Mobile Phone Forensics

Established since 2003, MD5 have an extensive amount of knowledge in mobile phone forensics including advanced method procedures, continually taking part in research and development in order to stay abreast of the latest software updates in order to extend our capabilities.

Our Mobile Phone Forensic analysts are able to interrogate a vast range of devices from older generation feature phones to the latest smart phones.

With the capabilities of modern smart phones constantly evolving, there is a greater capability to recover larger volumes of data to further assist cases involving mobile phone analysis.

MD5 are capable of extracting the following live and any recoverable deleted information from mobile devices:

  • Device information
  • User accounts and Application installation history
  • Contacts
  • Call history
  • Application Chat Messages such as WhatsApp, Messenger etc.
  • Emails
  • Multimedia data (Images, Videos and Audio)
  • Calendar events & alarms
  • Internet history & bookmarks
  • Location and Map Data
  • Documents and Application Data
  • Wi-Fi History

Further bespoke information can also be recoverable from devices by request.

Our expert investigations include the production of comprehensive reports, in an easy to read format, clearly detailing the analyst’s findings, ensuring they are understandable to the recipient no matter what their expertise.

Preserving Mobile Evidence

Consistent use of a device can overwrite potentially relevant data within the handset memory. In order to prevent changing/overwriting any metadata or potentially vital evidence it is important to cease use and turn off the device as soon as possible.

MD5 adhere to the Association of Chief Police Officers (ACPO) Guidelines and use the latest mobile phone forensics examination techniques. Our digital forensic experts take a forensic download of the device without connecting the device to a network therefore preserves the original data on the device. Once complete our team of experts confirm that the extraction of the data is complete and correct, via a manual verification during each examination.

Advanced Capability

MD5 are also experts in Advanced Data Recovery (ADR) procedures. We apply these procedures when a standard forensic process is ineffective, or if a device requires repair work prior to a forensic examination offering the following methods which allows our analyst to extract data from handsets unsupported by forensic software, PIN/Pattern/Password protected phones and damaged or otherwise non-working handsets. These techniques include (but are not limited to):

  • Flash Memory Chip Removal (FMCR)
  • Flash Memory Chip TRansplant (FMCT)
  • ISP (In System Programming) / Direct eMMC Forensics
  • Handset Repairs

Click here for further information on our Advanced Data Recovery methods.

Cell Site Analysis

Place mobile devices at a specific location at a specific time. Provision of alternative interpretations of existing reports.

Surveys of mobile networks to map out true network coverage.


MD5 are experienced in planning and executing proportionate strategies. Transparent pricing models ensures cost predictability and control providing clear quotes that are easy to understand.

MD5 are fully compliant with Legal Aid Agency fees.

For further information, please Contact Us now for your free no obligation quotation.

MD5 were able to extract vital contact details from a severely fire damaged phone this proved extremely important in identifying who the phone belonged to.

  • XERA iConect
  • Crown Commercial Service Supplier
  • Cyber Essentials Plus Certified
  • NEWA 2017
  • MSAB Logo
  • Cellbrite Logo
  • Sherlock Oxygen Forensics
  • XRY
  • Guidance Software
Request a Callback
  • Information supplied via this email enquiry form is handled in accordance with our Terms & Conditions. Please also refer to our website Privacy Policy.
  • This field is for validation purposes and should be left unchanged.
VFC Download Information
  • Information supplied via this email enquiry form is handled in accordance with our Terms & Conditions. Please also refer to our website Privacy Policy.