Mobile Forensic Software

MD-NEXT is data extraction software for Smartphones, Feature phones, Drones, SmartTVs, Wearables, IoT devices, USIM cards, SD memory cards, JTAG boards, and Chip-off memory.


MD-RED is the forensic software for the recovery, analysis and reporting of the extracted data from mobile devices.


MD-LIVE is the forensic software for the live data extraction and analysis from the smartphone, which helps the first responder to get the evidence easily on the spot.

Mobile forensics software for Smartphone, Feature phone, Drone, Smart TV, Wearable, IoT device, USIM card, SD memory card, JTAG board, and Chip-off memory

MD-NEXT is a forensic software for data extraction from diverse mobile and digital devices. It supports physical and logical extraction methods for Android, iOS, Windows OS, Tizen OS, and other mobile OS.
MD-NEXT supports data extraction from MD-READER(Chip-off memory), MD-BOX(JTAG board), USIM reader, SD memory reader, OS backup protocol, agent app, and new cutting-edge extraction methods

Product Highlights

MD-NEXT supports data extraction from MD-READER(Chip-off memory), MD-BOX(JTAG board), USIM reader, SD memory reader, OS backup protocol, agent app, and new cutting-edge extraction methods

System Requirements
  • OS: Windows 7/8/10 (64 bit)
  • CPU: i5 or faster
  • RAM: 4GB or above
  • Storage: 1TB or above
  • Display: 1024x768 or higher
  • USB: 2 or more USB 2.0 ports
  • Microsoft.Net Framework 4.6.2
Product components
  • MD-NEXT Installation Software (CD/USB/Online)
  • USB Dongle Key 1 EA
  • Warranty 1 Year
Key Features
Complete Mobile Data Acquisition Tool
  • - Supports data acquisition for various global smartphone manufacturers (Samsung/Apple/LG/HTC/ZTE etc.) models
  • - Supports China Manufacturer (Huwei/Xiaomi/Oppo/Vivo, etc.) for large quantities of models
  • - Supports extraction of IoT device, AI Speaker, Smart TV and Drone
Advanced physical extraction features
  • - Supports Bootloader, Fastboot, MTK, QEDL, Custom Image Android Rooted, iOS Physical, DL, JTAG, Chip-off, SD Card, Removable Media
  • - ADB Pro extraction: Supports data acquisition using vulnerability attacks from Android-based devices
  • - JTAG pin map viewer and connection scanning with AP
  • - Drone data extraction - DJI (Phantom, Mavic), Parrot, PixHawk
  • - AI Speaker Chip-off extraction - Amazon Echo, Kakao Mini, Naver Clova
Supports diverse physical data reader hardware
  • - JTAG Reader (MD-BOX)
  • - Memory Chip Reader (MD-READER)
  • - SD Memory Reader and USIM Reader
Advanced logical extraction features
  • - Supports Android Live, MTP, iOS full filesystem Backup, Vendor backup protocol, Local backup, USIM
Supports extraction and decryption of the latest Asian phone
  • - Physical extraction through all lock bypass(KNOX, FRP/OEM, Screen Lock): Samsung Galaxy S/J/A/Note series
  • - Unlock screen: Samsung Galaxy S/J/A/Note series
  • - ADB Pro physical KNOX bypass – Samsung Galaxy S/J/A/Note series
  • - Vendor Backup protocol extraction – Samsung, LG, Huawei
  • - Local backup extraction - Huawei, Xiaomi, Oppo, Gionee
  • - Physical extraction for Japanese manufacturer model - Sharp, Sony
Supports the latest iPhone logical extraction
  • - iOS keychain extraction
  • - Logical extraction for iPhone up to XS/XR model
  • - The decryption of backed up data for the latest version of the iOS device
Selective extraction for privacy protection
  • - Supports selective acquisition of partition, file, category, and app
Special extraction features
  • - Supports user-defined extraction for unlisted models using pre-defined methods
  • - Supports Google cloud drive extraction
Useful extraction utilities
  • - Supports auto recognition and decryption of partition table and encrypted partition
  • - Supports automatic firmware restoration and retrial after restoration failure
  • - Supports resume of extraction
  • - Supports merge of multiple image file - MDF and binary file
  • - Support acquisition from PC backup files: iOS, Samsung, LG
Assurance of evidence data integrity
  • - Supports write-protection to every evidence data
  • - Supports various hash algorithms(MD5, SHA1/224/256/384/512, RIPEMD128/160/256/320)
Easy and simple user-friendly UI
  • - Intuitive graphical user guide for each extraction method
  • - List of recently selected models
Data preview and save
  • - Supports preview of the extraction data - Hex viewer
  • - Sound alarm and TTS alarm for extraction status change
Reporting features
  • - Extraction information - Hash value, Time, Method and Filename
  • - Supports 'Extracted File List' generation with a hash value of each file
  • - Generate 'Observation Confirmation Report'
Mobile forensic software for recovery, decoding, decryption, visualization and reporting evidence data from a mobile and digital device

MD-RED is a forensic software for recovery, decryption, visualization, analytic data mining, and reporting of evidence data extracted via MD-NEXT or other tools. All the results of the analysis can be exported as the forensic reports for the investigation of crimes and accidents. Also, the analysis module of the latest mobile apps is quickly updated by continuous research.

Product Highlights
System Requirements
  • OS: Windows 7/8/10 (64 bit)
  • CPU: i7 or faster
  • RAM: 8GB or above
  • Storage: 1TB or above
  • Display: 1024x768 or higher
  • USB: 1 or more USB 2.0 ports
  • Microsoft.Net Framework 4.6.2
Product components
  • MD-RED Installation Software (CD/USB/Online)
  • USB Dongle Key 1 EA
  • External Hard Drive for WeChat analysis
  • Warranty 1 Year
Key Features
Supports a variety of mobile phone manufacturers and mobile OS
  • - Supports feature phones, smart phones and a variety of digital devices
  • - Supports iOS, Android, Windows, Tizen and other mobile OS
Analysis and recovery of various filesystem
  • - FAT12/16/32, exFAT, NTFS, ext3/4, HFS+, EFS, YAFFS, FSR, XSR, F2FS, VDFS, XFS, DVR filesystem (e.g., Dahua and Hikvision), black box file system(TAT)
  • - Analysis of deleted data for unallocated area
Analysis of mobile data and over 2,000 apps including the latest mobile app
  • - Multimedia files taken by phone camera
  • - Call log, Address book, SMS/MMS, email, Memo, Internet history
  • - Social media, Map, Navigation, Health, Banking, and Lifestyle app
  • - Anti-forensic app
Maximized analysis performance
  • - Parallel analysis via multi-core process
The decryption of encrypted data
  • - Decryption of encrypted chatting message, email, file and app data
Deep analysis of major messenger apps
  • - Data Decoding and Recovery
  • - WhatsApp –Decryption of Multiple backup files
  • - WeChat - Multiple account analysis, Rainbow table
  • - Skype, Facebook messenger, Telegram, Wickr
  • - QQ, Kakaotalk, Line, Zalo, Viber, Snapchat and many other messengers
Decodes locked screen and password information
  • - Decodes Unlock Pattern, PIN, and Password
  • - Data analysis via GPU
  • - iPhone keychain analysis
Multimedia data recovery and analysis
  • - Recovery for frame of deleted/damaged video file
  • - Exclusion of pre-registered images (900,000+) using RDS (Reference Data Set)
  • - Provides audio file converter (From AMR/AUD/QCP/SILK to MP3/AMR/WAV)
  • - Supports playback of QCP file and Silk codec audio
New digital device analysis
  • - Drone data analysis - Flight history, Multimedia data, Supports Manufacturer DJI/Parrot/PixHawk
  • - IoT data analysis - AI Speakers, Smart TV, Car Navigation
Log analysis
  • - Medial log, Search word log
  • - System log, Network log (Bluetooth, WiFi, Cell Tower)
Social relationship analysis
  • - Supports analysis for multiple phones
  • - Call log, messenger, email data analysis
  • - Contacts merge and split
  • - Filtering by the app, period, contacts, types of communication
  • - Community analysis by diverse technique
Embedded data viewers
  • - SQLite database viewer
  • - HEX viewer
  • - PList viewer
  • - Documents viewer (Text, XML, PDF, MS office, ZIP file, Executable file, Encrypted file)
  • - Photo Gallery
  • - Video player
  • - Audio player
Visualization of analyzed data
  • - GPS data and cell tower location
  • - Offline/Online map (region/country/city - 3 level)
  • - Time-line viewer
  • - Link viewer for social relationship visualization
  • - Chatting viewer for communication visualization
  • - Web browser for internet history review
Advanced data filtering option
  • - Various filter including file system, signature, time
  • - Arraying, grouping
  • - Regular expression search
  • - Keyword registration
  • - Bookmarking of analysis result
  • - Analysis result removal tool
Python scripting IDE for user-defined analysis
  • - Python script editor for advanced user
  • - Code generation, Code execution and debugging
Case management and hash value verification
  • - Case management
  • - Grouping extracted images
  • - Hash value verification on each extraction image
  • - MD-NEXT Acquisition tools interworking
Reporting features
  • - Hash calculation for a selected file
  • - Extracts analyzed multi-media
  • - Supports diverse report formats of PDF, Excel, HTML, XML and SQLite DB
  • - Supports 3rd party report format like NUIX and Relativity
Mobile forensic software for on-the-spot investigation which performs live extraction and analysis on a mobile device

MD-LIVE is a mobile live forensic product with a smooth user experience which can support logical extraction and quick data analysis.

It also supports the selective acquisition from evidence without privacy infringement, screen capture & recording of mirrored smartphone display, and recording of forensic process by an external camera via an internal recording feature.

Product Highlights
System Requirements
  • OS: Windows 7/8/10 (64 bit)
  • CPU: i5 or faster
  • RAM: 8GB or above
  • Storage: 256G or more
  • Display: 1200x700 or higher
  • USB: 2 or more USB 2.0 ports
  • Microsoft.Net Framework 4.6.2
Product components
  • MD-LIVE Installation Software (CD/USB/Online)
  • USB Dongle Key 1 EA
  • Warranty 1 Year
Key Features
Selective extraction and analysis of evidence data
  • - Prioritizes on-site proceeding and acquiring, so image and case files can be analyzed afterwards
  • - Only data related to the case can be selected and analyzed
  • - Selective acquisition of data for the protection of personal information
  • - Scans important applications based on time and frequency of use
Analysis data view just like looking at a real smartphone screen
  • - Quick evidence data identification by providing data view themes similar to that of a smartphone app
Integrated data viewers
  • - Includes the viewers to display files such as photo, video, audio, document, map and website browsing history
Mirroring and remote control of smartphone display
  • - Smartphone screen mirroring and remote control can be used when smartphone display is broken or the prevention of unwanted operation on the phone
  • - The mirrored screen can be captured and recorded as evidence
Screen recording
  • - PC screen recording of MD-LIVE to reproduce and verify its forensic process
Easy and concise process
  • - Intuitive user interface
  • - Auto-detection of smartphone model
  • - Automated analysis after data acquisition
Reporting features
  • - Exports reports into PDF and Excel formats
  • - Supports 'Witness Document' generation
  • - Supports a various HASH algorithms MD5, SHA1/224/256/384/512, RIPEMD128/160/256/320
External standing camera (Option)
  • - For taking a photo of the evidence and its display or recording the investigation procedure
  • - Hardware-based auto-focusing
  • - Anti-reflection pad