Key takeaways from our on-demand webinar titled ‘Streamline Investigations with Remote Collection of Android and Workplace Apps‘. 

Conducting digital investigations can be a challenging and time-consuming task for investigators. The abundance of digital evidence, especially from Android devices and workplace applications, adds complexity to the process. The good news is there’s a solution that simplifies this tedious task—Cellebrite Endpoint Inspector. 

In this blog, we’ll explore how Endpoint Inspector revolutionizes the data collection process, making it fast, efficient, and accurate. With its intuitive user interface and custom templates, investigators can remotely collect data without compromising on quality.  

Let’s delve into the world of digital investigations and discover the power of Endpoint Inspector in streamlining the collection process from Android phones and workplace applications. 

Mobile Collections: Android Devices 

To initiate a mobile collection, custodians must first unlock their Android phones and enable developer mode, which might vary depending on the phone model. Endpoint Inspector’s mobile agent provides step-by-step instructions for custodians to follow during the setup process. It also offers the option to use a fake SMTP server to send personalized emails to custodians, enhancing user experience. 

Workplace App Collections: Office 365 

Workplace app collections play a crucial role in modern organizations, facilitating communication and collaboration. Endpoint Inspector supports various workplace apps, including Office 365, Slack, and Google Workspace. Investigators can customize collections by selecting specific applications and keywords relevant to the investigation. 

Step-by-Step Guide for Mobile Collections 

  1. Log in to Endpoint Inspector and navigate to the “Collections” page. 
  1. Click on “Create” and enter collection details, including the name and repository for saving data. 
  1. Optionally, add collection notes for future reference. 
  1. Provide custodian details and set a password if necessary. 
  1. Choose between repository and local storage for data saving. 
  1. Set up the SMTP email template for custodian notifications. 
  1. Select the data types for the collection (full logical or partial logical). 
  1. Use standard or advanced filters to narrow down the collection based on specific criteria or keywords. 
  1. Start the collection and monitor progress on the “Collections” page. 

Step-by-Step Guide for Workplace App Collections 

  1. Log in to Endpoint Inspector and navigate to the “Collections” page. 
  1. Click on “Create” and enter collection details, including the name and repository for saving data. 
  1. Optionally, add collection notes for future reference. 
  1. Select the “Workplace Applications” collection option. 
  1. Choose the custodians and applications to be included in the collection. 
  1. Set the output type (load file, metadata only, or native file). 
  1. Choose between standard and advanced filters for more specific data retrieval. 
  1. Start the collection and monitor progress on the “Collections” page. 

There is also the option to save collections locally, eliminating the need for a network share or Amazon bucket. It’s also important to be present during Android device authorization to ensure a smooth collection process. Endpoint Inspector offers collection templates for routine investigations where investigators can save collection parameters as templates, making it easier to replicate similar collections in the future. 

In conclusion, leveraging the capabilities of Endpoint Inspector streamlines digital investigations, saves time, and improves efficiency. With its user-friendly interface and comprehensive features, the platform serves as a valuable tool for modern digital forensics and incident response teams. 

To learn more about how easy it is to streamline your investigative workflow for remote collections, watch our on-demand webinar where Emmy Gamble, Customer Success Manager for Cellebrite Enterprise Solutions, showcases the process of a data collection journey. 

Share this post