Mobile Forensics Background Knowledge

What is the difference between Computer Forensics and Mobile Phone Forensics?

What is CDMA?

What is GSM?

 

System Requirements

What Operating Systems are supported by MPE+?

What prerequisites must I install manually before installing MPE+?

 

Licensing

How do I move my MPE+ installation to a different computer?

 

Installing & Running MPE+

How do I completely uninstall MPE+?

How do I install MPE+?

How do I remove the MPE+ Tablet software?

What is the importance of the MPE+ TEMP folder and where should I put it?

How do I change the location of my MPE+ TEMP folder?

 

MPE+ nFIELD

What is the MPE+ nFIELD?

How do I install MPE+ nFIELD?

Where are extracted images and reports from MPE+ nFIELD stored?

Why is my connected drive not visible as a storage destination in MPE+ nFIELD?

How large should my storage destination be for MPE+ nFIELD?

 

MPE+ Velocitor

What is the MPE+ Velocitor?

How can I obtain an MPE+ Velocitor?

Does the MPE+ Velocitor work on Windows XP?

How can I extract data using the MPE+ Velocitor?

How can I parse data from physical BIN images crated by the MPE+ Velocitor?

Why does the MPE+ Velocitor wizard fail to detect the COM port?

Why does the MPE+ Velocitor wizard fail to detect the chipset?

How do I build a UART connector to use with the MPE+ Velocitor?

Why does the MPE+ Velocitor wizard seem to stall?

 

Drivers

What drivers are included with MPE+?

How do I modify what drivers are installed?

What do I do if I am unable to download the driver via MPE+?

Do I really need the Physical Acquisition Support files?

What do I do if I am unable to download the Physical Acquisition Support files via MPE+?

MPE+ still notifies me to download the Physical Acquisition Support files even though I've already downloaded them

Does AccessData provide drivers for every supported phone?

 

Cables

Why does MPE+ prompt me for different cables than the ones included in my cable pack?

Can I use OEM cables with MPE+?

Does AccessData provide cables for every supported device?

How do I use the Auxiliary Power Supply Cable?

 

Phones

What phones/devices are supported by MPE+?

Why aren’t all phones supported by MPE+?/Why can’t MPE+ collect all the data from every phone?

What is the general process for acquiring data from a phone?

 

SIM Cards

What are the black cards I received in the MPE+ bundle?

What is a forensic SIM?

What is the process for acquiring data from a SIM card?

How do I create a forensic SIM?

 

Android Devices

What types of data can MPE+ extract and automatically parse from supported

Android devices (not including supplemental parsers)?

How can I collect logical data from an Android device with MPE+?

How can I collect physical images from Android devices with MPE+?

How can I automatically parse out extra data from an Android physical image?

Which devices can MPE+ Shell Root on its own when performing physical imaging?

Why does MPE+ say "ADB driver not found" when trying to connect?

Does AccessData provide ADB (Android Debug Bridge) drivers for all supported Android phones?

How can I make sure my ADB driver is working?

Can I carve for deleted user data (SMS, call history, contacts, etc.) on an Android device?

Can MPE+ bypass PIN/password/pattern locks on an Android device?

 

Apple Devices

List Of Supported IOS Devices

What types of data can MPE+ extract and automatically parse from supported iOS devices (not including supplemental parsers)?

How can I collect logical data from an iPhone/iPad/iPod Touch with MPE+?

How can I collect physical images from an iPhone/iPad/iPod Touch with MPE+?

How can I parse out data from an Apple physical image?

How can I parse out data from an iTunes backup?

Why does MPE+ allow for fewer extraction categories in iOS 8?

Can MPE extract data from my iOS device if it has an unknown PIN/password?

What is a pairing record and where are they stored?

How can I determine the unique identifier (UDID) of a locked device?

MPE+ fails to connect to Apple devices

MPE+ can't connect, and iTunes reports the device is "supervised with another computer and cannot be used with this computer." What does this mean, and is there a way around this?

In the logical image of my Apple device, all the emails are blank. What causes this?

Why does the DFU wizard keep looping?

How do I get my device out of DFU mode?

What are the .IOS_KEYS files created during physical extractions?

Why can’t FTK display some files in a physical DD image from an Apple device?

Why can’t FTK display some PNG graphics in a physical iOS image even after decryption?

Can I recover deleted data on an iOS device?

 

BlackBerry Devices

How can I collect logical data from a BlackBerry with MPE+?

How can I automatically parse out data from a BlackBerry IPD/BBB backup?

MPE+ does not properly display the natural previews of files from an encrypted BlackBerry?

How do I extract files from an encrypted SD card?

 

iDEN Devices

How can I collect logical data from an iDEN device with MPE+?

 

Windows Mobile Devices

How can I collect logical data from a Windows Mobile device with MPE+?

MPE+ pushes the agent to my phone, but then says it cannot find the device. Why is this happening?

Is Windows Phone OS Supported by MPE+?

 

General Troubleshooting

Why does MPE+ say my device is not ready or otherwise unable to connect?

Why did MPE+ fail to collect some data from my device?

Why did MPE+ pull all the data off my device when I only selected to acquire the File System?

I told MPE+ to acquire all data from my supported CDMA phone, but the extraction failed?