What MOBILedit Forensic is

Compelson is a Czech company that has worked on phone data since the 1990s. Its forensic product was known for years as MOBILedit Forensic Express. Today the maker's site calls it MOBILedit Forensic and redirects the old Forensic Express address to the new page. The tool extracts data from phones, smartwatches and cloud services, analyses app databases, recovers deleted records where the database still holds them and writes reports in PDF, Excel or HTML. It can also import data exported by other tools and export its own findings for use in them, which makes it a common second tool in a lab.

The online store lists four editions. Single Phone and Standard cover logical extraction and app analysis. PRO adds deeper processing for messaging apps, smartwatch support, malware detection with YARA rules, face matching and import of data from other vendors' tools, with Camera Ballistics as an option. ULTRA adds physical acquisition and the security bypass capabilities. Compelson marks it as a dual-use item, which is the maker's own signal that export control and lawful use apply. A Cloud Forensic module is sold separately or with PRO. A full licence is time-unlimited, activated on one computer, with twelve months of updates that can be extended by buying an update package.

Primary applications

Where it is used

  • Logical extraction and app analysis from Android and iOS phones under proper authority
  • Analysis of physical images made by this tool or obtained through JTAG or chip-off
  • Recovery of deleted messages and app records from database free space and caches
  • Smartwatch data from Apple, Garmin, Samsung and other makers through the maker's reader kit
  • Cloud account collection through the Cloud Forensic module where legally authorised
  • Cross-checking an extraction made by another tool

Who uses it

  • Police and private laboratories that want a second extraction tool
  • Corporate investigators handling consenting employees' devices
  • Smaller units with limited budgets
  • Students learning app analysis and reporting

Capabilities and limits

Major capabilities

  • Logical extraction, app analysis and deleted data recovery in every edition
  • Physical acquisition and analysis in the ULTRA edition
  • Smart Screenshots for apps that logical extraction cannot read, taken automatically on the device
  • Live updates that add device and app support without reinstalling
  • Malware detection based on YARA rules, photo recognition and face matching in PRO and above
  • Import from and export to other forensic tools, plus open data format output
  • Concurrent extraction of several phones on one computer
  • Customisable reports in PDF, XLS and HTML with timeline and conversation filters

Technical limitations

  • Security bypass and physical acquisition are confined to the ULTRA edition, which the maker classes as dual-use
  • Screenshot-based collection captures only what the app displays and is slow on large accounts
  • A full licence activates on one computer, so a lab with several stations needs several licences
  • The maker's pages do not state the examiner's operating system, so the platform is not listed here
  • Deleted data comes back only where the database or cache still holds it

Learning with DFRTI

Independent professional education covering the principles and workflows of MOBILedit Forensic. DFRTI is not a vendor training centre and its courses are not vendor certifications.

Courses that cover this tool

Product names and trademarks belong to their respective owners. DFRTI is an independent educational and research institute. Inclusion in this directory does not imply manufacturer endorsement, partnership or authorisation. Facts are checked against the manufacturer's public documentation on the date shown and may have changed since.

Go deeper with DFRTI

Free pages explain the ground. Structured courses, lab work and a mentor take you from knowing about it to doing it on a case.