UFED TOUCH2, UFED TOUCH, UFED 4PC, UFED INFIELD, UFED PHYSICAL ANALYZER, UFED LOGICAL ANALYZER, UFED READER RELEASE NOTES Version 6.1 | March 2017 NOW SUPPORTING DEVICE PROFILES 3,544 APP VERSIONS 21,773 HIGHLIGHTS DEVICE SUPPORT ◼ The fastest physical extraction (Advanced ADB) method in the industry for thousands of Android devices. ━ You can now perform physical extractions directly from the mobile device to any USB storage device (USB 3.0 recommended) or to an SD Card for any device with an SD card slot. ━ Generally, this capability works on devices with a security patch level up to November 2016. Due to the widely fragmented variety of Android devices, exceptions may apply. ━ Unmatched data extraction speed and simplicity. ━ To perform this extraction using an external USB storage device, you will need cables OTG 501 and 508. To register for the new extraction cables, as well as future ones, please click here. ◼ Physical decoding support is now available for the 4 Alcatel devices running Spreadtrum chipset (SC6531) that was introduced in UFED 6.0 – Alcatel 1016G One Touch, 1016D One Touch, 3022G One Touch and 2040D One Touch. Supported data types: SMS, call logs, contacts and calendar. APPS SUPPORT ◼ 209 updated application versions. FUNCTIONALITY ◼ UFED’s new look ◼ Discover our Advanced Investigative Services WATCH ADVANCED ADB IN ACTION! Watch video now! https://player.vimeo.com/video/207027555 Dramatically reduce your time to evidence with next generation physical extraction technology, Advanced ADB, for selected and the newest, Android devices. This ground-breaking capability allows Cellebrite customers to perform decrypted physical extraction, via a unique temporary rooting method, which in many cases was not possible, until today! This version supports 113 tested and approved Android devices. However, this capability should be supported on many other devices. If a specific device is not supported, we recommend that you use a similar model or any generic Android profile. NEW PHYSICAL EXTRACTION METHOD FOR THOUSANDS OF ANDROID DEVICES! Device with SD Card Device without SD Card Device with Micro-USB Connector Can be extracted using SD Card or using cable 501 Can be extracted using cable 501 Device with Type-C Connector Can be extracted using SD Card or using cable 508 Can be extracted using cable 508
Embed
RELEASE NOTES UFED INFIELD, UFED PHYSICAL … · Thanks in advance for your time and effort. ... QQ Browser 7.2.1 Runtastic 7.1.1 ... UC Browser 11.2.0.915 VIPole 1.8.0
This document is posted to help you gain knowledge. Please leave a comment to let me know what you think about it! Share it to your friends and learn new things together.
◼ The fastest physical extraction (Advanced ADB) methodin the industry for thousands of Android devices. ━ You can now perform physical extractions directlyfrom the mobile device to any USB storage device (USB 3.0 recommended) or to an SD Card for any device with an SD card slot.
━ Generally, this capability works on devices with asecurity patch level up to November 2016. Due to the widely fragmented variety of Android devices, exceptions may apply.
━ Unmatched data extraction speed and simplicity. ━ To perform this extraction using an external USBstorage device, you will need cables OTG 501 and 508. To register for the new extraction cables, as well as future ones, please click here.
◼ Physical decoding support is now available for the 4 Alcatel devices running Spreadtrum chipset (SC6531) that was introduced in UFED 6.0 – Alcatel 1016G One Touch, 1016D One Touch, 3022G One Touch and 2040D One Touch. Supported data types: SMS, call logs, contacts and calendar.
APPS SUPPORT
◼ 209 updated application versions.
FUNCTIONALITY
◼ UFED’s new look ◼ Discover our Advanced Investigative Services
WATCH ADVANCED ADB IN ACTION!
Watch video now! https://player.vimeo.com/video/207027555
Dramatically reduce your time to evidence with next generation physical extraction technology,
Advanced ADB, for selected and the newest, Android devices.
This ground-breaking capability allows Cellebrite customers to perform decrypted physical extraction,
via a unique temporary rooting method, which in many cases was not possible, until today!
This version supports 113 tested and approved Android devices. However, this capability should be
supported on many other devices. If a specific device is not supported, we recommend that you use a
similar model or any generic Android profile.
NEW PHYSICAL EXTRACTION METHOD FOR THOUSANDS OF ANDROID DEVICES!
Cellebrite Release Notes | UFED v 6.1 | March 2017 | 2
UFED’S NEW LOOK
We have launched a new and user friendly interface for UFED Touch2, UFED Touch and UFED 4PC.
We have redesigned the user interface by exposing all the functions in a clearer and intuitive way, with a more modern look and feel for a greater user experience.
The new interface has given the UFED platforms a much more appealing and sleeker look, making each function easily accessible and intuitive.
But that’s not all. We also refreshed the brand with new iconography that we’re excited to share with you!
DISCOVER OUR ADVANCED INVESTIGATIVE SERVICES
Working on an important case and stuck at a certain point with a mobile device? UFED 6.1 provides you with a solution and will notify you if advanced forensic capabilities via our CAIS service are available for a growing range of supported Android and iOS devices.
CAIS’s world-unique capabilities include device unlocking (passcode revealing), lock-bypassing physical and file system extractions, successfully overcoming the latest encryption challenges, and much more.
CAIS complements your existing mobile forensic skillsets and Cellebrite’s UFED Series by extending evidence access to mobile devices; accelerating your toughest investigations!
To learn more about CAIS, please visit: www.cellebrite.com/Pages/services or go.cellebrite.com/cais_unlock
ADVANCED LOGICAL FOR APPLE DEVICE DEVICES (10.2 AND ABOVE)
Advanced logical extraction for Apple devices running iOS 10.2 and above is now supported. Supported data types: Locations, file system and data files.
FUNCTIONALITY
HOW DO I RECEIVE CABLES 501 & 508?
The new Advanced ADB physical extraction method requires dedicated cables:
◼ Cable No. 501 OTG – enables physical (ADB) extractionfor many Android devices with micro USB connectivity. This cable has been part of Cellebrite’s cable kit since May 2015. If you haven’t received it yet, it is probably because your shipping address is not up to date.
◼ Cable No. 508 OTG – enables physical (ADB)extraction for the newest Android devices with USB Type C connectivity. This cable is a new addition to Cellebrite’s cable kit.
To receive the cables, please follow the instructions below:
◼ Update or approve your shipping address inhttps://cellevault-mng.cellebrite.com/userModify ?newCableCampaign=true&cable=501,508
◼ Register your UFED device/dongle (if not already registered)
◼ If you have more than one UFED license, please make sure they are all listed under your account in My.Cellebrite and you will receive both cables per any UFED license
◼ The cables will be shipped to users with a valid license,to the updated address in My.Cellebrite - free of charge
FORENSIC DEVICE PROFILESLogical extraction
Physical extraction*
File system extraction
Extract/disable user lock
Total
119
200
73
7
399
v.6.1
9,215
5,028
5,035
2,495
21,773
Total
*Including GPS devicesThe number of unique mobile devices with passcode capabilities is 4,103
Cellebrite Release Notes | UFED v 6.1 | March 2017 | 3
SOLVED ISSUES
KNOWN ISSUES
The following issues have been resolved: ◼ Fail to perform physical extraction for Samsung GT-E1200
and GT-E1200i devices via UFED InField Kiosk platform. ◼ Several issues related to identifying the UFED Camera in
UFED platforms. ◼ Tagged messages in UFED Reader may disappear after
saving session (.pas) file. ◼ Selecting chat and messages items in the Timeline View
and unable to see the selected items in the chat’s model. ◼ Partial decoding of call logs for iPhone 4 A1332 device, as
part of physical extraction. ◼ Partial decoding of emails for Samsung Galaxy S6
SM-G920F device.
◼ Image tags indication - When opening saved session froma previous UFED Physical Analyzer version, some tags may not be included.
This survey is also available in the following languages:Portuguese - https://www.surveymonkey.co.uk/r/CellebritePA_PRFrench - https://www.surveymonkey.co.uk/r/CellebritePA_FRGerman - https://www.surveymonkey.com/r/CellebritePA_DEChinese - https://www.surveymonkey.com/r/CellebritePA_CH
GET YOUR VOICE HEARD TO WIN ONE DEVICE UNLOCK
Cellebrite strives to provide you with advanced features and capabilities that meet your expectations, needs and requirements. As a valuable Cellebrite customer, we want to hear from you!ase take a few minutes to answer a short survey which will help us understand how UFED Physical Analyzer helps you with your investigations and examinations, and we will automatically enter your details into a raffle where we’re giving away 10 free unlocks via our CAIS service*.
*For a chance to win one device unlock, please provide your details at the start of the survey. One unlock per winner. Winners will be chosen at random.
Tablets Verizon QTAXIA1, Amazon SV98LN Fire, SM-T585 Galaxy Tab A 10.1 2016, VF-1497 Tab Prime 6
Tecno Y2
UMI TOUCH, SUPER
Unnecto U613 Quattro S, U4051 Swift, U5151 Bolt, U901 Air 4.5, U830 Rush
Vertu VM-06 Signature S 2017 S
Vestel Venus V3 5010
Vodafone VFD 200, VF-1497 Tab Prime 6
Wiko Highway Pure 4G
ZTE GSM NX512J nubia Z9 Max, NX518J Nubia Z9 Max Elite, Z832 Sonata 3, FIT 4G Smart, F320, Z792 Fanfare, Z797C Quartz, V795 Kis II, Z971
Cellebrite Release Notes | UFED v 6.1 | March 2017 | 8
CRYPTOGRAPHIC HASH VALUES INFORMATIONYou can validate the integrity of Cellebrite’s UFED software files by verifying their cryptographic hash values. This can help you identify whether a file has been changed from its original state.