Lantern 3
Lantern 3 raises the bar in mobile forensics. It is by far the most cost effective tool for iPhone, iPod Touch, and iPad Forensics and now you can can also parse and triage a Mac running OSX or a Mac OSX image. With the release of Lantern 3 we now support Android devices as well. Lantern consistently parses more data than any other high priced application. Lantern also has the most intuitive interface of any forensic application. We know what examiners and investigators want because we listen to them.
We treat mobile devices like computers, not just a phone. There is no need for black boxes, tablets, and gimmicks. Lantern is for extraction, analaysis, and reporting and by far the best for iOS.
Download the NIST Evaluation of Lantern (535)
Click here to see LANTERN in action.
Features
- Report updates to include adding additional PDF reports to the Lantern Report
- New Extraction Engine for advanced collection of application data
- SMS carving improved and supports up to 6.1.4
- Carve Attachment Table to report attachment names for deleted records
- Accept carved messages with invalid attributedBody if they do have valid plaintext column
- Report text messages oldest to newest by default, added option for newest to oldest
- add utf-7 charset support for e-mail parsing
- Improved reporting support for IE8
- Facebook contacts and messages
- Facebook Messenger contacts and messages
- Facebook message geotag visualization
- Snap Chat Videos
- Three reporting types – HTML, PDF and Mobile
- Report messages by conversation
- Gallery view for images for All and Selected Apps
- Improved Contacts
- Select single conversations for reporting
- New reporting system to handle large data sets
- Copy and Paste Data from Hex
- Copy and Paste Data from Inspector
- Free Lantern Reader app in Apple App Store
- Deleted SMS for iOS 6
- Message section in Photos
- Updated KiK Messenger
- Improved logical extraction
- Chrome Internet History
- Single Extraction Method – Phone and Tablets
- Auto detection of make and model of devices
- Contacts
- SMS
- Web History
- Images
- Documents
- Facebook – (Depends on OS version and app version)
- Twitter – (Depends on OS version and app version)
- Intel based Mac
- 4GB RAM
- OSX 10.7+
- Google Earth (Only for mapping functionality)
- iPod plist plugin
- Voxer plugin
- KiK Messenger plugin
- Text Plus plugin
- Text Free plugin
- Bluetooth Connections
- Snap Chat Application Plugin
- Grindr Application Plugin
- Meet24 Application Plugin
- ICQ Application Plugin
- Line Application Plugin
- Pinger Application Plugin
- Text Now Application Plugin
- iPhone 2G
- iPhone 3G
- iPhone 3GS
- iPhone 4
- iPhone 4S
- iPhone 5
- iPod Touch 1G
- iPod Touch 2G
- iPod Touch 3G
- iPod Touch 4G
- iPod Touch 5G
- iPad 1G
- iPad 2G
- iPad 3G
- iPad 4G
- iPad Mini
- Mac OS X 10.7+
- Android*
*See current list for known unsupported devices.
- HTC Droid Incredible
- HTC Thunderbolt
- LG Spectrum
- Casio Commando
View Previous Verison Features
- Timeline Analysis
- Physical image analysis
- Logical analysis
- Supports most vendors physical images
- Analysis from backups
- Data Carving
- Keyword searching
- Date Filtering
- Deleted SMS, Notes, Images
- Supports all iPads
- Supports all iPhones GSM & CDMA
- Supports all iPod Touches
- Support for iOS 2.2 to 5.1 Beta 3
- Email from the new Gmail application
- Email from Gmail and Yahoo mail via Safari
- Locked artifact files
- Call Logs
- Contacts
- SMS and MMS & iMessage
- Notes
- Calendar and Reminders
- Safari history
- Media
- Voice recordings
- Voice Mail
- Images with EXIF and GPS info
- Geo Location data and visualization
- Maps with GPS history and visualization
- Acquisitions of multiple iPhones
- Granular acquisitions and reporting
- Analysis of third party applications
- Portable case data to other tools
- Easy to read reports for investigators and attorneys
- Additional geo location data from physical images
- Arbitrary Analysis
- File system dump analysis from other applications
- Decryption and analysis from other providers
- Mac OS X analysis
- Web History
- Images and geo tagged data with visualization
- Email Analysis
- Document Analysis
- Support for he newest Skype SQLite format
- SMS, MMS, and iMessage for iOS 5
- Deleted
- Duplicate
- SMS cache analysis
- What’s App analysis
- New bookmarks
- Relevant
- Privileged
- Sensitive
- Added calendar name in calendar page
- Added galendar geotagged data from the Calendar.db
- Right click to use Quicklook
- Added iOS install date and time from a physical image in the info page
- Added the brute forced passcode in the information page
- Additional Email extraction from a physical image
- Plugins – Ability to create scripts to analyze the possible 600,000+ Applications
- Twitter Safari Cache
- Added relevant phone data from Lantern Images
- New Conversation Mode for Message Page – Select from list of participants on left
- New Application List Page
- New – Ability to add Agency/Company Logos and information for reporting
- Added Application Usage Data for iOS 5 (Physical Only)
- Added Image Censoring for Reports
- Fixed appearance bug when Lion scroll bars set to hide
- Camera view completely re-done
- Deleted iMessage recovery, fixed conversation ordering
- Add MD5 hash in addition to SHA1 for every file
- Hash set support (Encase, text files)
- Annotation support
- Added acquisition start/end times to report
- Bugfixes and Improvement
- All plugins now embedded into application
- Support for iOS6
- iPhone 5 (GSM & CDMA)
- Added Suspect and Victim bookmarking
- Global Keyword Searching
- Added bluetooth plugin – Bluetooth Connections
- Removed the “View” menu and disable Hide/Show Toolbar options
- Updated Passbook parsing for iOS6
- MMS parsing fixes
- Bug fix reporting issue when MMS pieces have the same file name
- Bug fix SQLite carver
- Bug fix What’s app: export message summary to CSV, fix timeline representation
- Add option to disable timeline in reports
- Add dialog box indicating report is finished, with option to open/reveal/dismiss
- Improvements to SQLite carver
- Improve SQLite carver memory consumption
Forensic Case Management
Case management the way it should be. Affordable and easy to use yet powerful enough to be used by organizations of all sizes. Find out more about Atlas.
Lantern Reader App
An industry first! Lantern Reader allows you to view reports exported from the Lantern Mac app, the leader in iOS Forensics. View multiple reports in an easy to navigate view right on your iPad.
Download from the App Store.
Lantern Imager
Lantern Imager is a complimentary application to Lantern 2. Lantern Imager was specifically designed to image iOS devices. This gives both the law enforcement and security professionals a capability that rivals all other applications. It is the first Mac based GUI iOS Imager that is completely free. This company is dedicated to those that perform digital forensics. This application is intended to be free. Something different for those corporations that can’t innovate and charge thousands of dollars for the same capability.
Existing customers can download Lantern Imager by logging in here
Features
- Fully automated (no command line intervention)
- New Log File
- Process start Date and Time
- Process end Date and Time
- SHA-1 Hash value
- Automated device identification
- Brute force a simple passcode
- Image a device
- decrypt an image
- Enhanced Decryption
- Updated Support for iPod 3G
- Bug Fixes
- Redesigned DFU procedures
- iPhone 3GS
- iPhone 4 (GSM & CDMA)
- iPod Touch 4G
- iPod Touch 3G
- iPad 1G
- iOS 4.x
- iOS 5.x
- iOS 6.x
The code released in Lantern Imager is GPL. Any use, part or in whole by a proprietary program must therefore release their code as well.
Image Decrypter
Image Decrypter is a new free tool exclusive to Lantern 2 customers. Existing customers can download Image Decrypter by logging in here
Features
- Decrypt cellebrite’s ™ encrypted physical images
- Decrypt Lantern Imager images without having to re-image the device
- Updated support for various Cellebrite’s ™ encrypted physical images
- Enhanced Decryption