A collection of utilities for simplifying and automating the process of gathering forensic traces helpful in identifying potential compromises of Android and iOS devices.
Public indicators of compromise are insufficient to determine that a device is "clean", and not targeted with a particular spyware tool. Reliance on public indicators alone can miss recent forensic traces and give a false sense of security.
pip3 install mvt
Provides two commands: mvt-ios
and mvt-android
. Check out the documentation to learn how to use them!
Released under its own license, designed to facilitate consensual forensic analysis and protect privacy. Read more in the documentation.
MVT supports using public indicators of compromise (IOCs) to scan mobile devices for potential traces of targeting or infection by known spyware campaigns. This includes IOCs published by Amnesty International and other research groups.
> Visit mvt Website <