MOBILE FORENSICS

Mobile artefacts – App usage in IT forensics

Nowadays, almost all smartphone activity takes place via apps. Messaging, browser, banking, health and navigation apps generate a vast number of artefacts. Analysing this usage data is one of the key tasks of mobile IT forensics.

Forensic analysis
Documentation admissible in court
GDPR-compliant processing
Experienced experts

OUR APPROACH

This is how your examination will be carried out

A transparent process – from the initial enquiry to the handover of the report.

1
We analyse app-specific databases, log files, configuration files and system artefacts. The results are cross-referenced with timestamps, messages, location data, browser data and other digital traces, and documented in a way that allows the findings to be reproduced.

TYPICAL QUESTIONS

When is this analysis required?

  • ✔Which apps were installed?
  • ✔When were the apps used?
  • ✔Have any apps been installed or uninstalled?
  • ✔What data does a particular app store?
  • ✔Can app activity be correlated with other data points?

LIMITATIONS & CONCLUSION

What you should know

Not every app stores the same information. The scope and storage locations vary depending on the operating system, manufacturer and app version. Deletions or cloud synchronisation can also affect the data situation.

Analysing app usage often provides crucial insights into a device’s behaviour. Only by correlating various pieces of evidence is it possible to carry out a robust forensic assessment.

CUSTOMER REVIEWS

What our customers say

4.8 out of 5 stars on Trustpilot · 54 reviews

★★★★★

“The highest standards of professionalism, prompt service and excellent communication. They made the seemingly impossible a reality. This is what genuine customer service is all about – unrivalled in Germany!”

idalein

Verified review on Trustpilot

★★★★★

“Very helpful advice, excellent responsiveness and communication. My problem was completely resolved and the lost data was recovered. I’m very satisfied and, of course, relieved!”

Layla Pankratz

Verified review on Trustpilot

★★★★★

“My problem was sorted out professionally and quickly; everyone I spoke to was always friendly, and I can still get in touch if I have any questions – I’m very grateful for that!”

a woman from Cologne

Verified review on Trustpilot

Enquire now – free initial consultation

Do you have any questions? Please contact us for a free initial consultation.

RELATED TOPICS

You might also be interested in

FREQUENTLY ASKED QUESTIONS

Frequently Asked Questions

Click on a question to see the answer.

Is it possible to determine when an app was used?
Depending on the operating system and the data situation, corresponding usage artefacts may be present.
Is it possible to recover deleted apps?
To some extent. Remnants of installations or system artefacts may provide clues as to applications that were previously installed.
Are all apps assessed in the same way?
No. The analysis depends on the specific question and the applications installed on the device.
Is app data admissible as evidence?
Yes. They can provide key information on communication, usage and timelines.
Why are app artefacts compared with other data?
Only when combined with timestamps, location data, messages or files is it possible to make a well-founded assessment.