This session will cover the most popular software methods of modern mobile device acquisition. The presenter will share how you can navigate through the file system of obtained dumps, what types of evidence could be found inside and what mobile app artifacts can help you in a course of a forensic investigation or an incident response case. The presenter will also discuss the capabilities and limitations of each extraction method. In addition, the session will share some tips on which methods are suitable for which devices.