User guide

2 AccessData MPE User Guide
HARDWARE AND SOFTWARE REQUIREMENTS
In order to image and use phone images as part of an investigation certain hardware
and software requirements must be met.
REQUIRED HARDWARE
In addition to the required WIBU CodeMeter CmStick (with current licenses installed),
MPE requires the following additional hardware:
• An evidence phone with intact contents.
• A data synchronization cable specific to the mobile device. Several are shipped
with
MPE. MPE also works with the Susteen set of cables. For a list of mobile
phones and the cable required to interface the phone with the investigating
computer, see
“Appendix A Mobile Phone Types and Cables” on page 19.
SOFTWARE AND LICENSE REQUIREMENTS
MPE operates independently from and as an add-in with FTK 2.2. Make sure that a
current copy of
FTK 2 (2.2 or higher) is installed and that the license includes MPE.
MPE requires third-party drivers to read the information on the phone and make it into
a forensic image.
CASES AND EVIDENCE HANDLING
For information on how to utilize the phone image as evidence in AccessData
ForensicToolkit, see the
FTK 2.2 User’s Guide.