Forensic Tool

Mobile Verification Toolkit For Pegasus Infection

Mobile Verification Toolkit (MVT) is a collection of utilities to simplify and automate the process of gathering forensic traces helpful to identify a potential compromise of Android and iOS devices. It has been developed and released by the Amnesty International Security Lab in July 2021 in the con

Mobile Verification Toolkit (MVT) is a collection of utilities to simplify and automate the process of gathering forensic traces helpful to identify a potential compromise of Android and iOS devices.

It has been developed and released by the Amnesty International Security Lab in July 2021 in the context of the Pegasus project along with a technical forensic methodology and forensic evidence.

Warning: this tool has been released as a forensic tool for a technical audience. Using it requires some technical skills such as understanding the basics of forensic analysis and using command-line tools.

Installation

First, you need to install dependencies, on Linux sudo apt install python3 python3-pip libusb-1.0-0 or on MacOS brew install python3 libusb.

Then you can install mvt from pypi with pip3 install mvt, or directly from sources:

git clone https://github.com/mvt-project/mvt.git
cd mvt
pip3 install.

Usage

MVT provides two commands mvt-ios and mvt-android with the following subcommands available:
  • mvt-ios:

check-backup: Extract artifacts from an iTunes backup

check-fs: Extract artifacts from a full filesystem dump
check-iocs: Compare stored JSON results to provided indicators
decrypt-backup: Decrypt an encrypted iTunes backup
  • mvt-android:
check-backup: Check an Android Backup
download-apks: Download all or non-safelisted installed APKs
Check out the documentation to see how to use them.
GET MVK ToolKit

Was this article helpful?

If something here is wrong or out of date, tell us and we will check the source.

Related reading

See all
Forensic Tool

Logicytics: System Data Harvester

Logicytics is a cutting-edge tool designed to meticulously harvest and collect a vast array of Windows system data for forensic analysis. Crafted with Python 🐍, it’s an actively developed project that is dedicated to gathering as much sensitive data as possible and packaging it neatly into a ZIP fi

September 23, 2024
Forensic Tool

teler : Real-time HTTP Intrusion Detection

Teler is a real-time intrusion detection and threat alert based on a weblog that runs in a terminal with resources that we collect and provide by the community. ❤️ Features Real-time: Analyze logs and identify suspicious activity in real time. Alerting: teler provides alerting when a threat is detec

December 4, 2022
Forensic Tool

INTLog – A Flask app to Track Interesting Artifacts during an Investigation

INTLog is a simple Flask app designed to keep track of potentially interesting artifacts during an investigation. This application was designed to keep track of artifacts that you may stumble across during an investigation. This project is in an EXTREMELY early stage. Setup Setup env: INTLog » pytho

November 24, 2022
Forensic Tool

DFIRTrack: (Digital Forensics and Incident Response Tracking application

DFIRTrack (Digital Forensics and Incident Response Tracking application) is an open source web application mainly based on Djangousing a PostgreSQL database backend. In contrast to other great incident response tools, which are mainly case-based and support the work of CERTs, SOCs etc. in their dail

November 13, 2018