UFED innovation timeline
Cellebrite UFED consistently brings critical mobile forensic capabilities first to the lab and field, and many of these capabilities remain unmatched for months or years. Many remain unmatched today.
MTK live: An extended support to encompass MTK based VIVO devices.
ONLY BY CELLEBRITE
Insights from Installed Apps in the extraction flow – The capability is designed to help examiners make insightful decisions around where to focus their extraction efforts upfront, to optimize their examination process downstream.
ONLY BY CELLEBRITE
Examination of both mobile and cloud data – For a seamless and simplified review process, users of Cellebrite Physical Analyzer can for the first-time, review device and cloud data through a single tool and with a unified experience.
Actionable Intelligence as a catalyst for evidence recovery – A more intuitive design, with improved navigation, graphical time bar, visuals and tools to optimize the use of UFED Physical Analyzer, helping you save valuable time, and get the job done accurately.
Wellbeing for Android – The application tracks the user mobile activity and therefore contains forensic information about the user use of the phone data, application and other device events. This is the Android equivalent of iOS Screen Time. Decoded data includes: Installed apps, application usage, device events and users accounts.
ONLY FROM CELLEBRITE
Post and social activity for Facebook warrant returns, Facebook, Tik Tok and other social apps – This version of UFED Physical Analyzer, decodes and various social media activities from Facebook app such as chats, wall posts comments, group events, likes, tags, shares and more. This information is available under the Social Media model under Analyzed data.
Improved selective extraction in Android Advanced Logical – More data types that can be selected in Advanced Logical, save you time and get you only relevant data. The new data types include Locations, Archives, & Documents
Perform full file-system extraction on File-based Samsung Exynos devices – Cellebrite introduces a first-to-market solution to perform a full file-system extraction on the file-based encrypted, Samsung Exynos S10 and A10-A50 devices. Support for more than 12 new device models running the latest version of the operating system. This includes extractions from flagship device models such as Samsung Galaxy S10, S10+ and S10e and many others.
ONLY FROM CELLEBRITE
Extract 3rd Party Applications with Samsung Advanced Logical – Use a new generic capability to extract data from 3rd party applications such as WhatsApp, Telegram and Facebook, as part of the Advanced Logical extraction flow. With this new capability, you can decrypt and extract the contents of the 3rd party Apps together with the logical process. The new capability works on Samsung devices running Android versions 8-9 with both Qualcomm and Exynos chipsets.
Perform Full File System and Selective File System Extractions on Smartphones with Huawei KIRIN Processor – This new capability in UFED and UFED InField 7.30 allows users to perform a full file system and selective extraction on smartphones with the Huawei HiSilicon KIRIN 970 processor and other popular devices with the KIRIN 659, 960 and 980 chipsets.
ONLY FROM CELLEBRITE
Perform Physical, Full File System and Selective File System Extractions on Smartphones with Samsung Qualcomm Processor – Bypass the screen lock to perform either a physical, full file system or selective file system extraction on popular Samsung models with the Qualcomm processor (SOC). Among the popular devices supported with these extraction methods are the Samsung J4+, Samsung J6 and Samsung J8 models. The supported devices must be running Android versions 6 up to version 9, and the device can include one of the following chipsets; 8917, 8937, 8940, 8953, 8976 and SDM450.
ONLY FROM CELLEBRITE
Document Your Actions and Incorporate Investigative Notes – As part of the digital data extraction and collection process, users can now add notes, include observations or report any issues encountered during the process. This capability is an effective way to maintain an audit trail documenting actions and decisions taken along the way. A document with all the investigative notes will be automatically generated and will include relevant metadata such as application state, case details and time stamps.
ONLY FROM CELLEBRITE
New Dashboard Widget Shows Application Insights – This version of UFED Physical Analyzer introduces a new dashboard widget named “Insights from Installed Applications.” The purpose of the widget is to help examiners make insightful decisions around where to focus their examination efforts upfront, so save valuable examination time downstream. The content of the dashboard widget lists a high-level overview of the applications installed on the extracted device, under their respective category. The dynamic nature of the widget ensures that only the categories with the highest number of installed applications appear on the dashboard.
ONLY FROM CELLEBRITE
Surface data from unsupported apps using AppGenie – AppGenie is a new and innovative research tool engine that surfaces data from 3rd party apps based on sophisticated heuristics. The AppGenie can perform automatic analysis of any application database, and decode chats, contacts, user accounts and location artifacts without any prior knowledge of the application. The AppGenie provides users of UFED Physical Analyzer with invaluable leads to evidence that was previously buried deep within the data, quickly making it legible, searchable and easy to incorporate into forensic reports.
ONLY FROM CELLEBRITE
Support for the InteractionC database in iOS – The InteractionC database (interactionC.db) on iOS stores important metadata generated from user interactions on the device. Such data includes call logs, SMS, chat messages and emails Potential evidence deleted by the user may also leave traces in the interaction. The decoded data will be shown under the log entry model.
ONLY FROM CELLEBRITE
Unify the current Open Case flows under one tab – All open case options have now been unified under one tab. Users looking to open a new case from a UFED or Graykey extraction, load a warrant return or perform advanced open, can get to the various selections from one tab called Open Case. This is part of an ongoing effort to improve usability and streamline user workflow.
Updated Project VIC2.0 support – UFED Physical Analyzer now supports import and export of VICS 2.0 JSON data. Export in VIC/CAID format allows users to contribute back to the law enforcement community by sharing manually tagged suspicious media files. You can now include additional data into the exported file such as contact information and metadata.
Based on checkm8, examiners can now take advantage of a first-to-market solution with UFED 7.28. This update allows you to quickly perform a forensically sound temporary jailbreak, and full file system extraction within one streamlined workflow.
ONLY FROM CELLEBRITE
Decoding support for devices running KaiOS
Optimized data review made possible with the NEW feature-rich, Database Viewer
