MPE+ Mobile Phone Examiner Plus

With support for more than 6,800 cell phones and mobile devices, including iOS, Android, Blackberry, Chinese MTK chip devices and Windows Mobile, MPE+ enables examiners to perform advanced mobile device investigations without having to purchase an overpriced suite of modules or cumbersome hardware.
Mobile Phone Examiner Plus (MPE+) delivers an intuitive interface, data visualization and smart device support, including application analysis, in a single mobile forensics solution. MPE+ supports even the most challenging mobile device profiles and offers the broad capabilities of high-priced tools at a fraction of the cost. Featuring advanced carving, deleted data recovery, SQLite database browsing and filtering options; MPE+ is the perfect choice for mobile forensics examiners looking to upgrade their capabilities.
MPE+ is available as a software solution or preconfigured on a sleek tablet for use in the field.

Solution Highlights
MPE+ Software Supports 6800+ mobile devices Industry-first data visualization Extensive analysis of iOS and Android Devices One-click deleted data recovery Automated smart device app recovery On-the-fly decryption Forensic SIM cloner Data carving PLIST viewer SQLite database & iTunes backup browsers Intuitive Graphical Interface Preconfigured Touch Tablet Multi-Touch 10.1" Capacitive Screen Intel ATOM Dual Core Processor 2Gb DDR3 SDRAM 16Gb SATA Solid State Drive 16Gb 3.0 MPE+ Tablet Flash Drive SD Card Slot Ethernet Adapter

Features
Physical Imaging of Android Devices: MPE+ enables physical imaging of Android devices. MPE+ features built-in rooting functions that allow the physical analysis of any partition on an Android device. No need to pay for additional rooting suites. Bypass passwords on select Android Devices: MPE+ enables physical imaging of Android password protected devices. It bypasses all password protection and conducts full partition imaging on all devices with USB debugging turned on and on select devices with USB debugging turned off. iOS Devices: MPE+ supports physical image acquisition and logical support for iPhone (both CDMA and GSM), iPad and iPod Touch devices, without jail breaking. Additionally, investigators can acquire physical and logical data simultaneously, without the need for iTunes. With this MPE+ feature, investigators no longer need to purchase a separate analyzer module or pricey suite to work with iOS devices.

Automated Deleted Data Recovery: MPE+ has one-click recovery of deleted data from both Android and iOS devices. Additionally, MPE+ will allow the recovery of deleted data from any SQLite Database with its built-in FreeFile parser. Automated Application Recovery: MPE+ delivers one-click recovery of smart device app data, including but not limited to LinkedIn, Twitter, Facebook, GoogleVoice, Skype, WeChat and QQ and the list continues to grow. SIM/USIM/RUIM/CSIM: MPE+ allows for not only contacts, SMS and calls to be recovered but the filesystem. Included with MPE+ is a deep fileystem scan that uncovers additional files not typically located on a subscriber identity module. Advanced Analytics with Graphical Data Visualization: The new graphical interface allows for more intuitive analysis. MPE+ has an enhanced gallery view, as well as an industry-first graphical data visualization tool with timeline and social analysis. Generate Customized Reports in the Field and Email Back to the Lab: Generate reports to detail phone data. With wireless access, you can securely email the report to your lab. Integrates with FTK: MPE+ created images integrate seamlessly with FTK, allowing investigators to correlate evidence from multiple mobile devices with evidence from multiple computers within a single interface

Timeline Visualization

Social Analysis

Smart Device App Analysis

CORPORATE HEADQUARTERS 801.377.5410 588 West 400 South Suite 350 Lindon, UT 84042 USA NORTH AMERICAN SALES 800.574.5199 Fax: 801.765.4370 sales@accessdata.com INTERNATIONAL SALES +44 (0)20 7010 7800 internationalsales@accessdata.com

www.accessdata.com