Practical Mobile Forensics - Third Edition

Magnet IEF

Magnet IEF has been known as one of the leaders in internet and application parsing for digital media. They are just as strong with mobile devices. Again, one tool cannot do the job, but IEF proves to be the strongest and parses the most applications from Android, iOS, and Windows Phones. The downside to this tool is that we are forced to rely on the reported artifacts, as the file system is not normalized and provided for manual examination. To use IEF to examine application artifacts, follow these steps:

1. Launch IEF and then select MOBILE (note that if MOBILE is grayed out, you need to obtain a license that provides mobile support from Magnet Forensics):

Magnet IEF

2. Select IMAGES and navigate to your image file. More than one ...