Today, we cannot imagine our lives without portable devices. New models pop up every day: we use them to communicate, to study, to work. But so do the criminals! The complexity of modern mobile devices may bring you an unaccounted number of challenges during evidence recovery. That is why it is so important to have at your disposal every forensic data recovery tool that can help you with the investigations!
Smartphones
(Mobile Phones)
Tablets
The PC-3000 Mobile PRO includes a specialized set of ACE Lab unique methods and utilities meant for low-level access to mobile devices with the help of a USB cable to recover data in the most complicated cases.
Get the data even if the mobile device is damaged! Minimum operating condition of the mobile device is required
Analyze the content of the mobile devices extracted with the High-level Access or the Chip-off Method thanks to the integrated content parser! You can also upload the images created with third-party solutions and extract data that conventional tools consider as "deleted". The reports allow you to summarize information about the suspect device you are working with.
The PC-3000 Mobile PRO specialized modes let you deal with damaged mobile devices. In addition, it has the features to deeply analyze and recover logically damaged Files Systems: FAT12/16/32, NTFS, Ext2/3/4, HFS+, exFAT, F2FS, etc.
Extract evidence with the PC-3000 Mobile PRO set of analytical functions, tools for forensic analysis, and content parsing modules!
Get the access to the phone contacts, calendar, SMS, WhatsApp, mediafiles, general phone information, the list of Wi-Fi networks, and accounts information. The Android version does not matter!
The main task of the PC-3000 Mobile PRO is to get access to the data other than parsing.
So, after you have received access to the data with the PC-3000 Mobile PRO, you can work with this information using other third party tools.
After you get the data, you may export it to the formatted report, one of the transport formats, or files. It is also possible to generate data exports compatible with other data analysis tools that you may have in your lab to continue the investigation.
With the special SD/MMC adapter, you can deal with the following types of MMC and MCP memory chips:
 |
 |
 |
 |
 |
 |
 |
|
| Type/Size | 11.5 x 13 | 10 x 11 | 9 x 11 | 14 x 18 | 12 x 18 | 12 x 16 | 15 x 15 |
| eMMC 153/169 | + | + | + | + | + | + | + |
| eMCP 162/186 | + | + | + | + | + | + | + |
| eMCP 221 | + | + | + | + | + | + | + |
| eMCP 529 | + | + | + | + | + | + | + |
| MMC memory chips | Types: eMMC 153/169, eMCP 162/186, eMCP 221, eMCP 529 |
| Sizes: 11,5x13, 10x11, 9x11, 14x18, 12x18, 12x16, 15x15 | |
| Processors models |
If the PC-3000 Mobile PRO does not support your mobile device but your device is based on the supported controller, please contact our Technical Support through the New TS Portal ts.acelab.eu.com or via email ts@acelab.eu.com with your request, and our developers will do their best to add your device to the support list in the nearest time. |
The PC-3000 Mobile PRO uses specialized low– and high-level access methods created for each supported processor. It allows you to recover data on modern mobile devices with up-to-date data storage and protection technologies.
The instruments of the PC-3000 Mobile PRO are universal and can be quickly adapted for most of the smartphone models based on the supported processors. For that, just contact our Technical Support through the New TS Portal ts.acelab.eu.com or via email support@acelab.eu.com with your request, and our developers will do their best to add your device, that had not been supported earlier, to the support list within the nearest time.
The number of supported processors and mobile devices is growing. Thus, if you have a particular case, we recommend you to contact our Technical Support to check whether your mobile device is currently supported.
The first method to work with mobile devices is a connection via the standard interface. You may also use it when the smartphone/tablet has a data protection mechanism based on the hardware uniqueness or if it is not possible to disassemble the device.
If a smartphone or a tablet is physically damaged, you should repair it to a basic- or fully-functional state, depending on the interface type and the method you’re going to use. In such a case, we do not recommend using a Chip-off method.
Another important thing is the hardware platform of the device and the installed OS. The device itself, its state, and the task also influence the data recovery methods. To choose the correct approach, please select the device in the menu or access method from the list and follow the instructions of the wizard.
The universal way of data recovery via the standard interface of a mobile device based on the Android OS is to use the ADB protocol (Android Debug Bridge). The procedure requires compliance with the following conditions:
Here is the video guide on how to get access to a mobile device via the ADB protocol:
Another method of access data via the standard interface is to use the hardware capabilities of modern mobile devices. E.g. such hardware platforms as MediaTek, Qualcomm, LG, Spreadtrum, Kirin, Exinos, Apple have their own debug protocol executed at the early stages of the device initialization. In many cases, this method allows you to access data without the need for the root mode.
Here is the video guide on how to get access to a mobile device via the debug protocol:
In most cases, if a smartphone or a tablet is damaged, the only way to recover data is to work with their internal memory directly. This method implies that the interface type of the memory chip is supported and there are no other restrictions. This method can be applied if there is no encryption on the mobile device and if the OS is Android 7.0.1 and older.
So, to recover data you need to disassemble the device and extract the mainboard with the memory chip. Then you can proceed with the chip-off and clearing of the contacts. Please note, that it’s very important to do it carefully, complying with all the requirements for the procedure. Then you install the microchip into the specialized eMMC/eMCP adapter, run the software, and follow the instructions on the screen and in the manual.
All the information inside the internal memory of the mobile devices is stored as files. This is not convenient for visual perception or further analysis because almost all types of data in smartphones or tablets use special apps to display data. These apps can technically have any storage format, but in practice, there are some standard file types.
That is why it is not possible to recover user data in the same way we used to see it on the mobile device screen. For example, the standard contacts info has a very complex storage format that consists of several database files with a complex linkage. As a result, an additional stage of data recovery – parsing of the standardized content – is required. As such, we need to extract user data that will be enough for further analysis from the technical storage format, taking into account the characteristics of a particular manufacturer and the OS version. At the same time, such an extraction should be individual for each data (content) type.
The PC-3000 Mobile allows you to upload previously read dumps of the mobile devices' external memory to perform further parsing of the standardized content. The Module contains special algorithms to work with damage storage formats as well as proprietary format decoders to extract data that conventional tools consider as “deleted”.
The PC-3000 Mobile gets regular software updates. Our developers constantly work on the enhancements and add the support of new mobile devices. You can download the latest software versions on the New TS Portal ts.acelab.eu.com.
If the PC-3000 Mobile PRO does not support your mobile device but your device is based on the supported controller, please contact our Technical Support through the New TS Portal or via email ts@acelab.eu.com with your request, and our developers will do their best to add your device to the support list in the nearest time.
| 1. | PC-3000 Mobile PRO controller | 1 pc. |
| 2. | PC-3000 Mobile power supply unit | 1 pc. |
| 3. | SD/MMC
adapter + 7 size constraint frames |
1 pc. |
| 4. | USB 3.0 - USB Type-C adapter | 1 pc. |
| 5. | MicroUSB - USB Type-C adapter | 1 pc. |
| 6. | USB 3.0 cable | 1 pc. |
| 7. | USB-USB Type С cable | 1 pc. |
| 8. | USB-micro USB cable | 1 pc. |
| 9. | Universal download сable | 1 pc. |
| 10. | PC-3000 Mobile PRO software | 1 pc. |
| 11. | User manual | 1 book |
| 12. | Equipment hard case | 1 pc. |
