Introductions and Getting Started |
- Overview of how to use Mobile Device Investigator (MDI)
- MDI terminology – Artifact Captures
- MDI terminology – File Captures
- MDI search profiles
- General profiling
- Child exploitation profiles
|
- Mobile Device Investigator software installation
|
Connecting Phones for a Forensic Scan |
- Apple iOS configuration requirements
- Android configuration requirements
- Android driver and configuration issues
|
- Overview of previewing iOS and Android devices
|
- Capturing screenshots only
- Capturing screenshots and a logical acquisition
- Tips and tricks for documenting evidence with screenshots
|
Capture: Conducting a Scan |
- Case study: Scanning an attached phone
- Case study: Scanning phone backup
|
- Navigating scan results
- Understanding picture, video, keyword, files, and timeline views
- Column settings
- Filtering captures and picture, video, keyword, files, and timeline views
- Tagging
- Commenting
|
Customizing Captures and Search Profiles |
- Hash Sets
- Keywords
- File identification and embedded items
|
- Case study: Creating appropriate reports
- Reporting - HTML
- Reporting - CSV
- Reporting - Stand-alone viewer
|
- Importing search profiles
- Implications of thorough file identification and searching within containers
- File type creation and implications
- Searching browser cache issues
- Case study: Knowledge check
|
|