Data Forensics Tools

UFED Touch Ultimate
Model: Cellebrite UFED Touch Ultimate Cellebrite's UFED Touch Ultimate is a high performance mobile forensic solution. It enables physical, logical and file system extraction of all data and passwords (including deleted) from the widest range of mobile phones, GPS devices and tablets. Special Features: • Forensically sound physical and file system extraction
• Strong support for mobile models including Chinese phones
• Obtain existing and deleted data

Description

The UFED Touch Ultimate is a mission-ready solution for investigations in the ­field or lab with an intuitive user interface and an easy-to-use touch screen.

Technical Info

Tower with below main configuration:

Item Specification (Standard) Specification (Ruggedized)
Display 7” WVGA (800x480) TFT Touch LCD, 280 NITS LED Backlight, 400:1 Contrast Ratio
Operation system Microsoft Window XP embedded
Processor Intel ATOM Z510 1.1GHz
Chipset Intel Poulsbo US15W Premium chipset
System memory 1GB DDR2 (1Gb x 8), 333MHz (667 DDR2 Data Rate) 1GB DDR2, 333MHz (667 DDR2 Data Rate)
Storage PSSD MLC NAND Flash: 64GB capacity
USB ports 4 x USB 2.0 ports, 1 x Mini USB port
Serial ports RJ-45 for device and storage connectivity
SIM card reader Integrated SIM card reader
SD card reader Available SD card reader
Microphone & Speaker Intel High Definition Audio, integrated microphone and speakers
Audio output 1x Headphone Jack
Video Output 1x VGA Port
Bluetooth Wi2Wi - W2CBW003 (Integrated WLAN-B.T SiP), Bluetooth Specification V2.0 + EDR
Wi-Fi Wi2Wi - W2CBW003 (Integrated WLAN-B.T SiP), 802.11 b/g (up to 54 Mpbs data rate)
LAN 1 x 10/100/1000 Ethernet, PCIe MAC/PHY, Intel p/n WG82574L
Power supply Input: AC 100-240V, 50/60Hz.
Output: DC 12V, 4.16A (50W max)
Battery Type Lithium Polymer, 7.4V, 3850mAh.
Battery Discharge time While being used: 5 ± 1 hr.
Battery Recharge time ~3 hours
Unit dimensions (mm) 237 (W) x 127 (D) x 39 (H)
Kit Case Dimension (mm) 440 (L) x 335 (W) x 160 (H) 487(L) x 386 (W) x 185 (H))
Unit Weight 1 Kg
Kit Weight 6.5 Kg 10 Kg
Operating temperature 0°C to 40°C
Storage temperature 0°C to 40°C


Product Features

• Physical extraction from BlackBerry® devices running OS 4-7.
• Exclusive decoding: BBM data, apps, emails, Bluetooth, etc.
• Widest support for Apple devices running iOS3+
• Physical extraction and decoding while bypassing pattern lock / password / PIN from Android devices including HTC, Motorola, Samsung Galaxy SIII family and more
• Physical extraction from Nokia BB5 devices – password extraction from selected devices
• File system extraction from any device running Windows phone 7.5 and 8 including Nokia, HTC, Samsung, Huawei and ZTE
• The most powerful solution for phones with Chinese chipsets
• TomTom® trip-log decryption, and data extraction from other portable GPS devices
• Obtain existing and deleted data: apps, passwords, emails, call history, SMS, contacts, calendar, media ­les, geotags, location information, GPS fi­xes etc.
• Proprietary technology and boot loaders ensure forensically sound extractions
• Frequent updates to ensure compatibility with new phones as they enter the market

Applications

UFED Physical Analyzer

The UFED Physical Analyzer is the most powerful and technologically advanced mobile forensic application available. It exposes every segment of a device’s memory data and provides in-depth decoding, analysis and reporting methods.
Features include:

• Malware Detection – On-demand searches for viruses, spyware, Trojans and other malicious payloads in fi­les
• Project Analytics – View statistics on communications and identifying relationship strengths
• Rich Set of Data – Includes calendar, call logs, contacts, SMS, MMS, chats, applications
• Advanced Search – Based either on open text or speci­fic parameters
• Timeline – Monitor events in a single chronological view
• Watch List – Ability to highlight information based on prede­fined list of values
• Image Carving – Powerful feature used to recover deleted image ­les and fragments when only remnants are available
• Conversation View – View communications between sources in date and time order
• Report Generator – Generate and customize reports in different formats e. g. PDF, HTML, XML and Excel
• SQLite Databases Viewer – Viewing, searching and exporting tables and content (including deleted data) from SQLite database fi­les
• Hex Viewer – Hexadecimal view of the extracted data enabling advanced search based on multiple parameters, regular expressions and more
• Highlighted Parsed Content in the Hex – Highlights the exact position for each decoded content entry, enabling full tractability between the analyzed data and the Hex
• Python Scripting – Using the Python shell, enhances the capabilities for content decoding
• Plugin and Chain Management – Run Python scripts via plugins; edit and create new decoding chains

UFED Phone Detective

The UFED Phone Detective application comes with the UFED Touch kit, helping investigators identify a mobile phone at the start of an investigation. This eliminates the need to open the phone, risking phone lock. To identify a phone, users answer questions about the phone's attributes. UFED Phone Detective provides details on extraction capabilities, connectivity, device characteristics and more.

UFED Reader

UFED Reader allows authorized personnel to share examination results with others, regardless of whether they own UFED software. Simply forward the application and the extraction report to users for viewing and searching within the extracted data.



UFED CHINEX

Available as an add-on to the UFED Touch Ultimate is UFED CHINEX, the premium, fi­eld-ready solution for the extraction of evidentiary data from phones manufactured with Chinese chipsets. The kit contains:

• Enhanced phone adapter
• Adapter cables
• A large selection of individual connectors
• USB cable
• Quick user guide

All-inclusive Kit

Available in standard or ruggedized versions

 The all-inclusive standard and ruggedized mobile forensic kit contains a full range of peripherals and accessories for successful investigations in the field or lab. Complete with lightweight phone connector tips, an embedded work shelf in the ruggedized case, integrated long-life battery and external hard drive makes mobile investigations quicker, easier and more efficient.

Back