Follow

Why did MPE+ fail to collect some data from my device?

Created by: Brendan Bone
Created date:
Last Updated date:

This could be because this device doesn't have any of the specified types of data stored on it, which you can verify by looking through the device itself of using the SQLite parser on the extracted file system.

It may also be due to a file system change in a specific firmware version that MPE+ cannot read/parse yet.  If this is the case, other methods not involving MPE+ can be used to report on the missing data. You can learn about these other methods in our Mobile Forensics training courses.

Was this article helpful?
0 out of 0 found this helpful
Have more questions? Submit a request

Comments

Powered by Zendesk