DEI PRO Field Tablet by ADF Solutions integrates automated digital forensic software for iOS, Android, Mac, Linux, and Windows with Dell Latitude Tablets for field agents. It empowers digital first responders with forensic lab capabilities, enabling rapid digital evidence collection and timeline analysis to link users to files and artifacts. DEI PRO Field Tablet efficiently scans a wide range of devices, including iOS, Android, Mac, Linux, and Windows, enabling swift collection of digital evidence. Its advanced analysis capabilities allow investigators to visualize evidence in a comprehensive timeline view, connecting the user to pertinent files and artifacts. DEI PRO Field Tablet is built on the rugged and reliable Dell Latitude, featuring advanced logical acquisition of iOS/Android/ChromeOS data up to 4GB per minute. It supports live preview mode, allowing investigators to view phone content immediately without waiting for a backup or imaging to finish. The tablet includes features like auto-scroll for taking screenshots of long pages on Android, screen recording for Android, iOS, and ChromeOS devices with preserved audio, and support for the developer mode on iOS 17 and Android 14. It also supports image live macOS computers via a remote agent and creates an AFF4 logical image, and image live ARM CPU-based Windows devices. DEI PRO Field Tablet captures and organizes screenshots of connected mobile devices with automatic processing, extracts and indexes text for search, annotation, and reporting, and recovers call records, messages, contacts, calendar data, WiFi connections, usernames, installed applications, pictures, videos, audio files, documents, user-defined file types, database files, Property Lists, browsers, browsing history, and download history. It captures Revolut mobile app data and organizes it in a financial transactions table (iOS). DEI PRO Field Tablet searches for specific information using keywords, regular expressions, hash values, and PhotoDNA, identifies files or artifacts containing terms related to child exploitation, and automatically encrypts backup to obtain more data on iOS devices. It captures RAM and volatile memory rapidly, searches suspect media using large hash sets, and finds relevant files and artifacts using powerful keyword and regular expression search. DEI PRO Field Tablet collects password-protected and corrupted files for later review, collects iOS backups on target computers, and recovers deleted records from apps using the SQLite database. It supports the collection of artifacts from Windows and macOS, including T2 and M1 chips, images drives out-of-the-box with image verification, recovers images from unallocated drive space, processes deleted partitions, detects BitLocker and FileVault2-protected drives, and searches and collects emails from MS Outlook, Windows Mail, Windows Live Mail 10, and Apple Mail. It is highly configurable for artifact and file collection, including web browser cached files, social media, P2P, cryptocurrency, cloud storage, and user login events. DEI PRO Field Tablet investigates attached devices, live powered-on computers, boot scans from powered-off computers, forensic images, contents of folders, and network shares, including NAS devices. It prepares a collection key without search profiles to select captures just before a scan, protects the collection key with BitLocker, and allows borrowing license tokens. DEI PRO Field Tablet deploys user-created captures to the collection key without search profiles, creates new log files for logical images, and processes them from the data container. It simplifies the data container for Mac logical images, scans full mobile device acquisitions to detect keychain/keystore files, uses password and recovery key to decrypt and scan or image BitLocker volumes, and processes APFS partitions, NTFS, FAT, HFS+, EXT, ExFAT, and YAFFS2 file systems.
