Android Forensics

Cellebrite is the first and only company in the mobile forensic industry to develop its unique solution for Android devices.

Exclusive:

• Cellebrite's physical extraction method from more than 200 locked Android based devices bypassing any type of lock (Pattern/PIN/Password) and uses Cellebrite's proprietary boot loaders – enabling a forensically sound extraction process. Physical extraction from these devices can be done, regardless of their OS version, and does not require temporary rooting
• UFED can disable pattern/PIN/password locks on selected Samsung Android devices
• Physical extraction and advanced decoding, via USB debugging, for ALL Android OS versions including Android 4.X (Ice Cream Sandwich). Physical extraction for any locked device is only available if the USB debugging has been switched on

Apps Data Support:

Acquire apps data from Android devices via logical extraction using UFED:
Facebook, Facebook Messenger, Google+, PingChat! (aka Touch), Skype, Twitter, Viber, Yahoo Messenger, Whatsapp, TigerText, Dropbox, QIP, Kik Messenger, Evernote, Kakao Talk, ICQ, Vkontakte and more

Device Support Includes:

• HTC – HTC Evo, Incredible, Desire
• Motorola – Milestone, Milestone 2, Droid, Droid 2, Droid X, Droid Razr Razr Maxx, Defy and more
• Samsung – Galaxy SIII Family, Galaxy SII, Galaxy Note, Galaxy Note II and more
• ZTE – San Francisco, San Francisco II, V9 Optus, P729J and more
• LG – Optimus, Optimus one, Optimus 3D, Optimus black and more

Enhanced Decoding Capabilities for Android Devices Include:

 

Decoding of data: Call logs Contacts Email Pattern lock revealing from a full flash image Bookmarks Cookies SMS/MMS Chat Locations Web history Images Videos & audio files Text files Deleted data Wi-Fi Bluetooth Geotag information

Decoding of smartphone applications: Kik Kakaotalk QIP Evernote New Viber ICQ Mail.ru VKontakte Decoding of application files: Executable files (*.exe) JAR files (Java ARchive) The Android application package file (APK) and more