MOBILE FORENSICS

IT forensic malware reports for smartphones

If there is a suspicion of a malware infection or unauthorised monitoring of a smartphone, a purely technical analysis is often insufficient. In many cases, the findings of the investigation are documented in the form of a comprehensible IT forensic report. The aim is to objectively assess the available digital evidence and present it in a clear and understandable manner.

Description of the investigation mandate
Documentation of data backup
Description of the investigative methods used
Analysis of relevant artefacts
Assessment of IoCs, MVT and YARA hits
Manual validity check
Summary technical assessment
Documenting boundaries and uncertainties

TECHNICAL BACKGROUND

Technical Fundamentals

Depending on the specific issues to be addressed, a computer forensic malware report may include, amongst other things, the following elements:

  • Description of the investigation mandate
  • Documentation of data backup
  • Description of the investigative methods used
  • Analysis of relevant artefacts
  • Assessment of IoCs, MVT and YARA hits
  • Manual validity check
  • Summary technical assessment
  • Documenting boundaries and uncertainties

OUR APPROACH

This is how your examination will be carried out

A transparent process – from the initial enquiry to the handover of the report.

1
Every investigation begins with a proper forensic data backup. The relevant artefacts are then analysed using appropriate tools and through manual analysis. All findings are documented in a transparent manner. Technically verified findings are clearly distinguished from assumptions and probabilities.
2
LanCologne produces private expert reports for private individuals, companies and solicitors, as well as expert reports for use in legal proceedings. Our expert reports have already been used in court proceedings. Furthermore, in certain cases we have been directly commissioned to prepare IT forensic expert reports. Upon request, anonymised and redacted reference reports, or extracts therefrom, can be provided.

TYPICAL QUESTIONS

When is this analysis required?

  • Has the smartphone been infected with malware?
  • Are there any signs of spyware or stalkerware?
  • Which technical findings can be objectively verified?
  • How significant are the existing artefacts?
  • What conclusions are technically justifiable?

LIMITATIONS & CONCLUSION

What you should know

The validity of an expert report depends largely on the available data, the condition of the device and the technical capabilities of the investigation. Not all malware leaves behind traces that can be used in the long term. These limitations are documented transparently and taken into account in the assessment.

An IT forensic malware report combines a structured technical investigation with an objective and transparent assessment of the findings. This provides clients with a sound basis for further decision-making.

CUSTOMER REVIEWS

What our customers say

4.8 out of 5 stars on Trustpilot · 54 reviews

★★★★★

“The highest standards of professionalism, prompt service and excellent communication. They made the seemingly impossible a reality. This is what genuine customer service is all about – unrivalled in Germany!”

idalein

Verified review on Trustpilot

★★★★★

“Very helpful advice, excellent responsiveness and communication. My problem was completely resolved and the lost data was recovered. I’m very satisfied and, of course, relieved!”

Layla Pankratz

Verified review on Trustpilot

★★★★★

“My problem was sorted out professionally and quickly; everyone I spoke to was always friendly, and I can still get in touch if I have any questions – I’m very grateful for that!”

a woman from Cologne

Verified review on Trustpilot

Enquire now – free initial consultation

Do you require a forensic IT report on malware, or would you like to have a suspected case of malware investigated technically? LanCologne can assist you with an objective investigation and comprehensive expert documentation.

FREQUENTLY ASKED QUESTIONS

Frequently Asked Questions

Click on a question to see the answer.

Can a malware report be used in court?

Depending on the terms of the commission and the issues involved, an expert report may be used in legal proceedings.

Who can commission a malware assessment?

Private individuals, companies, solicitors and – depending on the proceedings – courts or other public bodies.

Are assumptions being presented as facts?

No. Verified findings and technical assessments are clearly distinguished from one another.

Which devices can be examined?

Depending on the nature of the enquiry, Android and iPhone devices, as well as their forensic backups.

Can an existing expert report be reviewed?

Yes. Existing expert reports can be assessed from a technical perspective as part of a counter-assessment or a plausibility check.