UFED Physical Pro

Universal Forensics Extraction Device with Advanced Mobile Phone Deleted Data Recovery Software

Overview

The UFED Physical Pro is a powerful SW module which upgrades the UFED System (Universal Forensic Extraction Device) with physical extraction and analysis capabilities. UFED Physical Pro applies CelleBrite’s next generation extraction methods and analysis techniques to deliver invaluable deleted and hidden information, not accessible by logical extraction methods.

Utilizing the CelleBrite UFED’s simple and field-proven user interface, a complete high-speed hex dump of the phone memory is acquired without the need of cumbersome PC drivers. The flash memory of the phone is imaged as a binary file, which is decoded with the Physical Pro software tool. Critical data such as user lock codes, and deleted information such as text messages, call history, pictures, and video are sorted and retrieved by CelleBrite’s Physical Pro engine. The UFED Physical Pro also includes robust search tools for manual hex dump analysis, as well as an expert mode which allows advanced capabilities for researchers. Extracted data is presented in clear, concise reports which can be used for intelligence gathering, investigative research, and legal evidence in court.

Deep Access to Phone Memory

 UFED Physical Pro provides access to data inaccessible by logical methods:

• Phone user lock code
• Deleted data (ex: deleted call history, text messages, images, phonebook entries and videos)
• Access to internal application data
• Phone internal data (ex. IMSI history, past SIM cards used, past user lock code history)

Intelligent Software for Deeper Investigation

The memory dump from each phone is a complex data structure. But the UFED Physical Pro software tool makes navigating this data easy. Leveraging CelleBrite’s comprehensive knowledge base of each phone’s unique memory structure, the UFED PA application focuses the user’s attention on the most critical portions of phone memory first.

Features Include:

• Built-in knowledge-base of each phone’s memory structure for automated retrieval of relevant data
• Hierarchical “tree” view for efficient navigation
• Advanced search capabilities both to novice and expert users
• Customizable parsing, and search functions

The UFED Product Family

UFED Physical Pro is a software upgrade, extending the capabilities of both the Standard and Ruggedized versions of the UFED System. The product includes a firmware component on the UFED device that enables the memory dump, and PC software that analyzes the hex dump files.

Comprehensive Handset Support