Comments on Computer Forensics, Malware Analysis & Digital Investigations: How do you extract information from 45+ cellphones...

Hi - I am looking to buy this kit who else in the ...

2011-09-06T01:51:52.439-07:00

Hi - I am looking to buy this kit who else in the UK apart from www.mcmsolutions.co.uk sell it?

My experience with Cellebrite is that is would be ...

2010-07-22T17:45:27.150-07:00

My experience with Cellebrite is that is would be hit or miss on actually extracting data on those 45 phones. They say they support alot of phones, even the device says it does. Then you get nothing. Physical Pro was very disappointing. $8000 is huge waste of $$$$.

UFED supports more phones in every technology (CDM...

2010-06-21T12:01:26.697-07:00

UFED supports more phones in every technology (CDMA, GSM, SAT Phones, GPS, etc) than any competitor. Updates are monthly to support new phones. Training on the UFED is quick and easy for our tactical units. UFED supports more phones that the bad guys are using in Iraq and Afghanistan. Would not trade our's for a competitors.

As a user of both XACT and uFED PE I found that qu...

2010-04-23T05:03:48.919-07:00

As a user of both XACT and uFED PE I found that quite often the application for each will parse the data differently and you end up with two differnt results, hence you then have to bit the bullet and start doing manual conversations.

As a daily user of the UFED PE (physical extractio...

2010-03-29T07:27:42.692-07:00

As a daily user of the UFED PE (physical extraction) I can say you that you can also perform manual data carving inside the physical dump which is from my point of view a very powerful feature of the UFED. The only drawback is that the mobile phone makers do not use the same encoding and this makes the analysis harder ... by the way the UFED does very quickly the data acquisition and allow you to preview the data or launch analysis process very soon in the investigation ... I can take in example one of my last cases, I found 80% of the data with a "deleted" status -> these data would not have been found whitout the physical analysis.
I never used XACT the physical version of XRY so I will not compare it to UFED but I can say that UFED PE does the work greatly so I do not need XACT.

Geeko

The RJ-45 connectors on the UFED should be turned ...

2010-03-17T05:58:55.769-07:00

The RJ-45 connectors on the UFED should be turned 180 degres, difficult to disconnect the cables. The Report Manager application is not that as .XRY's. But yes UFED is sometimes much better then .XRY.

/Rob Ciecierski

Another great tool which may trump Cellebrite is t...

2010-03-14T23:59:49.296-07:00

Another great tool which may trump Cellebrite is the Aceso. Very user friendly for the lay person, touch screen and extremely comprehensive in what it does. See more at

http://www.radio-tactics.com/products/aceso/

As a Certified User of Cellebrite it is also worth...

2010-03-14T05:04:05.801-07:00

As a Certified User of Cellebrite it is also worthwhile mentioning its also capable of performing phystical and file system acquisition of data which is then parsed using software installed on a PC. This costs more but is useful as it allows for immediate reading of security code, previous ICCID and a bunch of other used artifacts. With the portable battery pack, you can perform on the fly examinations either in the lab or whilst standing on the side of road with an offender. Like any tool, it has its limitations and minor issues, but as Lance stated its good for handling bulk exhibits and produces a machine generated HTML based plain text non logo branded report ready for immediate introduction into evidentiary reports.

XML => XLENT

2010-03-12T07:21:09.017-08:00

XML => XLENT

first it was created only to transfer data. I did ...

2010-03-11T18:45:48.217-08:00

first it was created only to transfer data. I did not like him very much when I had on hand, as n guarantee the accuracy of the extraction

All of the Cellebrite devices extract the data ont...

2010-03-11T06:31:46.348-08:00

All of the Cellebrite devices extract the data onto a USB device and into an HTML report. In addition, the newest version of of the firmware creates an XML file with all the extracted data.

So... what does the data look like after extractio...

2010-03-11T06:24:40.066-08:00

So... what does the data look like after extraction? Text files?

Great Post and very accurate! The Cellebrite UFE...

2010-03-10T11:38:44.689-08:00

Great Post and very accurate!

The Cellebrite UFED is my first choice in Mobile forensics...Fast,easy to use, top phone support industry wide and it just works !!