Read the relevant note, then use the matching enquiry. Do not upload evidence, device images, chat exports, passwords or credentials through this website.
Request a mobile examination · Discuss licensing · Request team training
Choose the note you need
Understand a mobile examination
When a consented Android or iOS examination can help, what it can establish, and what the device and method may not yield.
Choose a mobile forensic tool
How to test coverage against your devices, artifacts, security constraints and support path, instead of buying from a feature list.
Handle a device before examination
What to record, what to avoid, and how to brief the examiner without damaging the source.
Read a report
How to separate evidence references, findings, interpretation and limitations.
Brief a training request
What Zeno Academy needs before it can propose a private team programme.
Understand a mobile examination
Mobile forensics is the examination of a phone or tablet to answer a defined question. Zeno's examination work is consent-based and limited to supported Android and iOS devices.
A useful examination starts with:
- who can authorise the work;
- the question to be answered;
- the relevant period, people and applications;
- the device model, condition and available access;
- the report or export the instructing team needs.
Depending on the device and method, available records may include messages, call metadata, files, application activity, browser history and location information. Support varies by model, operating-system version, application, lock state and credentials. Deleted records may be unavailable.
An examination cannot unlock a phone without the required consent and a supported method. It cannot recover every deleted item. It cannot certify that a report will be admitted in a court or other forum. Laptop, server and cloud-account collection are outside this launch service.
Choose a mobile forensic tool
A large compatibility number is not a specification. Ask whether the product can acquire the devices you actually receive, produce the artifacts your examiners review, and sit inside your security and reporting process.
Before a purchase, write down:
- the Android and iOS models, versions and states you expect;
- whether credentials will be available;
- the applications and artifact classes that matter;
- case volume, operator roles and review path;
- where evidence may be processed and stored;
- who will install, update, support and escalate the product.
Then test. Use representative devices and known data. Keep vendor claims separate from results you can reproduce.
Discuss licensing · Read the tools page
Handle a device before examination
The first hour often decides what an examiner can still see.
Record:
- who has the device and when it was received;
- visible identifiers, damage and power state;
- whether it is connected to a network, a computer or a cloud account;
- any passcode, biometric access or account consent that has been given;
- changes already made, including updates, resets, uninstalled apps or repairs.
Avoid:
- a factory reset or "cleanup" app if the device can be held safely as it is;
- connecting the phone to an untrusted computer;
- browsing the contents to have a look;
- sending images, exports or passwords through a website form.
If there is an immediate safety or incident-response risk, follow that process first. Then tell the examiner what changed.
Read a report
A usable report lets a reviewer follow the work without having been in the room.
Look for four separate things:
Evidence references. What was received or acquired, how it was identified, and the hashes or handling records needed to trace it.
Findings. What the examination observed within the agreed scope.
Interpretation. What those observations may mean for the question asked.
Limitations. Gaps, unsupported methods, missing data and alternative explanations that change how confident a reader should be.
If a conclusion cannot be tied to a source record, treat it as incomplete. Legal significance and admissibility remain a matter for the instructing team and the relevant forum.
Brief a training request
Zeno Academy begins with private team training. It is not a student course catalogue and it is not an independent certification authority.
A useful training brief states:
- who is attending and what they do now;
- the tools already in use or under evaluation;
- the devices and case types they handle;
- the tasks they must be able to perform afterward;
- the environment, security constraints and available dates.
Course attendance shows that someone was present. It does not, by itself, show that they can handle a live matter. Practical courses should say what participants will do, on what material, and what record is issued on completion.
Request team training · Explore the Academy
Guides we will publish when they are ready
These titles are the intended resource library. Each page will go live only with an owner, a reviewed draft and a next step into a real service, tool or training conversation.
- Mobile forensics: what an examination can and cannot establish
- Choosing mobile forensic tools
- Digital evidence handling and chain of custody
- Reporting, interpretation and limitations
- Academy outlines and team-training briefs
- Cloud forensics: sources, collection and limits, as education rather than a launch service
- Electronic evidence notes for India, including BSA Section 63, after legal review
Until those pages exist, use the notes on this page together with Process, Tools and Academy.
Questions these notes often raise
Is this legal advice?
No. The notes explain examination, handling and reporting practice. Authority, privilege, employment law and admissibility need your own legal advice.
Can I send a device image for a quick opinion?
No. Describe the requirement here. Evidence transfer is arranged only after consent, scope and a suitable engagement path are agreed.
Do you publish a blog or case studies?
Not as a substitute for these notes. We will not invent customer stories or publish matter details.
Continue from here
Request a mobile examination · Discuss licensing · Request team training