Need texts, WhatsApp or Signal for an investigation or compliance review? Guide a cooperative employee remotely, or collect from a phone already in front of you. Your team runs the work, all on the MARA platform.
An employee interview. A remote compliance request. A returned company phone.
Choose a situation to follow the steps.
EMPLOYEE INTERVIEWRUN BY YOUR TEAM
0105
The employee is here. The messages matter.
During a cooperative employee interview, you need relevant texts, WhatsApp or Signal messages. Open the matter, choose the data to collect, and select Collect now with the employee’s consent.
MARA supports texts, WhatsApp and Signal on both iPhone and Android. Follow the guided prompts for the selected data.
COLLECTION WORKSPACE
INTERNAL INVESTIGATIONEmployee interview
In the room
Interview follow-upAlex Morgan
Employee present. Collection with consent.
Requested data
✓Texts✓WhatsApp✓Signal
Guide the collection during the interview.
Collect now →
Illustrative MARA workflow. Fictional data. Animation does not indicate collection time.
0205
A computer. A USB cable. Their phone.
Open MARA, plug in the phone, and follow the unlock and permission prompts with the employee. No collection kits or specialized hardware are required.
Android can also use the phone app, with a direct portal-upload option.
COLLECTION WORKSPACE
ORDINARY COMPUTER + USBConnect. Follow the prompts.
Alex Morgan
Data needed
TextsWhatsAppSignal
Your computer and a USB cable. No specialized collection hardware.
Illustrative MARA workflow. Fictional data. Animation does not indicate collection time.
0305
Start the collection. Keep the scope focused.
Start the collection and follow its progress. Your team guides the employee through the prompts for texts, WhatsApp, Signal and the other data your matter needs.
The acquisition report is generated as part of the process.
COLLECTION WORKSPACE
DURING THE INTERVIEWCollect for your investigation.
Alex Morgan
Data needed
TextsWhatsAppSignal
Your investigator guides the consenting employee in the room.
Illustrative MARA workflow. Fictional data. Animation does not indicate collection time.
0405
From the interview room. Into your matter.
Upload the collection to your MARA portal. Follow the transfer until the matter shows the collection as received, ready for your investigation team.
Using the Android phone app? Select upload to send the collection directly to the same portal.
COLLECTION WORKSPACE
COLLECTION DATA → MARA PORTALInterview follow-upAlex Morgan
COMPLETED LOCAL COLLECTION
Phone collectionData + report
✓
Interview room
UPLOAD
YOUR MATTER WORKSPACE
MARA Portal
Investigations workspace
Interview follow-up✓
Completed package. Ready to upload.Uploading collection data to MARA PortalReceived in your matter
Android phone app is another path.Collect on the phone, then select upload directly to the portal.
Illustrative MARA workflow. Fictional data. Animation does not indicate collection time.
0505
Review the messages. Export what is relevant.
Download Data + MARA Analyzer from the portal to review the collected messages. Select the relevant records and export them for the investigation or compliance review.
Standalone collection data and the acquisition report are also available to download from the matter.
COLLECTION WORKSPACE
RECEIVED IN YOUR PORTALInterview follow-up
Ready to download
Alex MorganStandalone collection data
Acquisition reportCollection details and file hashes
Download standalone dataContinue in your team’s preferred tool
Data + MARA AnalyzerDownload. Open. Review the collection.
ANALYZERYour investigation review
TextsWhatsAppSignal
Review the relevant records.
Work within the agreed collection scope.
RELEVANT RECORDS → EXPORT
RSMFCSVXLSXXMLPDF
Illustrative MARA workflow. Fictional data. Animation does not indicate collection time.
A compliance request. An employee working remotely.
Create the matter, choose the needed phone data, and invite the cooperative employee. Your team manages the request while they stay at their location.
Use this path for compliance reviews and internal investigations with a participating employee.
COLLECTION WORKSPACE
COMPLIANCE COLLECTION REQUESTA cooperative employee. At home.
Your investigation teamRequest and scope
GUIDED REMOTELY→
Jordan LeeEmployee’s home
EMPLOYEE COLLECTION INVITATIONFollow the collection invitation.
Compliance review · Your team stays involved.
Illustrative MARA workflow. Fictional data. Animation does not indicate collection time.
0205
They connect their phone. Your team guides them.
The employee opens MARA on a standard computer, connects their phone, and follows the guided setup. Android users can also use the phone app.
No shipped collection kit, specialized hardware or investigator travel.
COLLECTION WORKSPACE
ORDINARY COMPUTER + USBConnect. Follow the prompts.
Jordan Lee
Data needed
TextsSignal
Your computer and a USB cable. No specialized collection hardware.
Illustrative MARA workflow. Fictional data. Animation does not indicate collection time.
0305
The requested data. Collected where they are.
The employee starts the collection and follows the prompts. Your team stays involved through the MARA platform while the requested phone data is collected.
Choose targeted data or a broader supported collection to fit the review.
COLLECTION WORKSPACE
EMPLOYEE AT THEIR LOCATIONCollect for your investigation.
Jordan Lee
Data needed
TextsSignal
Your team guides the remote employee. Results go to compliance workspace.
Illustrative MARA workflow. Fictional data. Animation does not indicate collection time.
0405
Their location. Your compliance workspace.
The collection uploads to the matter in your MARA portal. Follow the transfer and see the received collection alongside the request.
The Android phone app can upload directly to the portal when the employee selects upload.
COLLECTION WORKSPACE
COLLECTION DATA → MARA PORTALCompliance reviewJordan Lee
COMPLETED LOCAL COLLECTION
Phone collectionData + report
✓
Employee’s home
UPLOAD
YOUR MATTER WORKSPACE
MARA Portal
Compliance workspace
Compliance review✓
Completed package. Ready to upload.Uploading collection data to MARA PortalReceived in your matter
Android phone app is another path.Collect on the phone, then select upload directly to the portal.
Illustrative MARA workflow. Fictional data. Animation does not indicate collection time.
0505
The results are in. Continue the review.
Open the matter and download the collection. Choose Data + MARA Analyzer to review relevant records, or download the standalone data for your workflow.
Export from Analyzer in RSMF, CSV, XLSX, XML, PDF, and more. The acquisition report accompanies the collection.
COLLECTION WORKSPACE
RECEIVED IN YOUR PORTALCompliance review
Ready to download
Jordan LeeStandalone collection data
Acquisition reportCollection details and file hashes
Download standalone dataContinue in your team’s preferred tool
Data + MARA AnalyzerDownload. Open. Review the collection.
ANALYZERYour investigation review
TextsSignal
Review the relevant records.
Work within the agreed collection scope.
RELEVANT RECORDS → EXPORT
RSMFCSVXLSXXMLPDF
Illustrative MARA workflow. Fictional data. Animation does not indicate collection time.
Add the returned company phone to the matter, select the data needed for the investigation, and choose Collect now. Your investigator runs the collection directly.
Use a device you are authorized to collect, with the required unlock and access available.
COLLECTION WORKSPACE
COMPANY DEVICE INTAKEThe phone is already here.
Returned device
Employee departureReturned company phone
Subject
Returned company phone
Location
With your investigator
Requested data
TextsWhatsApp
No remote invitation needed.
Collect now →
Illustrative MARA workflow. Fictional data. Animation does not indicate collection time.
0205
Plug in the phone. Follow the prompts.
Connect the phone to a standard computer by USB and complete the guided unlock and permission steps. No collection kits or specialized hardware are required.
No remote invitation is needed. Android also supports an on-phone collection path.
COLLECTION WORKSPACE
ORDINARY COMPUTER + USBConnect. Follow the prompts.
Returned company phone
Data needed
TextsWhatsApp
Your computer and a USB cable. No specialized collection hardware.
Illustrative MARA workflow. Fictional data. Animation does not indicate collection time.
0305
Press Start. Follow the collection.
Run the targeted or broader supported collection your matter needs. MARA shows progress and generates the acquisition report as part of the process.
Your team operates the collection on the MARA platform.
COLLECTION WORKSPACE
DEVICE IN YOUR POSSESSIONCollect for your investigation.
Returned company phone
Data needed
TextsWhatsApp
Your investigator runs the collection on the returned company phone.
Illustrative MARA workflow. Fictional data. Animation does not indicate collection time.
0405
From the company phone. To the investigation matter.
Upload the collection to the MARA portal. Once the transfer is received, your team can access the results from the same matter workspace.
Android phone-app collections can upload directly from the phone.
COLLECTION WORKSPACE
COLLECTION DATA → MARA PORTALEmployee departureReturned company phone
COMPLETED LOCAL COLLECTION
Phone collectionData + report
✓
Company-held phone
UPLOAD
YOUR MATTER WORKSPACE
MARA Portal
Investigations workspace
Employee departure✓
Completed package. Ready to upload.Uploading collection data to MARA PortalReceived in your matter
Android phone app is another path.Collect on the phone, then select upload directly to the portal.
Illustrative MARA workflow. Fictional data. Animation does not indicate collection time.
0505
Collection and report. Ready for your next step.
Download the standalone collection or Data + MARA Analyzer. Review relevant records and export the material needed for the investigation.
Keep the collection, request and acquisition report together in your MARA matter.
COLLECTION WORKSPACE
RECEIVED IN YOUR PORTALEmployee departure
Ready to download
Returned company phoneStandalone collection data
Acquisition reportCollection details and file hashes
Download standalone dataContinue in your team’s preferred tool
Data + MARA AnalyzerDownload. Open. Review the collection.
ANALYZERYour investigation review
TextsWhatsApp
Review the relevant records.
Work within the agreed collection scope.
RELEVANT RECORDS → EXPORT
RSMFCSVXLSXXMLPDF
Illustrative MARA workflow. Fictional data. Animation does not indicate collection time.
Collect texts, WhatsApp, Signal, and other supported phone data from iPhone and Android. Target specific data or perform a broader supported collection.
01 / ACCESS
Download from your portal.
Once the upload is received, open the matter and download standalone phone extraction data for compatible forensic tools. Import support depends on the format and receiving tool; MARA Targeted packages open in MARA.
Use the MARA desktop app for iPhone or Android. Android also supports collection directly in the phone app, with direct upload to your MARA portal. Follow the guided setup for your device and selected data.
MARA ENTERPRISE
Your team runs the work.
MARA powers the collection.
Manage and run collections through your own workspace, all on the MARA platform.
FORENSICS