Test Results for Mobile Device Acquisition Tool: MOBILedit! Forensic 3.2.0.738

• NCJ Number: 228979
• Date Published: January 2010
• Length: 57 pages
• Grant Number(s): 2003-IJ-R-029
• Agencies: NIJ
• Publication Type: Test/Measurement; Guideline

Annotation

This report presents results from testing MOBILedit! Forensic, version 3.2.0.738 against the Non-GSM Mobile Device and Associated Media Tool Test Assertions and Test Plan Version 1.1, which is available at the Computer Forensics Tool Testing (CFTT) Web site.

Abstract

Except for 6 of the 18 test cases, the tested tool acquired all supported data objects completely and accurately from the selected test mobile device, the Motorola v710. In one exception, connectivity was not established for two supported (specified by MOBILedit! Forensic documentation) mobile devices over the supported cable interface; therefore, acquisition of device memory was not successful. In a second exception, the MEID was not reported for the Motorola v710, and in a third test case PIM data were not reported for the Motorola v710. In a fourth exception, MMS messages and corresponding attachments (audio, video, and graphic files) were not reported for the Motorola v710. In a fifth exception, stand-alone files (audio, video, and graphic files) were not reported for the Motorola v720. In a sixth test case, an informative message was not returned when altering the case file data via a hex editor. In addition to presenting overall and individual test case findings, this report explains test-case selection and describes the testing environment and the specifications of the computer used in the testing.