Digital Forensics

Mobile Phone Forensics

Forensic acquisition, analysis and reporting for mobile phones and tablets.

We acquire and analyse data from mobile phones in a forensically sound way and report what the evidence shows. Analysis is combined with our in-house Archery IT Malware Detection Suite to identify malicious software on the device, and Android acquisitions can be handled with our own Archery IT Android Extractor.

Who it’s for

Attorneys and legal teams
Corporate and internal investigators
Insurers and fraud investigators
Private individuals with a legitimate legal interest

What we examine

Messages, call logs and contacts, where recoverable
Photos, videos, documents and downloads
Installed applications, accounts and device information
Logs and timeline information
Indicators of malware or spyware

How an engagement works

Initial consultation

We confirm the objective, the device, your authority to have it examined and any urgency.

Secure intake

The device is received under a documented chain of custody and its condition is recorded.

Forensic acquisition

Data is acquired with appropriate tools and verified with cryptographic hashes.

Analysis

We examine the acquired data against the agreed questions.

Reporting

You receive findings in the agreed format, with method and limitations stated.

What you need

Lawful authority to examine the device (owner consent, employer policy or court order)
The device, its charger and, where available, the passcode
A clear statement of what needs to be established

What you receive

Acquisition record with hash values
Structured case files and exported artefacts
Written findings report
Expert explanation of results on request

Limitations. What can be acquired depends on the make, model, operating-system version, encryption, the device’s condition and whether a passcode is available. Deleted data is not always recoverable. We tell you what is and isn’t achievable after the initial assessment, and before you commit to further work.

Please don’t upload evidence or send passwords through this website. Once we’ve discussed your matter, we’ll arrange a secure handover with a documented chain of custody. How evidence is handled.

Questions

Can you recover deleted WhatsApp messages?

Sometimes. It depends on the device, backups, encryption and how much time has passed. We assess this before quoting for full analysis.

Do I need the passcode?

Providing it, where you are entitled to, greatly improves what can be acquired. Without it, options depend on the device and may be limited.