Oxygen – This is one of my new favorites because I am constantly examining 3rd party applications.

Strange that the Mac guys are doing so well on Windows. If you hear me talk about BlackLight, you know that I rave about the Windows hard drive support. This tool uniquely pulls out Google Maps and Apple Maps searches that the other tools commonly misinterpret. Haven’t you heard that you should examine a Mac with a Mac? A wise examiner once told me that and it still resonates with me. However, it was designed to support iOS devices.

BlackLight – Great tool that can run on a Mac or PC! Primarily supports iOS devices, but I have seen students force load Windows Phones and Android devices into the tool to use it as a file system examination platform.

This tool give you access to them! XRY is strong at parsing strange backup files from smartphones, such as those created with Samsung Kies. Guess what, to recover data that the tools don’t parse you need the raw files.

MSAB XRY/XACT – One of the only tools that consistently provides access to the raw files (databases, xml, dat, plists, BLOBs, etc.) during a logical acquisition.

This tool easily ingests image files from other tools. The new fuzzy models plug-ins are fantastic as they identify databases commonly associated to 3rd party applications that aren’t parsed by the tool. Best physical search feature for locating data in raw hex, other than in file system dumps of iOS devices. PA doesn’t seem to omit files it doesn’t understand, which seems to be happening in other tools. It doesn’t parse everything, but it gives us a platform for analysis where we can leverage it find the evidence with some manual carving and hex searches.

Physical Analyzer – Probably the best analytical platform out there specific to smartphone tools.

In both of these tools, the Custom/Dynamic App finder is so useful as location additional databases of interest that you should examine for relevance. AXIOM is now the up and coming tool, but does have some growing pains, so test it for yourself. One of the best iOS app parsers out there. Magnet – IEF Mobile – Great for Internet evidence and parsing 3rd party application data.*NOTE: DO NOT RELY ON YOUR TOOL TO TELL YOU HOW DATA WAS PLACED ON THE DEVICE-THAT REQUIRES YOUR KNOWLEDGE! VERIFY ALL LOCATION ARTIFACTS!!!

Ufed physical analyzer crack