MuhammadLab
Mobile Phone Forensics

Guides and safe interactive tools for mobile evidence learning.

Start with teaching guides for device workflows, then use browser-based viewers for exported artifacts such as SQLite databases, SMS/MMS records, logs, plist files, and wearable data.

Start here

A structured path for teaching and self-study.

Each resource is grouped by purpose so students can read a guide first, then open a browser-based tool when they are ready to inspect an example artifact or practice a concept.

4

Learning guides

5

Interactive tools

Learning guides

Guides

Teaching-first walkthroughs for workflows that cannot safely or fully run inside a browser.

AndroidReady to draft

Android Forensics Guide

ADB setup, device connection, evidence handling, logical acquisition, app databases, screenshots, and log collection.

ADBLogical acquisitionSQLiteLogcat
iPhone / macOSReady to draft

macOS and iPhone Forensics Guide

Finder and iTunes backup workflows, MobileSync folders, plist review, backup preservation, and iOS artifact basics.

iPhone backupsMobileSyncPlistFinder
Windows PhoneReady to draft

Windows Phone Forensics Guide

Lumia and Windows Phone evidence handling, historical app artifacts, backup considerations, and platform limitations.

LumiaWindows MobileBackupsApp data
WHOOP / WearablesReady to draft

Wearable Forensics Guide

A beginner-friendly guide for wearable evidence, exported health data, timestamps, device sync, and chain-of-custody notes.

WHOOPWearablesHealth dataTimestamps

Interactive tools

Interactive tools

Browser-based utilities for safe local inspection of exported artifacts, databases, logs, and timelines.

Android / iOSInteractive idea

SQLite Database Viewer

Open exported SQLite databases locally, browse tables, inspect schema, and export selected rows for teaching examples.

SQLiteDB viewerTablesSchema
AndroidInteractive idea

SMS and MMS Database Viewer

A focused viewer for Android messaging artifacts such as mmssms.db, thread views, timestamps, and participants.

mmssms.dbSMSMMSThreads
AndroidInteractive idea

Logcat Analyzer

Paste or upload exported logcat text, filter by severity, package, timestamp, and forensic keywords.

LogcatFilteringPackagesEvents
iPhone / macOSInteractive idea

iOS Backup Manifest and Plist Viewer

Inspect safe exported backup metadata, plist files, and manifest-style records without uploading evidence.

PlistManifestiOS backupMetadata
Coming soon
WHOOP / WearablesInteractive idea

Wearable Export Timeline Viewer

Turn exported wearable CSV or JSON data into a clear activity, sleep, recovery, and timestamp timeline.

WHOOPCSVJSONTimeline
Coming soon

Suggested learning path

Begin with Android acquisition basics, move into example workflows, then inspect exported artifacts with the SQLite and SMS/MMS viewers before exploring iOS, Windows Phone, and wearable evidence.