Tools and Guides
The Security Lab develops and maintains a range of digital and mobile forensics tools to empower forensic experts and civil society technologists to identify evidence of unlawful surveillance or other digital attacks targeting journalists and human rights defenders. These tools continue to be developed by the Security Lab and the community.
- Mobile Verification Toolkit (MVT): a forensic tool used to analyse Android and iOS devices for traces of compromise, including indicators associated with advanced spyware. Documentation is available at docs.mvt.re.
- AndroidQF (Android Quick Forensics): a tool used to acquire relevant forensic data from Android devices, producing evidence that can then be analysed with MVT or other tools. Documentation is available in the project repository.
Note: These tools are designed for technology experts and are not neccesarily able to detect the latest advanced spyware threats without further knowledge and private indicators.
The Security Lab tools and guides are intended to be stand-alone resources for civil society work on digital forensics and digital attacks, and we will welcome input to help improve them and make them more accessible after publication. As we work to update and improve these resources, please keep an eye out on this page, GitHub and our social media for more information.
We also recommend complementary community-driven resources such as the SocialTic Digital Forensics Guide, a documentation repository on consensual digital forensics for the defence of human rights.
