tag:blogger.com,1999:blog-1746946614390371171.post6809228032805819354..comments2011-05-31T06:42:30.935-07:00Lance Muellerhttp://www.blogger.com/profile/15789264000499223230noreply@blogger.comBlogger48125tag:blogger.com,1999:blog-1746946614390371171.post-27958254184117459372011-05-31T01:57:39.408-07:002011-05-31T01:57:39.408-07:00This comment has been removed by a blog administrator.Amit Sarkarhttp://www.blogger.com/profile/05645021946923784435noreply@blogger.comtag:blogger.com,1999:blog-1746946614390371171.post-30419656280601367542011-01-19T13:26:27.470-08:002011-01-19T13:26:27.470-08:00Lance,<br /><br />You said you would like the CelleBrite better if it was truly portable for field work. The &quot;ruggedized&quot; version I have is powered by an AC cord, a 12-volt cigarette lighter cord or its internal LI-PO Rechargeable Battery. Truly Portable. I can put it in the case (with the cables) and take it anywhere, whether that is in my office, my car, or out in a field miles from anything else.<br /><br />Support@SCCTF.ORGAnonymousnoreply@blogger.comtag:blogger.com,1999:blog-1746946614390371171.post-1757909361355425922011-01-08T16:13:01.142-08:002011-01-08T16:13:01.142-08:00With regards to cell phone forensics, when you say lack of standardization, I am assuming you also are talking about the different types of chips and security protocols used by the different providers? Or at least I am assuming that would also make a difference.<br /><br />However, in terms of computer as well as cell phone forensics you still have to deal with particular information providers. I initially assumed the computer would be easier since you can analyze the transfer of data via the Internet; however, those logs are stored on your ISP&#39;s machines (I am assuming).Computer Repairhttp://computerrepair-directory.blogspot.com/noreply@blogger.comtag:blogger.com,1999:blog-1746946614390371171.post-32756043064812884972010-12-03T07:10:30.638-08:002010-12-03T07:10:30.638-08:00Oxygen Forensic Suite 2010 is the best option to extract more data from the phone.<br /><br />http://www.cybersecurityspecialist.com/software.htmlAnonymousnoreply@blogger.comtag:blogger.com,1999:blog-1746946614390371171.post-29521495883886423692010-10-12T07:48:43.666-07:002010-10-12T07:48:43.666-07:00Cellebrite is a Japan owned company headquartered in Tel Aviv.<br />I found BK Forensics with HQ in PA has great &quot;deleted data recovery&quot; and has even trained LEOs around the globe.<br />Gr8 prices for LEO too with lifetime support!Anonymousnoreply@blogger.comtag:blogger.com,1999:blog-1746946614390371171.post-24548378994130448132010-07-27T18:15:55.229-07:002010-07-27T18:15:55.229-07:00good post. Very valuable!computer repair mississaugahttp://www.nucomputing.comnoreply@blogger.comtag:blogger.com,1999:blog-1746946614390371171.post-62631466474965998482010-07-27T18:15:08.685-07:002010-07-27T18:15:08.685-07:00a+ post!affordable web hostinghttp://www.affordablewebhosting.comnoreply@blogger.comtag:blogger.com,1999:blog-1746946614390371171.post-62969403811760022010-07-27T18:14:24.742-07:002010-07-27T18:14:24.742-07:00great post, extremely useful! thanks.Toronto computer repairhttp://www.nucomputing.comnoreply@blogger.comtag:blogger.com,1999:blog-1746946614390371171.post-42764698730548930912010-06-28T04:40:20.810-07:002010-06-28T04:40:20.810-07:00I really would like to thank you.Aşk Büyüsühttp://www.askbuyusu.orgnoreply@blogger.comtag:blogger.com,1999:blog-1746946614390371171.post-71776125005952862472010-02-21T15:09:55.288-08:002010-02-21T15:09:55.288-08:00Well, I have been reading your blog posts daily and the reason I come on your blog frequently is its compelling content… Regards… http://www.pctechoutlet.comCheap Computershttp://www.pctechoutlet.comnoreply@blogger.comtag:blogger.com,1999:blog-1746946614390371171.post-30109913758369782552009-08-31T23:49:29.449-07:002009-08-31T23:49:29.449-07:00I really would like to thank you.computer service torontohttp://www.a2zpc.canoreply@blogger.comtag:blogger.com,1999:blog-1746946614390371171.post-72723003204435951312009-07-03T03:42:38.654-07:002009-07-03T03:42:38.654-07:00Thanks for sharing this info post.Computer Helphttp://www.support1000.comnoreply@blogger.comtag:blogger.com,1999:blog-1746946614390371171.post-52799366298177086332009-05-10T13:40:00.000-07:002009-05-10T13:40:00.000-07:00After doing cell/mobile forensics for over 10 years I think it is important that everyone realize there is no single tool for any job. That is training is key. Many people will use a tool and because it requires some time to get it to talk to the phone dismiss it as a faulty tool. I know I had that perception with a couple of these tools when I started. Most of my errors I had were mine because I did something wrong, not because of the tool. I know that no one likes to admit it, but we as users are a lot of the problem. I am doing my Paraben PCME right now and after attending all their training as well as some of the other training classes out there I have to give them credit they are the company committed to doing cell forensics. Their tool was designed for investigators, and although the drivers are a pain to load they follow the best forensic principles and I have not had any problems with their support, actually the opposite, they bent over backwards to help me. I have my favorite secondary tools such as BitPim and Mobiledit!, but I think it is time someone at least say what the real problem is, and that is we are all overwhelmed with our workload and if it doesn’t work perfect on click one we give up.Anonymousnoreply@blogger.comtag:blogger.com,1999:blog-1746946614390371171.post-59725211911169564972009-05-06T12:50:00.000-07:002009-05-06T12:50:00.000-07:00Hello.<br />My name is Tudor, and I'm running a small Internet based business (selling a hybrid software - web service product, for automatic backup of mobile phones data). I'm located in Romania (www.f-spy.ro).<br />My costumers are interested in data recovery from sim-cards, like deleted sms. I was trying a solution provided by Data Doctor Recovery (software). Its not working at all. I can not read any deleted sms.<br />Now, because you are a real specialist in data recovery, I want to ask you about another products:<br />-BrickHouse Security ( http://www.brickhousesecurity.com/cellphone-spy-simcardreader.html )- Cell Phone Spy.<br />-Paraben's SIM card Seizure (software product).<br />I remind you that I am interested especially in recovery of deleted sms.<br />So, can you let me know please, if this solutions and products are working? I really trust your expertise and experience in the field of data recovery.<br />Thanks a lot for helping me.<br />Regards,<br />Tudor.<br />PS: excuse my grammar, unfortunately english is not my first language.Anonymousnoreply@blogger.comtag:blogger.com,1999:blog-1746946614390371171.post-25601333804912088842009-04-22T02:36:00.000-07:002009-04-22T02:36:00.000-07:00Micro Systemations XRY and XACT units are more or less standard in Europe and have just opened their office in the States. Go to www.msab.com and contact them for a run through of the products. They now have a CDMA system at the R&amp;D in Sweden so more US phones will be added. Highly recommended!Anonymousnoreply@blogger.comtag:blogger.com,1999:blog-1746946614390371171.post-26003055888061973072009-04-21T10:00:00.000-07:002009-04-21T10:00:00.000-07:00XRY now does CDMA handsets by the way. Version 4.1 is availableAnonymousnoreply@blogger.comtag:blogger.com,1999:blog-1746946614390371171.post-11390296110557828112009-04-12T10:31:00.000-07:002009-04-12T10:31:00.000-07:00&quot;The quote states that the license expired. Does this mean that, although the item is not locked, the license is no good -- so using it is a violation of the license agreement? If not, then the above should be reworded to state that the support period has expired rather than the license has expired.&quot;<BR/><BR/>You are correct it does mean that the &#39;Support Period&#39; has expired rather than the licence. You are free to continue using the equipment after this point. The manufacturers of XRY &amp; XACT are Swedish and sometimes the fine subtleties of english can be confusing as a second language.<BR/><BR/>By the way XRY &amp; XACT are now at version 4.0 with considerable more handset support and features.Anonymousnoreply@blogger.comtag:blogger.com,1999:blog-1746946614390371171.post-68031524407075405352009-04-10T16:32:00.000-07:002009-04-10T16:32:00.000-07:00A poster above said: <BR/><BR/>"From versions .XRY 3.8 and XACT 1.2 we change the license model; the license is still for a 12 month period and includes software maintenance and updates, new cables and support. However - from now on the software will not stop function after the license period has expired. N.B. You will, without valid license, neither have access to software maintenance, new cables nor support, i.e. new phone models are not supported."<BR/><BR/>The quote states that the license expired. Does this mean that, although the item is not locked, the license is no good -- so using it is a violation of the license agreement? If not, then the above should be reworded to state that the support period has expired rather than the license has expired.Anonymousnoreply@blogger.comtag:blogger.com,1999:blog-1746946614390371171.post-77957344158647628582009-03-24T08:40:00.000-07:002009-03-24T08:40:00.000-07:00The best tool for extracting and analysing physical images from handsets is M-Filter from FTS. <BR/>As for logical exams, we still opt for XRY and have cellebrite as backup for handsets XRY cant do. <BR/>I think someone said it further up, but there is no one tool to do it all at the moment..Anonymousnoreply@blogger.comtag:blogger.com,1999:blog-1746946614390371171.post-8436900195046503852009-03-24T08:13:00.000-07:002009-03-24T08:13:00.000-07:00Great article. I think Paraben was too easily dismissed. I had a lot of the same perceptions until I went to their training. I now use Paraben as my primary tool simply because it often gets full memory dumps. They also now allow data exports so I can back up my cases in a non-proprietary format. <BR/><BR/>I never experienced the "bad" support others have talked about but they must have improved a lot because I've received great support over the last year. I do have some of the other tools mentioned but only use them as a backup and am usually disappointed at only getting logical data.Anonymousnoreply@blogger.comtag:blogger.com,1999:blog-1746946614390371171.post-76703475664868505252009-02-22T11:31:00.000-08:002009-02-22T11:31:00.000-08:00Hi,<BR/>You should also include a review on IntaForensics ART for manual phone analysis. Automates the process of manual reporting on mobile phones and best of all it's free I think?.Anonymousnoreply@blogger.comtag:blogger.com,1999:blog-1746946614390371171.post-54318015129308826102009-02-18T15:03:00.000-08:002009-02-18T15:03:00.000-08:00Great review and includes all my favourites.<BR/><BR/>You could also add PMExplorer from Paul Sanderson. It only supports Nokia PM files but it gives a great low level look at the raw bits qnd bytes allowing you to validate your report and it is a great learning/teaching tool.Anonymousnoreply@blogger.comtag:blogger.com,1999:blog-1746946614390371171.post-64510726400230446462009-02-06T09:40:00.000-08:002009-02-06T09:40:00.000-08:00Lance, great review and commendable piece of work - well needed . FYI - there is a version of Cellebrite that comes with an internal battery so it is completely usable in the field<BR/><BR/>thanks againAnonymousnoreply@blogger.comtag:blogger.com,1999:blog-1746946614390371171.post-47089872484177535782009-01-26T10:04:00.000-08:002009-01-26T10:04:00.000-08:00hi just following the posts and i have a question if anyone knows the answer please explain it to me have you ever heard of the technology known as the roving bug supposedly software can be downloaded unto the phone activating it as a bug to pick up sound in the phones vicinity all this is done without even touching the phone.Anonymousnoreply@blogger.comtag:blogger.com,1999:blog-1746946614390371171.post-27198877779880301302009-01-13T09:05:00.000-08:002009-01-13T09:05:00.000-08:00Regarding:<BR/><BR/>Items we do not use;<BR/>XRY – I have heard some good things about this product however we have chosen not to use it for the following reasons;<BR/>-Cost of device and updates (we can only afford so many)<BR/>-About a year ago (when we were considering buying XRY) the company refused to supply me with a list of phones that their device would support stating that their competitors would use the list against them<BR/><BR/>You can see all the updates on there website, http://www.msab.com/en/About-Micro-Systemation/News2/XRY-SW-39-released/ <BR/><BR/>-Unless they have changed, if a users yearly license lapses, the device becomes locked and unusable<BR/><BR/>From versions .XRY 3.8 and XACT 1.2 we change the license model; the license is still for a 12 month period and includes software maintenance and updates, new cables and support. However - from now on the software will not stop function after the license period has expired. N.B. You will, without valid license, neither have access to software maintenance, new cables nor support, i.e. new phone models are not supported.Anonymousnoreply@blogger.com