slot• Ethernet Adapter

MPE+ is available as a software solution or preconfigured on a sleek tablet for use in the field.

Page 2: MPE+ Mobile Phone Examiner Plus - ComplexBiz · data recovery, SQLite database browsing and filtering options; MPE+ is the perfect choice for mobile forensics examiners looking to

CORPORATE HEADQUARTERS801.377.5410588 West 400 SouthSuite 350Lindon, UT 84042 USA

NORTH AMERICAN SALES800.574.5199Fax: 801.765.4370 [email protected]

INTERNATIONAL SALES+44 (0)20 7010 [email protected]

www.accessdata.com

Timeline Visualization u

Social Analysis u

Smart Device App Analysis u