HANCOM WITH

We Empower Your Investigation!

BLD is a partner of HancomWITH, a research group that leads the world in the field of mobile and digital forensics.  The mobile and digital forensics solution, MD-SERIES, is a complete mobile and digital forensic product line for data extraction and analysis with integrated cutting-edge mobile forensic technology, supporting any type of mobile device, and has been provided to hundreds of global investigative agencies since 2005. 

MD-Series Products

MD-LIVE

Data extraction on a wide variety of mobile and digital devices, supporting both physical and logical extraction methods for Android, iOS, Windows OS, Tizen OS, and other mobile operating systems.

MD-LIVE is a mobile forensic solution for quickly performing logical extraction and data analysis on live mobile devices.  It also supports a number of legal compliance features such as selective acquisition of evidence to ensure a suspect’s right to privacy, as well as mirroring and recording the suspect smartphone’s display during the forensic process. MD-LIVE also supports the use of a separate camera for recording the forensic process externally.

Screenshots

  • Mobile forensic software solution for on-the-spot investigation and forensic triage
  • The best forensic tool for acquiring data from witnesses’ or victims’ smartphones
  • Selective acquisition of evidence data for privacy protection
  • Mirroring, recording, and capturing smartphone display
  • Supports the use of an external camera for recording the forensic process (for auditing or legal compliance purposes)
  • Convenient and straightforward experience with an intuitive user interface
  • High speed analysis engine allows for minimal work time and automated steps
Selective extraction and analysis of evidence data
  • Data unrelated to the case can be excluded from selection and analysis
  • Minimising extraction of unnecessary data reduces the time spent on the site and protects the privacy of those involved
  • Important apps can be scanned based on time and frequency of use
Processed evidence data presented just like a real smartphone display
  • The view interface is themed and presented like a smartphone app, allowing users to quickly and intuitively identify evidence data
Integrated data viewers
  • Users can view evidence files such as photos, videos, audio, documents, maps, and website browsing history directly in the software
Mirroring and remotely controlling smartphone display
  • The smartphone display mirroring and remote-control feature can be used to circumvent a broken display or to prevent any unwanted operations on the device
  • The mirrored display can be also captured and recorded as evidence
MD-LIVE software screen recording
  • The PC screen recording feature can record forensic processes performed in MD-LIVE for reproduction and verification purposes
Easy and concise experience
  • Post-extraction analysis is automated, making the investigation process even faster
Reporting features
  • Supports report formats such as PDF, Excel, and SQLite DB
  • Supports saving reports and dump images to USB/DVD
External standing camera (Option)
  • Optional standing camera offered for taking photos of evidence device and its display or for recording the investigation procedure

MD-NEXT

Data extraction software for smartphones, feature phones, drones, smart TVs, wearables, loT devices, USIM cards, SD memory cards, JTAG boards, and chip-off memory.

MD-NEXT is the forensic software solution for data extraction on a wide variety of mobile and digital devices. It supports both physical and logical extraction methods for Android, iOS, Windows OS, Tizen OS, and other mobile operating systems.

Screenshots

  • Data extraction from smartphones, feature phones, IoT devices, smart TVs, drones, chip-off memory, and JTAG boards
  • Powerful extraction tools for devices from Asian manufacturers (Samsung, LG, and Chinese brands)
  • Supports all physical extraction methods – Bootloader, and Removable Media
  • Supports all logical extraction methods- Filesystem, and MTP
  • Unlocks latest Samsung and Chinese phones (Oppo/Vivo/Huawei/Xiaomi)
  • iOS backup file decryption and keychain extraction
  • Selectively extract based on partitions, files, categories, and apps
The perfect data extraction tool for diverse mobile and digital devices
  • Supports data acquisition for various global smartphone manufacturers (Samsung/Apple/LG/HTC/ZTE) models
  • Support Chinese Manufacturerd devices (Huwei/XiaomVOppoNrvo, etc)
  • Supports extraction of IoT device, AI Speaker, Smart TV, and Drone
Advanced physical extraction features
  • Supports Bootloader, Fastboot, MTK, QEDL, Custom Image Android Rooted, iOS Physical, DL, JTAG, Chip-off, SD Card, Removable Media
  • ADB Pro extraction which supports data acquisition using vulnerability attacks from Android-based devices
  • JTAG pin map viewer and connection scanning with AP
  • Drone data extraction – DJI (Phantom, Mavic), Parrot, PixHawk
  • AI Speaker Chip-off extraction – Amazon Echo, Kakao Mini, Naver Clova
Supports diverse physical data reader hardware
  • JTAG Reader (MD-BOX)
  • Memory Chip Reader (MD-READER)
  • SD Memory Reader and USIM Reader
Advanced logical extraction features
  • Supports Android Live, MTP, iOS full filesystem Backup, Vendor backup protocol, Local backup, USIM
Supports extraction and decryption of the latest Asian phone
  • Physical extraction through all lock bypass (KNOX, FRP/OEM, ScreenLock): Samsung Galaxy S/J/A/Note series
  • Unlock screen: Samsung Galaxy S/J/A/Note series
  • ADB Pro physical KNOX bypass- Samsung Galaxy S/J/A/Note series
  • Vendor Backup protocol extraction – Samsung, LG, Huawei
  • Local backup extraction – Huawei, Xiaomi, Oppo, Gionee
  • Physical extraction for Japanese manufacturer models – Sharp, Sony
Supports the latest iPhone logical extraction
  • iOS keychain extraction
  • Logical extraction for iPhone up to XS/XR model
  • The decryption of backed up data for the latest version of the iOS device
Selective extraction for privacy protection
  • Supports selective acquisition of partition, file, category, and app
Special extraction features
  • Supports user-defined extraction for unlisted models using pre-defined methods
  • Supports Google cloud drive extraction
Useful extraction utilities
  • Supports auto-recognition and decryption of partition table and encrypted partition
  • Supports automatic firmware restoration and retrial after restoration failure
  • Supports pausing/resuming extraction
  • Supports merging multiple image files- MDF and binary file
  • Supports creating MDF file from PC backup
Assures evidence data integrity
  • Supports write-protection for every piece of evidence
  • Supports ten different hash algorithms, including MD5, SHA1/224/256/384/512, RIPEMD128/160/256/320
  • Excellent extraction performance – maximum 32GB/20min
  • Support multiple device extraction
  • Supports both simultaneous and sequential extraction
User-friendly and easy to use
  • Intuitive graphical user guide for each extraction method
  • Features “Recently Selected models” List
Data preview and save
  • Supports preview of the extraction data – Hex viewer
  • Sound alarm and TTS alarm for extraction status charge
Reporting features
  • Extraction information – Hash value, Time, Method and Filename
  • Supports “Extracted File List” generation with a hash value of each file
  • Generates “Witness Document” Report

MD-RED

Data analysis software for recovering, decoding, decrypting, visualising, and reporting evidence data from mobile and digital devices.

MD-RED is the forensic software solution for recovering, decrypting, visualising, performing analytic data mining, and reporting evidence data that’s been extracted with MD-NEXT or another analogous extraction tool. The analysis results output by MD-RED can be exported as forensic reports for crime and accident investigations. In addition, as a result of continuous ongoing research, MD-RED‘s mobile app analysis engine is constantly being updated with support for analysing the latest apps.

Screenshots

  • Supports analysis and recovery for a number of filesystems and over 2,000 mobile apps
  • Supports decryption of encrypted instant messaging apps
  • Provides quick updates and rolling support for new versions of apps
  • Supports social relationship analysis
  • Supports drone and IoT analysis
  • Supports post-analysis data visualisation
  • Includes built-in Python script editor for custom application analysis
Supports a wide variety of mobile operating systems and devices
  • Supports Feature phones, Smartphones ard various other digital devices
  • Supports iOS, Android, Windows, Tizen and other mobile operating systems
Parsing and Recovery of various filesystems
  • Support for FAT12/16/32, exFAT, NTFS, ext3/4, HFS+, EFS, YAFFS, FSR, XSR, F2FS, VDFS, XFS, DVR filesystems
  • Supports data carving of unused areas
Supports analysis of mobile data over 2,000 popular mobile apps
  • Multimedia files taken with device camera
  • Call logs, Address book information. SMS/MMS messages, emails, Memos, ard internet history
  • Social networking, maps, navigation, banking, health, and lifestyle apps
  • Detection of Anti-forensic apps
Maximised performance
  • High speed analysis achieved through multi-core CPU/GPU parallel processing
  • Supports running multiple instances of the program (i.e. one instance for each open case)
Data Decryption
  • Supports identifying encrypted documents
  • Supports decryption of chat messages, emails, files, and other app data
Deep analysis on popular messenger apps
  • Deserialisation, decryption, and recovery of data
  • Skype, Facebook messenger, Telegram, Wickr, QQ, KakaoTalk, Line, Zalo, Viber, Snapchat, and many more
  • WhatsApp -Multiple backup file analysis
  • WeChat – Multiple account analysis, rainbow table analysis
Supports decoding screen lock and password information
  • Supports decoding unlock patterns, PINs, and passwords
  • Supports brute force through GPU acceleration
  • Supports iPhone keychain data analysis
Multimedia data recovery and analysis
  • Supports frame recovery for deleted/damaged video files
  • Supports the use of Reference Data Set (RDS) for excluding over 6.7M known unusable images from analysis result data
  • Supports audio file conversion (From AMR/AUD/QCP/SILK to MP3/AMR/WAV)
  • Supports playing QCP files and SILK-encoded audio
New digital device analysis
  • Drone data analysis – Flight history, Multimedia data, Supports ManufacturerDJI/Parrot/PixHawk
  • IoT data analysis – AI Speakers, Smart TV, Car Navigation
Log analysis
  • Supports analysis of various logs: media, search word system, and network logs (Bluetooth, WiFi, Cell towers)
Social relationship analysis
  • Provides Basic/Advanced modes for analysing single/multiple phones
  • Supports call, messenger, and email communication data analysis
  • Supports filtering by app, time period, contact(s), and type(s) of communication
  • Supports community analysis
  • Supports relationship visualisation and automatic re-organising
Embedded data viewers
  • View extracted data directly in-application
  • SQLite databases, HEX, P Lists, Documents (Text, XML, CDF, PDF, MS Office, ZIP, Executable, Encrypted), Photos, Videos, and Audio 
Visualisation of analysed data
  • Map viewer for GPS ard cell tower location data
  • Offline /Online map (Region /Country / City view levels)
  • Timeline view
  • Link viewer (social relationship visualiser)
  • Chat viewer
  • Web browser view (for internet browsing history)
Advanced data filtering options
  • Supports filtering by a variety of properties such as filesystem, signature, and time
  • Supports dynamic filtering operators, sorting, and grouping
  • Supports searching by regular expression
  • Supports keyword registration
  • Supports bookmarking selected data
Python scripting IDE for user-defined analysis
  • Includes a Python script editor
  • Supports generating, executing, and debugging code and includes sample scripts
Case management and hash value verification
  • Supports various case management features
  • Supports grouping extraction images
  • Supports hash value verification on a per-image basis
Reporting features
  • Supports hashing of individual files
  • Supports export of analysed multimedia
  • Supports automatic report generation (PDF, Excel, HTML, ard SQLite DB formats)
  • Supports third-party reporting formats like Nuix and Relativity

MD-CLOUD

Digital forensic software for extraction and analysis of cloud account .

MD-CLOUD is the most intuitive digital forensic software tool that extracts and analyses the data from cloud data storage. It supports a broad range of cloud services.

Screenshots

  • Supports global cloud service
  • Supports IoT cloud and Asian cloud service
  • Authentication supported by ID/PASSWORD, 2-step security, Captcha and credentials
  • Web capture feature
  • Search with tag information
  • Interwork with MD-RED
Supports various cloud services acquisition
  • Google, iCloud, Samsung Cloud, Naver cloud, IMAP/POP3, Evernote, One Drive, Twitter, Baidu
Specialised in Asian Cloud service
  • Baidu cloud in China
  • Naver cloud in Korea
Acquisition of cloud accounts for IoT devices
  • IoT data extraction from Al speaker and Smart home equipment
  • Public or non-public APls authentication
Supports various authentication methods
  • ID/PASSWORD authentication
  • Captcha security authentication
  • 2-step security authentication
  • Authentication using credential information
Web capture feature
  • Supports web capture when cloud acquisition does not offer API
Real-time acquisition status check
  • Monitors data acquisition in real time
Easy user-friendly use
  • Intuitive user interface and quick data extraction
Interwork with MD-RED
  • Acquire data with credentials information analysed by MD- RED
Simple search using ‘Tag’ feature
  • Supports easy and fast search with pre-categorised ‘Tag’
Various built-in viewers
  • Supports preview of Image, video, document, web page, and email
Snapshot of filtering option
  • Supports snapshot of the filter and sort configuration for reuse in the workspace
Assurance of evidence data integrity
  • Guarantees integrity of evidence data based on powerful hash algorithms such as MDS and SHA256
Reporting features
  • Supports report formats such as PDF and Excel

MD-VIDEO

Digital forensic software for video preview, recovery, and analysis of video data.

MD-VIDEO is the digital forensic software for extracting and recovering video data directly from the media storage like a disk, memory card and damaged video file.

Screenshots

  • Supports preview, recovery and analysis of video data from CCTV, Car Dashboard Camera, Camcorder, and Smartphone
  • Supports various DVR filesystems, video formats, video codecs
  • Regenerate video with recovered video frame
Video data forensics from CCTV, car black box, smartphone, media storage
  • Global manufacturers’ IP-CCTV and key manufacturers’ Car Dashboard Camera, Smartphone, Desktop, Server, Camera, Camcorder and Drone, Wearable device and Embedded system
Three types of video data input
  • Supports mounted storage like hard disk by physical connection
  • Supports binary disk image of DD, E01, BIN, and MDF
  • Supports file or folder which has damaged or deleted files
Three types of video recovery
  • Filesystem recovery
  • Video file signature recovery (DAV, MP4, MOV, MKV, MPEG, SSF, AVI, ZAV, PS)
  • Video frame recovery (H.264, H.265, MPEG-4, M-JPEG)
Supports various file systems
  • Supports auto-detection of the filesystem
  • FAT 12/16/32, NTFS, exFAT, HFS+, EXT3/4, TAT16, HIKVISION, DHFS4.1, XFS, F2FS, VDFS
  • Supports DVR manufacturer’s filesystem – HikVision, Dahua, Zhiling, Samsung, Bosch, Honeywell, Sony, Panasonic, etc.
Supports various video codecs
  • Supports H.264, H.265, MPEG4, M-JPEG
  • H.264 resolution adjustment for recovery
  • HEVC (H.265) recovery and iOS 11 or higher model media playback
  • Supports sampling codec from the video file and smartphone codec
  • User-defined codec parameter setting
Supports video file scanning
  • Frame and file format scan
  • Deleted and damaged file scan
Recovery of video frames
  • Reconstructs the frame of video files
  • Extracts image frames with pictures
  • Supports thumbnail preview and image view
Supports audio file recovery
  • Supports audio file recovery for SILK format
Recovery of the selected partition
  • Supports auto-scanning of partition
  • Supports recovery of the selected partition
Multi-core CPU/GPU acceleration
  • Recovery acceleration with multi-core CPU
  • Detection of object acceleration with multi-core GPU (Planned)
Bookmark. filtering, indexing
  • Supports bookmarking for examination and report
  • Supports arraying, filtering, and indexing of files and frames
Extracts time information
  • Gets time information for image files through metadata analysis of each frame
In-built video player
  • Multi-channel video playback
  • Play speed control (1/10X, 1/2X, 2X, 4X, 8X)
  • Supports more than 300 image formats (MP4, AVI, MKV, WMV, MPEG, etc.)
  • DVR video file (DAV, ZAV, SSF)
  • Video stream playback
  • Audio play (QCP, SILK, etc.)
Data viewers
  • Frame picture viewer
  • Hex viewer
  • File viewer
File/Format converter
  • Export original or converted file
  • Supports multi-channel image separation storage when extracting files
  • Supports recovered frame to convert to JPG and PNG format
  • Supports video file convert to AVI and MP4 format
  • Supports audio file convert to MP3 and AMR format
Assurance of evidence data integrity
  • Guarantees integrity of evidence data based on powerful hash algorithms such as MDS and SHA256
Reporting features
  • Supports report formats such as PDF and Excel