MOBILedit Cloud Forensic

MOBILedit Cloud Forensic is a complete cloud data forensic downloader and report generator for the most popular services. It can immediately start downloads when authentication information is found in a phone, and it can run multiple extractions concurrently when time is of the essence. With a successful phone examination provided by MOBILedit Forensic Pro, you have almost everything necessary for a successful cloud extraction. This is because phone applications hold precious login information for most cloud services. Even without a phone, you can still access data from cloud services that are used by millions of people multiple times a day, everyday.

MOBILedit Cloud Forensic is available in two options to cater to both network forensic interception and mobile device examiners.

Integration with MOBILedit Forensic

The first option is direct integration of Cloud Forensic with MOBILedit Forensic Pro. With this option, you can extract data from clouds via mobile device connected to MOBILedit Forensic Pro. The credentials are extracted from the device, and cloud extraction is started as part of the phone examination process. These credentials are also saved so that an investigator can either use the token or the account login details at a later date.

Standalone version

The second option is a standalone software product for investigating cloud storage and cloud services without the need to examine mobile devices. Access to clouds using this method requires a password and a username or a token imported from another source.

In both cases, you can investigate more than one cloud at a time, and extractions will run concurrently to help you work faster and retrieve more evidence quickly.
The extractable amount of data is as big as the cloud account. Therefore, you will have to take storage capacity into consideration or filter by time frame at the point of extraction. Additionally, tokens do have an expiration date depending on the service provider.
 

Features you will get

- Automatic download of clouds using either an authorization token or a username and password credentials. These can be found, extracted, and saved from a phone during extraction and analysis with MOBILedit Forensic Pro.
- Both authorization token access and username and password access are supported. An authorization token is a file saved on a computer or mobile device. It recognizes a device and account to allow a user to log in to a service without having to enter a username and password every time.
- Manual access by entering a user name and password.
- Immediate and concurrent downloads that enable an investigator to work effectively while extracting the maximum amount of data in the shortest time possible. Time is critical because a user can wipe all data, a token could expire, or a password could be changed.
- All data can be filtered and the output customized for reporting.
- Professional reports and exports in the following formats: pdf, html, xml, ufdr, and Excel.
- Full file structure download

Supported file-storage services

- Box
- Dropbox
- Google Drive
- Microsoft OneDrive
- FTP

Supported social networks and other services

- Facebook
- Facebook Messenger
- Google Contacts, Calendar, Keep
- Instagram
- LinkedIn
- Slack
- Twitter
- Emails such as Gmail, Outlook, and many others through POP3, IMAP protocols
- and more

Why Clouds?

- By 2025 it is estimated that half of the world's data will be in the cloud, accounting for 100 zettabytes. That's 100 billion terabytes of data.
- The average person is storing 500GB of data in their personal cloud storage. Regarding text documents alone, the average person stores around 130GB of these in the cloud, which equates to 10 million pieces of paper. Now imagine the possible amount of evidence hiding there.
- Facebook Messenger is one of the leading messaging platforms in the US, with more than 2 million monthly downloads. More than 20 billion messages are exchanged between businesses and users monthly on Facebook Messenger.