|
|
 |
PmExplorer is a forensic software tool for the review and examination of PM files for Nokia mobile telephones. PM files can be obtained with third party hardware and software utilities such as SaraSoft and the SHU box.
PmExplorer differs from current mobile phone tools in that it is designed to give the examiner unfettered access to the raw data. PmExplorer comes with built in support for the different data encoding types used by Nokia mobile phones, but it allows the user to specify which type is used to decode a key, unlike traditional tools which specify this for the examiner. This difference means that when a new phone is released which stores the data in the same way, but under a different key, the PmExplorer examiner can simply specify how to decode the new key.
PmExplorer is designed to provide peace of mind to the examiner and reassurance that the data decoded by PmExplorer is all of the data that is present. With this in mind the examiner can navigate each of the keys and in conjunction with the decoded data the examiner can review the raw data and see exactly which bytes PmExplorer is using to create its report.
PmExplorer also includes some of the features of the RevEnge hex editor engine which allows the examiner to look at any new data using a variety of built in data viewers (such as Nokia S40 format dates and PDU encoded 7 bit ASCII) to determine what data is encoded and establish the relevance of this new data.
PmExplorer operates on PM files created by third party hardware and software such as the SHU box and sarasoft. PmExplorer does not include the capabilities to obtain PM files directly from a Nokia phone.
Features:
Examiner not tied to ‘supported’ phone types
Low level view of data behind the report
The examiner can examine the raw data and verify PmExplorers reports
Unrecognised keys can be included as a hex dump in the report
Automatically recognises and adds images to the report
Generates comprehensive reports
PmExplorer does not currently support PmAbsolute files obtained from Nokia phones, this feature is available in the development test sofwtare and this development software will be available to licenced users.
PmExplorer can be purchased by selecting the purchase software link from the site menu. A limited functionality demonstration version can be downloaded by clicking here.
What our users have said about PmExplorer:
“A fantastic product and hopefully can set a benchmark for anyone who wants to review their results properly. Excellent.“
“I do like the idea of this very much indeed. PMExplorer contains lots of features that have been missing from pretty much all mobile device examination tools.”
“I really like the way the software works and the interface is exactly how I would want a PM decoder to be.”
"it's great to see mobile software which allows for a verification process within the software itself. It’s a bold step in helping to start making the mobile examination world a true ‘forensic’ discipline."
|
|
|
