Fetch helps examiners securely collect digital evidence from Macs and iPhones, whether the device is nearby or with a remote custodian. Examiners define what to collect, and Fetch packages the files with supporting reports. For remote Mac collections, custodians use a guided app to collect, encrypt, and upload the results to the examiner’s designated cloud storage—without needing the examiner’s cloud credentials or requiring the examiner to remain online.

Keep every collection connected to its case. Fetch’s Case Manager brings together case details, custodian information, cloud destinations, and collection reports, helping examiners organize local and remote work from setup through review. Search across cases to find custodians and contact details, and keep collected files and supporting reports organized in their designated case folders.

Collect data locally or remotely—with no subscription required.

Fetch gives examiners flexible ways to select computer data: match files by hash, target specific folders, choose predefined file groups, build custom groups, or focus on a particular user account. Drag and drop files and folders for targeted collection, or index and search to find relevant material before collecting it.

• By Hash Values: Find and collect files that match a supplied list of digital fingerprints, known as hashes.
• By Folder: Select specific folders and collect their contents, including files within subfolders.
• By File Group: Choose predefined categories, such as documents, images, or videos, to collect the file types relevant to your investigation.
• By Custom Group: Create your own collection group by combining selected file types to suit the needs of a case.
• Drag and Drop: Drag selected files or folders into Fetch to add them to a targeted collection.
• Index and Search: Build a searchable index to locate relevant files, review the results, and select what to collect.
• By User Account: Focus collection on a selected user’s account, helping narrow the scope on computers shared by multiple people.

iPhone Collection for Cyber Investigations, Litigation, and Law Enforcement

Fetch performs logical collections of iPhone data for examiners, collecting available event and diagnostic logs for cyber investigations, preserving text conversations and attachments in RSMF format for import into RelativityOne, and producing professional chain-of-custody documentation for law enforcement. Case-organized collection packages and supporting reports keep the collected data documented and ready for review.

Collection options include:

• Messages and Attachments: Collect text conversations with associated images, videos, and files, with optional inline previews.
• Selected Data Categories: Target contacts, call history, photos, videos, notes, Safari data, and available app, location, and device artifacts.
• Custom Groups: Define additional file-type groups for targeted collection.
• Date Filtering: Limit message exports to a selected date range.
• Message Presentation: Choose participant names, timestamps, emoji, conversation grouping, and attachment display options.
• Diagnostics: Include available crash, analytics, and diagnostic logs, with supported live console capture.
• Output Packages: Prepare artifact ZIPs, forensic backup packages, RSMF packages, attorney HTML/PDF review copies, and optional Relativity DAT/OPT load files.
• Supporting Reports: Include collection summaries, device profiles, file manifests, workbooks, and chain-of-custody records.