MobileMobile & IoT ForensicsAndroid ForensicsExtract and examine Android phones, from ADB pulls to WhatsApp databases and ALEAPP reportsCompelson
MOBILedit Forensic
Compelson now sells its phone forensics tool as MOBILedit Forensic. The Forensic Express name survives only in old web addresses. The product comes in editions, from a single-phone licence to the ULTRA edition that the maker classes as a dual-use item.
Profile
- Manufacturer
- Compelson
- Category
- Mobile forensics
- Product type
- Software
- Platforms
- Not stated by the manufacturer
- Licensing
- Commercial
- Product status
- Current
- Educational level
- Intermediate
- Last verified
- 2 November 2026
Current name is MOBILedit Forensic. On 2 November 2026 the address mobiledit.com/forensic-express redirected to mobiledit.com/mobiledit-forensic and the page title read MOBILedit Forensic; the words Forensic Express appeared only in link addresses and a quoted magazine review. The store lists Single Phone, Standard, PRO and ULTRA editions and marks ULTRA as a dual-use item. Compelson's licence policy describes a time-unlimited full licence with twelve months of updates. The examiner's operating system is not stated on the pages checked.
What MOBILedit Forensic is
Compelson is a Czech company that has worked on phone data since the 1990s. Its forensic product was known for years as MOBILedit Forensic Express. Today the maker's site calls it MOBILedit Forensic and redirects the old Forensic Express address to the new page. The tool extracts data from phones, smartwatches and cloud services, analyses app databases, recovers deleted records where the database still holds them and writes reports in PDF, Excel or HTML. It can also import data exported by other tools and export its own findings for use in them, which makes it a common second tool in a lab.
The online store lists four editions. Single Phone and Standard cover logical extraction and app analysis. PRO adds deeper processing for messaging apps, smartwatch support, malware detection with YARA rules, face matching and import of data from other vendors' tools, with Camera Ballistics as an option. ULTRA adds physical acquisition and the security bypass capabilities. Compelson marks it as a dual-use item, which is the maker's own signal that export control and lawful use apply. A Cloud Forensic module is sold separately or with PRO. A full licence is time-unlimited, activated on one computer, with twelve months of updates that can be extended by buying an update package.

Primary applications
Where it is used
- Logical extraction and app analysis from Android and iOS phones under proper authority
- Analysis of physical images made by this tool or obtained through JTAG or chip-off
- Recovery of deleted messages and app records from database free space and caches
- Smartwatch data from Apple, Garmin, Samsung and other makers through the maker's reader kit
- Cloud account collection through the Cloud Forensic module where legally authorised
- Cross-checking an extraction made by another tool
Who uses it
- Police and private laboratories that want a second extraction tool
- Corporate investigators handling consenting employees' devices
- Smaller units with limited budgets
- Students learning app analysis and reporting
Capabilities and limits
Major capabilities
- Logical extraction, app analysis and deleted data recovery in every edition
- Physical acquisition and analysis in the ULTRA edition
- Smart Screenshots for apps that logical extraction cannot read, taken automatically on the device
- Live updates that add device and app support without reinstalling
- Malware detection based on YARA rules, photo recognition and face matching in PRO and above
- Import from and export to other forensic tools, plus open data format output
- Concurrent extraction of several phones on one computer
- Customisable reports in PDF, XLS and HTML with timeline and conversation filters
Technical limitations
- Security bypass and physical acquisition are confined to the ULTRA edition, which the maker classes as dual-use
- Screenshot-based collection captures only what the app displays and is slow on large accounts
- A full licence activates on one computer, so a lab with several stations needs several licences
- The maker's pages do not state the examiner's operating system, so the platform is not listed here
- Deleted data comes back only where the database or cache still holds it
Learning with DFRTI
Independent professional education covering the principles and workflows of MOBILedit Forensic. DFRTI is not a vendor training centre and its courses are not vendor certifications.
Before you learn it
- Android and iOS data storage basics
- SQLite structure and why deleted rows can survive
- The legal basis needed before any extraction or bypass attempt
Disciplines
Related tools
- Cellebrite UFEDUFED is the name most examiners know for Cellebrite's phone extraction tool. Today it continues as the access and extraction part of the Inseyets suite.Cellebrite
- MSAB XRYXRY is MSAB's mobile data extraction software, sold as a family of modules and delivered on office, field, kiosk and tablet platforms. Its output is analysed in XAMN and managed through XEC.MSAB
- Oxygen Forensic DetectiveOxygen Forensic Detective is an all-in-one extraction and analysis tool for phones, cloud accounts, drones and other connected devices. On 2 November 2026 the maker's website could not be checked, so this profile is marked unverified.Oxygen Forensics
- Magnet AxiomAxiom is Magnet Forensics' main examination platform. It takes images and extractions from computers, phones, cloud accounts and vehicles into a single case and presents the artefacts side by side.Magnet Forensics
- Belkasoft X ForensicBelkasoft X is a single tool for computer, mobile, drone, vehicle and cloud evidence. Belkasoft sells X Forensic to government customers and X Corporate to businesses, both on a perpetual licence.Belkasoft
Courses that cover this tool
MobileMobile & IoT ForensicsAndroid ForensicsExtract and examine Android phones, from ADB pulls to WhatsApp databases and ALEAPP reports
MobileMobile & IoT ForensicsiOS ForensicsBFU and AFU states, iTunes and Finder backups, the keychain and iLEAPP for iPhone cases
MobileMobile & IoT ForensicsSIM / Memory Card ForensicsICCID, IMSI and SMS from SIM cards, plus FAT and exFAT recovery from SD and microSD cards
NetworkNetwork & Cloud ForensicsCloud Storage InvestigationCollect and read AWS, Microsoft 365 and Google Workspace logs as sound evidence.Official source
Product names and trademarks belong to their respective owners. DFRTI is an independent educational and research institute. Inclusion in this directory does not imply manufacturer endorsement, partnership or authorisation. Facts are checked against the manufacturer's public documentation on the date shown and may have changed since.
Go deeper with DFRTI
Free pages explain the ground. Structured courses, lab work and a mentor take you from knowing about it to doing it on a case.