Digital forensics · Incident response · Cyber readiness
Contact DFI

Digital Forensics

Bring mobile evidence into focus.

Collect and examine available messages, media and application records from a phone or tablet, with specialist access assessment for locked devices when a passcode is lost, forgotten or unknown.

Discuss a mobile examination

01

Assess the device first.

Start with the model, operating system, device condition and available access. These details help determine the feasible collection methods and what preparation is appropriate. Collection capability varies between devices.

02

Keep communications in context.

Review the relevant conversations, attachments and surrounding records where available. Participants, dates and the relationship between records can matter as much as the words visible on screen.

03

Create a usable result.

Agree how counsel or the client will review the material. That may mean selected conversations, attachments, a structured production or a report explaining the collection and findings.

ACCESS TO LOCKED PHONES

Forgotten or lost your phone’s passcode? DFI can help.

A lost, forgotten or unknown passcode does not have to end the conversation. DFI assesses whether specialist access options are available for your particular phone and the evidence you need.

Capabilities depend on the make, model, operating system and exact software version. A specialist assessment establishes the available options; unlocking and data recovery cannot be guaranteed for every device.

We work with device owners, authorized organizations, estate representatives and legal counsel who have proper authority for the examination.

Can DFI unlock a phone if the passcode is lost, forgotten or unknown?

There may be specialist access options, depending on the phone’s make, model, operating system and exact version. DFI assesses the device and your authority to determine what is feasible. Access and recovery are not possible in every case.

MOBILE COMMUNICATIONS

Text messages and messaging-app evidence

Start with the conversations that matter. We assess available messages, attachments and related information within the authorized scope.

Text messages

SMS, MMS and iMessage conversations, including relevant attachments and surrounding records where available.

  • SMS
  • MMS
  • iMessage

Messaging apps

WhatsApp, WeChat, Telegram, Signal and other apps, assessed against the specific device, app and available sources.

  • WhatsApp
  • WeChat
  • Telegram
  • Signal
  • Other apps

Availability depends on the device, operating system, app version, access and retention. An app named here is a source to assess, not a guarantee of extraction or deleted-message recovery.

App names are references only. No affiliation or endorsement is implied.

Explore text and messaging evidence

RELEVANT SOURCES

Start with what is available.

Discuss the sources that can help answer the question, within an authorized scope.

iPhone and iPadSupported Android phones and tabletsText messages and messaging-app recordsAvailable media, backups and account sources

BEFORE WE BEGIN

A more useful first conversation.

  • Confirm the model and operating system.
  • Arrange a charged device and agreed access.
  • Follow device-specific preparation instructions from DFI.

YOUR NEXT STEP

What do you need to understand?

Tell us what you need to understand.

Discuss a mobile examination