Following intensive development MOBILedit Forensic 9.6 is here! Bringing enhanced smartwatch forensics, new advanced app analysis, support for even more applications, RSMF export, critical new data sources like second space, private space, secure folder, and much more.
What's new
Even better smartwatch forensics
For over five years, MOBILedit has pioneered smartwatch forensics as the only tool supporting all major brands and constantly expanding to new devices and data types. With the latest improvements, MOBILedit Forensic now supports all Apple Watch models —from Series 0 to the newest Series 10, including Ultra and Ultra 2. In version 9.6, we’ve added support for WhatsApp on Wear OS (Android), enabling even deeper smartwatch data analysis.
New Apple Watch reader coming soon!
Our new Apple Watch wireless reader is designed for analyzing the latest Apple Watch devices. With this reader, MOBILedit Smartwatch Kit supports connections to all Apple Watch models—from Series 0 to Series 10, including Ultra and Ultra 2.
"Smartwatches have become a crucial source of evidence—one that can no longer be overlooked in modern investigations."
Even more powerful application analysis
No matter how advanced the security bypassing is, key evidence is found in applications. That’s why application analysis holds the same importance as security bypassing in digital investigations. With support for over 1,200 apps, MOBILedit continues to lead in application analysis. In version 9.6, we’ve added support for 62 new applications, such as Grok (AI Assistant), ChatGPT, Google Pay, Health Platform, Bolt, and more.
View the complete list of added applications here.
Even stronger security bypassing - Advanced app data extraction on non-rooted Android devices
Newly implemented methods now make it possible to access even more application data on non-rooted Android devices. Select “Advanced Data Extraction” to retrieve additional app data. Safe and effective extractions.
Read more about Advanced data extraction here.
Analyze application data from additional Android user profiles
Investigate beyond the primary user. Analyze hidden evidence from second space, private space, and secure folder profiles—reviewing all users on a device simultaneously for a more complete picture. Available in ULTRA only.
Export data to Relativity short message format (RSMF)
MOBILedit Forensic introduces support for direct export into Relativity Short Message Format (RSMF), enabling integration with the Relativity platform to streamline eDiscovery processes.
Read more about Relativity RSMF export here.
Support for RTT (Real-Time Text) messages analysis
MOBILedit Forensic now extracts and analyzes RTT communication, a new Android message format that sends text instantly as it’s typed and is often used for emergency situations. It’s becoming popular in the USA and worldwide.
Read more about RTT analysis here.
Improvements
Even more data from iOS devices, now including application download history and system update history.
iOS device reports indicate when applications are passcode protected or hidden.
Smart Screenshots can now switch between multiple accounts and capture all data across profiles in Instagram, Telegram, and Slack.
Full content logical extraction now offers additional methods, including Application downgrade and Advanced data extraction, to retrieve more data from applications.
Extract and analyze activity and sleep data from Samsung smartwatches (ULTRA).
Brute-force attacks now allow letter–number–character substitutions for enhanced password recovery (ULTRA).
Enhanced GrayKey import with support for Keystore zip (Android) and Keychain files (iOS) in addition to the full file system.
Backup passwords in UFD imports are now automatically detected and applied for decryption.
Mobile cell towers analysis improved.
New data structure clearly clarifies data origin: Phone, Smartwatch, or Cloud.
Malware detection enhanced: updated Yara rules reduce false positives, detect more threats, and improve clarity in PDF reports.
Faster loading of corrupted backups.
Fixes
Dive computer analysis fixed: accurate nitrogen/oxygen ratio in gas mixture percentages.
WhatsApp backup decryption fixed in specific scenarios
Smart Screenshot stability improved
Resolved import issues for UFD and UFDR files
Added new apps and updated analysis for key apps like WhatsApp, Safari, and X (formerly Twitter)
Fixed parsing of SIM info on Android 13+
Corrected broken links in HTML and PDF reports
Crash issues resolved for certain PDF and media file types
Copy only relevant data when specific items are selected for export