Mobile Marshal

ATC-NY will develop Mobile Marshal, a forensic data extraction and visualization tool that operates on backup files generated from mobile devices. Mobile Marshal will extract valuable cell phone information such as the contact list, SMS messages, and call logs.

Additionally, because of the flexibility of the backup files, formats, other data such as pictures, calendar events, and to-do lists will be extracted. Mobile Marshal will compare multiple backup files to determine differences between them, thus identifying when data objects have been added or removed from a device. Mobile Marshal records an audit log of all the actions it takes, generates forensically sound hashes of all data, and provides detailed reports of the information extracted.

ca/ncf