GMDSOFT Tech Letter Vol11.Artifact Analysis Using Instagram Data Exports

The Growing Threat Landscape 

With over 2 billion monthly active users worldwide, Instagram has evolved far beyond a simple photo-sharing platform. It has become a primary communication channel—and unfortunately, a hunting ground for sophisticated cybercriminals. From elaborate romance scams targeting vulnerable seniors in the UK to organized cyberstalking networks terrorizing college campuses across the United States, criminals are increasingly exploiting Instagram’s Direct Message feature to execute complex, long-term schemes.  

 

The Technical Challenge: DM Storage Architecture 

Instagram’s current architecture presents a significant limitation for forensic investigators. The platform implements a rolling storage mechanism that retains only the most recent 20 Direct Messages per conversation thread in standard device analysis scenarios.  

 

Technical Solution: Leveraging Data Export Functionality 

Instagram’s “Download your information” feature provides a comprehensive alternative data acquisition method. This functionality generates complete archives containing: 

• Full conversation histories without the 20-message limitation 

• Comprehensive account details and profile information 

• Complete media upload records including posts and reels 

• Detailed timestamp data for temporal analysis 

• Cross-platform activity logs from both Android, iOS, and web environments 

 

Advanced Analysis with MD-RED 

At GMDSOFT, we’ve developed specialized capabilities within our MD-RED to analyze Instagram export data from both Android and iOS devices. Our solution bridges the gap between Instagram’s data export functionality and the practical needs of forensic investigators. 

 

Real-World Impact 

The difference between standard analysis and comprehensive Instagram data examination can be case-changing. Investigations that previously hit dead ends due to limited message visibility now have access to complete criminal communication records.  

 

Conclusion 

As social media platforms continue to evolve their data retention policies and technical architectures, forensic investigators must adapt their methodological approaches accordingly. The combination of Instagram’s data export functionality with specialized analysis tools like MD-RED provides a robust solution for overcoming current platform limitations. This approach not only addresses immediate investigative needs but also establishes a framework for comprehensive social media forensics that can adapt to future platform changes and emerging criminal methodologies.  

Tech Letter Vol.11 provides detailed, step-by-step guidance on implementing Instagram DM analysis in your forensic workflow, including best practices for data export and analysis techniques. If you want to learn more about Instagram DM analysis, request the full tech letter! 

 


Successfully Completed the 2025 TTT Course!

🎉 The 2025 TTT (Train-The-Trainer) Course has officially ended!

Our certified training instructors from reseller partners are now recognized as ATP (Authorized Training Partners) 🏆, qualifying them to deliver GMDSOFT’s forensic training locally in their regions.
The TTT course goes beyond simple training – it drives GMDSOFT’s global expansion and sustainable growth 🌍. This year, we welcomed participants from 12 countries and 10 partners, bringing our total ATP-certified partners to 19!

🏯 This year was extra special as we provided our international partners with an authentic Korean cultural experience, visiting Gyeongbokgung Palace, Bukchon Hanok Village, and the National Museum of Korea. We wrapped up with an unforgettable evening of games, prizes, and networking at our beer party 🍻 – strengthening the bonds between our partners and GMDSOFT.

We’re committed to continuously expanding our ATP network, ensuring GMDSOFT’s training reaches every corner of the globe 🚀 Stay tuned for our next TTT course!


GMDSOFT 2025 Connect day – Connecting Innovators with ATPs

During our TTT course, we hosted a ‘Connect Day’ to foster direct collaboration between our partners and R&D leaders. The main goals of this event were to deepen partners’ understanding of our products through direct interaction and gather valuable insights to drive future product development and improvements.

🌟The atmosphere was perfect for connection – we gathered at GMDSOFT’s training center terrace, sharing great food and drinks while diving deep into product discussions. These relaxed yet focused conversations allowed for the kind of authentic feedback that truly shapes innovation.

🚀 As we approach the final stretch of our TTT course, the energy and collaboration we’ve built continue to drive us forward.
Stay tuned for updates on our upcoming Partners Day – exciting things ahead!


GMDSOFT 2025 TTT Course Launch – Empowering Forensic Trainers Worldwide

We are thrilled to announce the commencement of GMDSOFT’s 2025 Train-The-Trainer (TTT) Course, running from May 19-23, 2025. This course marks a significant opportunity for digital forensics professionals to elevate their training capabilities and become Authorized Training Partners (ATP). 

Why Forensic training is important in today’s forensic landscape 

In an era where cybercrime evolves at unprecedented rates, traditional investigative methodologies struggle to keep pace. The digital forensics field demands continuous education and skill development to effectively counter sophisticated threats. GMDSOFT’s TTT Course addresses this critical need by: 

• Establishing Standards of Excellence: Only ATP-certified trainers can deliver GMDSOFT’s official training, ensuring consistent quality worldwide 

• Bridging the Knowledge Gap: Providing cutting-edge training on MD-Series forensic tools to meet growing industry demands 

• Creating Trusted Expertise: Developing a global network of certified professionals who represent the gold standard in forensic training 

 

Becoming a GMDSOFT Authorized Training Partner offers unparalleled benefits: 

🌟 Exclusive Certification Status 

• Gain the prestigious distinction as an officially recognized GMDSOFT training provider 

• Deliver GCMP certification courses that are increasingly sought after in the forensic community 

💼 Business Growth & Expansion 

• Diversify your service offerings with high-value official training programs 

• Enhance your organization’s reputation as a leader in digital forensics education 

 

The TTT Course is meticulously designed to transform skilled practitioners into exceptional trainers: 

🛠️ Master the MD-Series  

• Gain comprehensive understanding of all MD-Series capabilities and applications 

• Access exclusive training materials and resources reserved for certified partners 

• Learn advanced troubleshooting techniques directly from GMDSOFT experts 

📊 Enhanced Training Methodology 

• Develop structured training approaches optimized for digital forensics education 

• Engage in direct exchanges with GMDSOFT’s instructors 

• Receive personalized feedback to refine your instructional approach 

 

Invest in Your Future as a Forensic Training Leader 

The digital forensics landscape continues to expand, creating unprecedented demand for qualified instructors. By completing the TTT course and becoming an ATP, you position yourself at the forefront of this growing field while demonstrating your commitment to excellence. 

We extend our sincere appreciation to our international partners participating in the TTT Course. 

Together, we are building a stronger global digital forensics community equipped to meet tomorrow’s challenges. 

 


2025 MD-Series Q1 Release Note Highlights

The first quarter of 2025 marks a significant milestone in our ongoing commitment to enhancing digital investigation capabilities. We are pleased to announce substantial improvements across the entire MD-Series, with particular emphasis on our drone forensics capabilities and expanding the number of countries supporting number plate restoration feature. 

These advancements reflect our dedication to providing law enforcement agencies, and investigators with cutting-edge tools that address the evolving challenges in the digital investigation landscape. 

 

Key Highlights:

 

📱 MD NEXT

• Model update of FFS (MD-PLUG) – 16 Manufacturers, 112 New models  

• Supports UI for 中文, 日本語, Tiếng Việt Beta

📤 MD-RED

• Supported New Apps – 21 Android Apps, 9 iOS Apps 

• Added support for JPEG XL(JXL) image format

👮🏻‍♀️ MD-LIVE

• Support UI for Bahasa Indonesia  

• Improved OCR analysis performance on iOS devices

☁️ MD-CLOUD

• Improved extraction stability for iCloud and Facebook
• Additional analysis for adjusted timestamp for iCloud photos

🚁 MD-DRONE

• New extraction method that analyzes files exported from DJI Assistant 

• Added Physical Extraction support with USB extraction method with DJI models.

🎥 MD-VIDEO AI

• ‘Number Plate Restoration’ covering 37 countries + 29 Regions of USA  

• ‘Multi-Input Number Plate Restoration’ covering 8 countries + 9 Regions of USA

 

To learn more about how these updates can enhance your investigative capabilities, please contact our sales team for full release note. 

 


GMDSOFT Tech Letter vol 10. Artifact Analysis of Google Maps Timeline

The Evolution of Google Maps Timeline as Forensic Evidence 

Google maps timeline has established itself as one of valuable data sources in digital forensic investigations since its launch in 2015. This powerful feature meticulously records a user’s location history, providing investigators with precise coordinates and timestamps that can place individuals at specific locations with remarkable accuracy. 

For years, forensic experts have relied on this data to reconstruct event sequences, establish or refute alibis, and map suspect movements in criminal investigations. The data’s strength lies in its passive collection methodology—Google captures location information whenever a Google service is activated on a device, even while the device is idle. This creates a comprehensive digital footprint spanning months or even years of user activity. 

 

A Significant Policy Shift 

In December 2023, Google implemented a significant policy change regarding location history storage and access that has substantially impacted forensic investigations. Previously, investigators could export timeline data through desktop browsers, allowing for streamlined analysis and integration with forensic tools. However, Google’s new policy restricts Timeline exports exclusively to mobile devices. 

 

GMDSOFT’s MD-RED: Adapting to the New Reality 

In response to Google’s policy changes, GMDSOFT has enhanced its mobile device evidence analysis program, MD-RED, to efficiently process timeline data exported from both Android and iOS devices. This specialized solution addresses the new challenges faced by investigators while maintaining the forensic completeness of the evidence.  

This month’s Tech Letter provides an in-depth examination of MD-RED’s capabilities for Google maps Timeline analysis, exploring techniques for proper extraction of Timeline data from mobile devices while showcasing advanced analysis methodologies that reveal valuable investigative information from Google Maps Timeline data. 

 

Looking Ahead 

As technology companies continue to modify their data policies, digital forensic methodologies must evolve accordingly. GMDSOFT remains committed to developing solutions that adapt to these changes while maintaining the highest standards of forensic analysis. 

For forensic professionals seeking to navigate Google’s new policy effectively, the combination of proper training, specialized tools like MD-RED, and adherence to rigorous forensic procedures will be essential in continuing to leverage this critical source of evidence. 

To learn more about analyzing Google maps timeline data with MD-RED and to receive the latest updates on digital forensic best practices, request for this month full Tech Letter. 


GMDSOFT Partners with Ulaanbaatar City Council to Revolutionize Traffic Safety Through Advanced Forensic Technology

GMDSOFT is pleased to announce a significant milestone in our commitment to public safety and technological innovation. Our recent Memorandum of Understanding (MOU) with ULAANBAATAR CITY COUNCIL of MONGOLIA represents a transformative approach to addressing traffic-related challenges through advanced forensic technologies. 

A Collaborative Vision for Safer Urban Environments 

We were honored to host the Citizen’s Representative for the Capital City and the Head of Investigation Department of Traffic Police at GMDSOFT HQ. This pivotal meeting underscored the critical need for technological interventions in traffic crime investigation. 

Understanding the Technological Landscape 

Mongolia’s urban transportation ecosystem faces significant challenges in traffic crime investigation. Limited technological infrastructure has historically hindered law enforcement’s ability to effectively analyze, document, and resolve complex traffic incidents. These challenges extend beyond mere statistical concerns, representing real-world safety risks for citizens and systemic limitations in legal enforcement. 

GMDSOFT’s Comprehensive Technological Solution 

Our partnership introduces a comprehensive suite of advanced video forensic technologies designed to dramatically enhance investigative capabilities.  

MD-VIDEO AI is an AI-based solution with cutting-edge Vehicle Detection technology that accurately identifies various vehicles in video files, advanced Number Plate Identification technology that recognizes all the vehicle numbers seen in the frame and proprietary Number Plate Restoration technology that reconstruct identifiable vehicle number from surveillance footage with unclear and low-resolution plate images—providing critical evidence for previously unsolvable cases. 

More Than Technology: A Commitment to Public Safety 

This collaboration transcends technological deployment. We are fundamentally reimagining how urban traffic safety can be approached, leveraging data-driven insights and state-of-the-art forensic technologies to create more secure transportation ecosystems. 

Looking Forward: A Shared Commitment to Innovation 

As we embark on this transformative journey with ULAANBAATAR CITY COUNCIL of MONGOLIA, GMDSOFT remains committed to pushing the boundaries of what’s possible in traffic crime investigation. Our partnership represents not just a technological solution, but a shared vision of safer, more intelligent urban environments. 

Stay tuned for ongoing updates about this groundbreaking partnership and its potential impact on urban safety technologies. 


MD-DRONE: Advancing the Future of Drone Forensics

Why Drone Forensics Matters 

In today’s rapidly evolving technological landscape, drones have become ubiquitous tools across industries ranging from photography and agriculture to security and emergency services. However, this proliferation has also introduced new challenges in digital forensics and security. Unauthorized drone operations, privacy violations, and potential use in criminal activities have created an urgent need for sophisticated drone forensic capabilities. 

Traditional digital forensics methods often fall short when applied to drone technologies due to their unique operating systems, proprietary data formats, and complex flight control mechanisms. This gap in forensic capabilities can leave investigators without crucial evidence and organizations vulnerable to security breaches. 

Introducing MD-DRONE v1.5.0.249 

MD-DRONE stands at the forefront of drone forensic technology, delivering comprehensive solutions that address these challenges. Our latest update introduces groundbreaking features designed to transform how professionals approach drone investigations and security. 

 

Key Highlights: 

• Physical extraction 

   ・ Added support for the USB extraction method

   ・ DJI: Phantom 4 Advanced, Phantom 4 Pro, Phantom 4 Pro V2.0, Phantom 4 RTK, Matrice 600 Pro, N3(FC), A3(FC) 

• MD-PLUG: Enhanced Extraction Hardware  

   ・ Our specialized hardware interface works seamlessly with MD-DRONE to enable efficient data extraction 

   ・ Minimizes failures caused by PC environment variations 

   ・ Provides the decryption of encrypted flight logs used in modern drone systems 

• DJI Assistant File 

   ・ Introduces a new extraction method that analyzes files exported from DJI Assistant. 

 

Experience the Future of Drone Forensics 

MD-DRONE represents the cutting edge of drone forensic technology, developed by industry experts with real-world experience in digital investigations and drone security. Our commitment to innovation ensures you’ll always have access to the most advanced tools available. 

Schedule a demonstration today to see how MD-DRONE can transform your drone forensic capabilities and provide the evidence you need when it matters most. 

 


Tech Letter vol 9. Investigating an Unknown USIM as Digital Evidence

When criminals thought they were untraceable, a single USIM told their whole story. 

In a stunning breakthrough that reads like a techno-thriller, authorities recently dismantled a sophisticated international fraud ring that had stolen hundreds of millions of dollars by impersonating prosecutors and police officers. Their biggest mistake? Underestimating the silent witness in their pocket. 

Despite constantly switching phones and USIM cards to evade detection, these criminals couldn’t escape the digital breadcrumbs they left behind. One recovered USIM contained the critical evidence that brought down their entire operation. 

 

The digital fingerprint you carry every day 

That simple chip in your phone isn’t just connecting you to networks—it’s storing a wealth of information about your digital life. While fraudsters thought they were outsmarting investigators by swapping devices, they failed to understand one crucial fact: each USIM carries a unique digital signature that can link back to its user. 

In digital forensics, this tiny component often becomes the smoking gun. When suspects surrender alternative devices, the story told by their USIM can break their alibi wide open. 

 

What secrets does your USIM hold? 

MD-NEXT can extract and analyze data from unidentified USIM cards, transforming seemingly random data into case-breaking evidence. 

 

What could your USIM reveal about you? 

Tech Letter vol.9 delves into the fascinating world of USIM forensics, unveiling: 

•The data structures that expose user identity 

•How investigators track criminals through USIM footprints 

 

Are you curious about what stories your own USIM card could tell? 

Request the complete Tech Letter to discover the incredible forensic techniques that are revolutionizing digital investigations.


Strategic Partnership with MH Service to Enhance Digital Forensics Capabilities in India

GMDSOFT, a global leader in digital and mobile forensics solutions, has announced a strategic partnership with mh Service, a prominent digital forensic solution provider in India. This collaboration aims to strengthen India’s digital forensics ecosystem and provide advanced investigative tools to law enforcement agencies and corporate security teams across the country. 

 

Partnership Details 

The partnership designates mh Service as GMDSOFT’s official distributor in India, facilitating the deployment of cutting-edge MD-Series solutions throughout the region. This strategic alliance combines GMDSOFT’s extensive forensic expertise with mh Service’s robust distribution network, enabling the delivery of world-class investigative tools tailored specifically for Indian organizations. 

 

Addressing Cybercrime Challenges 

As cybercrime rates continue to escalate in India, this partnership comes at a critical time. GMDSOFT’s MD-Series, specializing in mobile, video, and drone forensics solutions, is expected to play a pivotal role in transforming cybercrime investigations in the country. The technology offers authorities unprecedented capabilities to extract and analyze digital evidence, significantly enhancing their investigative prowess. 

 

Executive Insights 

Jessy Jun, Senior Managing Director at GMDSOFT, emphasized the importance of this partnership in the face of evolving cyber threats. “With the increasing complexity of cyber threats, our partnership ensures that law enforcement and enterprises in India have access to the most advanced forensic tools available,” Jessy stated. This collaboration is set to empower investigators with state-of-the-art resources to combat digital crimes more effectively. 

 

Impact on India’s Digital Forensics Landscape 

The partnership between GMDSOFT and mh Service is expected to have a substantial impact on India’s digital forensics capabilities. By providing access to advanced forensic technologies, this collaboration aims to enhance the country’s ability to investigate and mitigate cybercrime, ultimately contributing to a more secure digital environment for businesses and citizens alike. 

As cyber threats continue to evolve, this strategic alliance positions India at the forefront of digital forensic capabilities, equipping its law enforcement and security professionals with the tools necessary to address the challenges of the digital age. 

 

ABOUT MH SERVICE 

With over 30 years of expertise, mh Service is a trusted global provider of forensic solutions, offering specialized hardware, software, and fully equipped digital forensic laboratories. As a partner of industry leaders, mh Service delivers cutting-edge forensic tools to help organizations conduct high-performance digital investigations. For more information, visit www.mh-service.in 

 

ABOUT GMDSOFT 

GMDSOFT is a leading provider of digital forensics and cybersecurity solutions, offering state-of-the-art solution to law enforcement agencies, intelligence organizations, and enterprises worldwide. MD-Series empower investigators to efficiently collect, analyze, and manage digital evidence for faster and more accurate forensic investigations. For more information, visit www.gmdsoft.com