AccessData's Mobile Phone Examiner Plus 4.4 Decrypts Locked iOS® File Systems and Extracts Data from Rooted Android® Devices

iOS File System Decryption Supports iPhone® 4, iPad® 1 and iPod® Touch 3 and 4 Devices

LINDON, Utah--(BUSINESS WIRE)--Today, AccessData announced the release of "Mobile Phone Examiner Plus” ("MPE+") 4.4, which is a stand-alone cell phone forensics software solution that integrates seamlessly with the leading computer forensics technology, Forensic Toolkit® (FTK®). With the ever-growing market penetration of smart devices, law enforcement, government agencies and corporations are struggling to find tools that will allow them to effectively analyze and preserve data from these new technologies. AccessData Group has been a leader in delivering advanced smart device acquisition and analysis capabilities to address these challenges.

“MPE+ now offers unsurpassed support for approximately 3500 mobile devices, including smart devices such as the iPhone, iPad, Blackberry® and Android® products, which are now a primary concern among computer forensics professionals”

“MPE+ now offers unsurpassed support for approximately 3500 mobile devices, including smart devices such as the iPhone, iPad, Blackberry® and Android® products, which are now a primary concern among computer forensics professionals,” commented Lee Reiber, Director of Mobile Forensics at AccessData Group.

MPE+ is available as a software-only solution for the lab or on a preconfigured Field Tablet for onsite phone acquisitions. This product update supports 1,000 additional mobile devices and introduces new capabilities to aid investigators and ediscovery practitioners in handling smart phones and tablets. Some key enhancements include, but are not limited to, the following:

• MPE+ can now extract and decrypt the logical OS partition and logical user partition from iOS and iOS4 devices, including iPhone 4, iPad 1, and iPod Touch 3 and 4 devices.
• MPE+ is one of the first mobile forensics solutions to enable full user data extraction from rooted Android devices to include SQLite databases, deleted application cache, user name and passwords, internet histories, location information and deleted data.
• With the new Forensic SIM Cloner, examiners can now create their own forensic SIM cards. This allows the examiner to remove the original SIM card and replace it with a forensic SIM clone to process the phone without altering data. Hash validation ensures that the original and forensic SIM cards are identical.
• AD01 files created by MPE+ are now supported by FTK 1.81 and the popular tool, FTK Imager.
• Export data such as phonebook, sms/mms messages, call history, calendar and emails to .cvs files, allowing investigators to easily download critical reports during their examination.

About AccessData

AccessData Group has pioneered computer forensics and litigation support for more than twenty years and is the maker of the award-winning technologies, FTK and Summation. Over that time, the company has grown to provide a family of stand-alone and enterprise-class solutions that enable digital investigations of any kind, including computer forensics, incident response, e-discovery, legal review, IP theft, compliance auditing and information assurance. More than 100,000 users in law enforcement, government agencies, corporations and law firms around the world rely on AccessData software solutions and its premier digital investigations and hosted review services. AccessData Group is also a leading provider of digital forensics and litigation support training and certification. www.accessdata.com.