Data Forensics Tools

UFED 4PC
Model: UFED 4PC Cellebrite's UFED 4PC is a cost-effective, flexible and convenient mobile forensic application based on PC or laptop. It performs data extraction, decoding and analysis from the widest range of mobile devices on a single platform. Special Features: • Optional Logical or Physical License
• Extraction, decoding and analysis on a single platform
• Supports the widest range of mobile devices

Description

UFED 4PC is a versatile application, leveraging existing hardware alongside other third-party software, and comes with a suite of applications, peripherals and accessories for successful investigations.

Technical Info

Tower with below main configuration:

Item Specification
Software (Logical License) UFED 4PC Software
UFED Logical Analyzer
UFED Phone Detective
UFED Reader
Software (Ultimate License) UFED 4PC Software
UFED Logical Analyzer
UFED Phone Detective
UFED Reader
Bluetooth V2.1+EDR (Backward compatible with V1.1/V1.2/V2.0)
USB ports 1 x USB 2.0 ports, 1 x Mini USB port
Serial ports RJ-45 for device connectivity
SIM card reader Integrated SIM card reader
Password Recovery Android Passcode Bypass or Decryption (Bypass)
Power USB Powered
Optional 2nd USB port connection with UFED Device Adapter PowerUP cable
Unit Dimensions (mm) 79.9 (W) x 52.2 (D) x 22.1 (H)
Kit Case Dimensions (mm) 250 (L) x 130 (W) x 290 (H)
Unit Weight 70 Gram
Kit Weight 3.65 Kg
Operating temperature 0°C - 60°C
Storage temperature: -10°C -70°C


Product Features

• All-in-one mobile forensic solution adding ­exibility and convenience to investigations
• Unrivaled support for Android, iOS, and BlackBerry® devices
• Trusted UFED technology proving users with all physical, ‑le system and logical extraction capabilities
• Custom boot loaders ensure forensically sound extractions
• Simultaneous operations; extraction, decoding and analysis can be carried out at the same time, on a single platform
• Easily integrates with the user's customized work environment
• Unique evidence verification engine enables validation of recovered artifacts
• Streamlined work ­flow
• User-friendly UI

Capabilities

Ultimate License
• Physical extraction and decoding while bypassing pattern lock / password / PIN from Android devices including HTC, Motorola, Samsung Galaxy S, SII, SIII family and more
• Physical extraction from BlackBerry devices running OS 4-7. Exclusive decoding: BBM data, apps, emails, Bluetooth and more
• Widest support for extraction and decoding from Apple devices running iOS3+
• Physical extraction and decoding from locked Nokia BB5 devices – password extraction from selected devices
• Unrivalled access to locked devices by bypassing, revealing or disabling the user lock code
• File system extraction from any device running Windows phone 7.5 and 8 including Nokia, HTC,
• Samsung, Huawei and ZTE
• The most powerful solution for physical extraction from phones with Chinese chipsets
• TomTom® trip-log decryption, and data extraction from other portable GPS devices
• Rich set of decoding: Apps data, passwords, emails, call history, SMS, contacts, calendar, media files, location information etc.
• Contains a unique, rich set of analysis features including timeline, project analytics, malware detection and watch list
• Generate and customize easy-to-read reports in a variety of formats using the UFED Physical Analyzer

Logical License
• Logical extraction of data: Apps data, passwords, IM (instant messaging), contacts, SMS & MMS, emails, calendar, pictures, audio, videos, ringtones, call logs, phone details (IMEI/ESN), ICCID and IMSI, SIM location information (TMIS, MCC,MNC,LAC)
• Forensic cloning of SIM ID to isolate the phone from network activity during analysis
• Frequent software updates to ensure compatibility with new phones as they are introduced to the market
• Contains rich set of analysis features including timeline and project analytics and watch list
• Flexible report generation and customization supporting different report formats using UFED Logical Analyzer

UFED Device Adapter

Part of the UFED 4PC Logical and Ultimate offering, is the UFED Device Adapter. It enables:
• Device Extraction via USB and RJ 45
• SIM Clone and extraction
• Extraction via embedded Bluetooth module

Applications

Physical Analyzer (for Ultimate License)

The UFED Physical Analyzer is the most powerful and technologically advanced mobile forensic application available. It exposes every segment of a device’s memory data and provides in-depth decoding, analysis and reporting methods. Features include:

• Malware Detection – On-demand searches for viruses, spyware, Trojans and other malicious payloads in fi­les
• Project Analytics – View statistics on communications and identifying relationship strengths
• Rich Set of Data – Includes calendar, call logs, contacts, SMS, MMS, chats, applications
• Advanced Search – Based either on open text or speci­fic parameters
• Timeline – Monitor events in a single chronological view
• Watch List – Ability to highlight information based on prede­fined list of values
• Image Carving – Powerful feature used to recover deleted image ­les and fragments when only remnants are available
• Conversation View – View communications between sources in date and time order
• Report Generator – Generate and customize reports in different formats e. g. PDF, HTML, XML and Excel
• SQLite Databases Viewer – Viewing, searching and exporting tables and content (including deleted data) from SQLite database fi­les
• Hex Viewer – Hexadecimal view of the extracted data enabling advanced search based on multiple parameters, regular expressions and more
• Highlighted Parsed Content in the Hex – Highlights the exact position for each decoded content entry, enabling full tractability between the analyzed data and the Hex
• Python Scripting – Using the Python shell, enhances the capabilities for content decoding
• Plugin and Chain Management – Run Python scripts via plugins; edit and create new decoding chains

Logical Analyzer (for Logical License)

The UFED Logical Analyzer is an analysis and reporting application for logical extractions, which presents extracted data in a clear and concise manner.

• Rich Set of Data – Includes calendar, call logs, contacts, SMS, MMS, chats
• Advanced Search – Based either on open text or specific parameters
• Watch List – Ability to highlight information based on predefined list of values
• Timeline – Monitor events in a single chronological view
• All Projects Field Search – Quick search within data in parallel projects
• Conversation View – View communications between sources in date and time order
• Entities Bookmarks – Quick reference pointer can be set to analyzed data and a data file item
• Report Generator – Generate and customize reports in different formats e. g. PDF, HTML, XML and Excel
• Multilingual User Interface

UFED Phone Detective

The UFED Phone Detective application comes with the UFED Touch kit, helping investigators identify a mobile phone at the start of an investigation. This eliminates the need to open the phone, risking phone lock. To identify a phone, users answer questions about the phone's attributes. UFED Phone Detective provides details on extraction capabilities, connectivity, device characteristics and more.

UFED Reader

UFED Reader allows authorized personnel to share examination results with others, regardless of whether they own UFED software. Simply forward the application and the extraction report to users for viewing and searching within the extracted data.

Back