Solutions

Forensic Capabilities

Mobile forensics and cloud extraction — built on 17+ years of deep technical expertise. Aerom's tools uncover what others miss across iOS and Android platforms.

01 — iOS

iOS Mobile Device Forensics

Full filesystem extraction from iPhone and iPad devices — including locked and disabled devices. Our proprietary techniques maintain complete forensic soundness for court admissibility.

Full Filesystem Extraction — access every file, database, and artifact
Keychain Decryption — recover passwords, tokens, certificates
Deleted Data Recovery — reconstruct from SQLite WAL files
300+ App Parsers — WhatsApp, Signal, Telegram, banking
iOS 7–18 — A-series and M-series chip support

$ aerom --ios --target iPhone15Pro

[iOS] Device: iPhone 15 Pro (iOS 18.2)

[iOS] Chip: A17 Pro · 256GB · LOCKED

[iOS] Write-block: ACTIVE

[iOS] Filesystem: 147.3 GB extracted

[PARSE] Keychain: 342 entries

[ALERT] WhatsApp: 1,247 deleted msgs

[DONE] 23,441 artifacts. Court-ready.

02 — Android

Android Mobile Device Forensics

Physical and logical extraction across 2,000+ Android device models. Samsung Knox, FDE/FBE encryption, and EDL/BootROM level acquisition with full evidence integrity.

Physical Extraction — EDL, BootROM, chip-off
Encryption Bypass — FDE, FBE, Knox, secure element
2,000+ Devices — Samsung, Pixel, Xiaomi, OnePlus
Deleted Data Carving — wiped messages, media, databases

$ aerom --android --target S24_Ultra

[ANDROID] Galaxy S24 Ultra (Android 14)

[ANDROID] Snapdragon 8 Gen 3 · 512GB

[ANDROID] FDE/FBE: bypassing

[ANDROID] Image: 389.7 GB acquired

[PARSE] Knox containers: 3 decrypted

[ALERT] Telegram: 892 deleted chats

[DONE] 31,205 artifacts. Sealed.

03 — Cloud

Smartphone Cloud Forensics

When the device isn't available, the cloud still holds the evidence. Extract full backups, synced data, and app-specific cloud storage from 50+ services.

iCloud — backups, Drive, Photos, Messages, Keychain
Google Account — Gmail, Drive, Photos, Location
Messaging — WhatsApp, Telegram, Signal, Messenger
50+ Services — Dropbox, OneDrive, social platforms

$ aerom --cloud --service icloud

[CLOUD] iCloud authenticated (2FA)

[CLOUD] Backup: iPhone 15 Pro

[CLOUD] Downloading: 84.3 GB

[PARSE] Messages: 12,491 (847 deleted)

[PARSE] Photos: 8,234 (GPS: 6,102)

[ALERT] Health data patterns found

[DONE] Cloud extraction complete.

Workflow

Evidence Processing Pipeline

Acquisition

Write-blocked extraction with cryptographic hashing

Processing

Decryption, parsing, artifact extraction

Analysis

Timeline reconstruction, cross-referencing

Reporting

Court-admissible reports with chain of custody