±Forensic Focus Partners

Become an advertising partner

±Your Account


Username
Password

Forgotten password/username?

Site Members:

New Today: 4 Overall: 36205
New Yesterday: 1 Visitors: 182

±Follow Forensic Focus

Forensic Focus Facebook PageForensic Focus on TwitterForensic Focus LinkedIn GroupForensic Focus YouTube Channel

RSS feeds: News Forums Articles

±Latest Articles

±Latest Videos

±Latest Jobs

UFED v CFID and differences

Discussion of forensic issues related to all types of mobile phones and underlying technologies (GSM, GPRS, UMTS/3G, HSDPA, LTE, Bluetooth etc.)
Subforums: Mobile Telephone Case Law
Reply to topicReply to topic Printer Friendly Page
Forum FAQSearchView unanswered posts
 
  

chrisellis250
Newbie
 

UFED v CFID and differences

Post Posted: Oct 14, 19 13:47

Hi all,

I currently deal with download data, but do not download it myself. I get given handset reports in an excel format and they seem to differ slightly whether the download has been carried out via UFED or CFID. Furthermore, the excel reports do not include any images, just information about the images. Based on the above, can anything assist me with the following:

1. Difference between UFED & CFID (or any others) - i.e. whether one does something that the other doesn't and how their handset reports vary?

2. When looking at the meta data of images on the report, how can I confirm whether images have been sent to the handset or whether they have been taken on the handset?

Finally, does anyone have any experience with 'sorting' excel handset reports, such as extracting call logs, sms and chat logs into a more readable format - such as a concise excel spreadsheet showing row by row data?

Thank you everyone.

Kind Regards.  
 
  

UnallocatedClusters
Senior Member
 

Re: UFED v CFID and differences

Post Posted: Oct 14, 19 18:50

Hello -

What is a “CFID” report?

If possible, ask for a UFED Reader report, which is an interactive report containing potentially much more information than a UFED Excel format report.

In regards to your question about determining whether or not a photo was taken by a specific phone, you will want to examine EXIF metadata.

MOBILedit Forensic Express Pro has a Camera Balistics capability which can determine if a photo was taken by a specific camera in a smartphone. I have not used this Camera Balistics capability myself so your mileage may vary.  
 
  

deeFIR
Member
 

Re: UFED v CFID and differences

Post Posted: Oct 15, 19 03:22

- chrisellis250


1. Difference between UFED & CFID (or any others) - i.e. whether one does something that the other doesn't and how their handset reports vary?

2. When looking at the meta data of images on the report, how can I confirm whether images have been sent to the handset or whether they have been taken on the handset?

Finally, does anyone have any experience with 'sorting' excel handset reports, such as extracting call logs, sms and chat logs into a more readable format - such as a concise excel spreadsheet showing row by row data?

Thank you everyone.

Kind Regards.


1. You have access to reports from both software packages - you can compare the two. Is there a reason an operator would use UFED over CFID? Availability of tools, personal preference, licensing restrictions, etc?

2. You can determine this by looking at the location of the file in conjunction with the metadata/report. I daresay if you have to ask this question, you should be seeking guidance from someone who is familiar with the particular device.

IMO, I think it's hazardous to ask internet strangers to explain the provenance of evidentiary product. Is there an examiner/analyst within your company/organisation that can interpret the reports for you?  
 
  

Angel.7
Member
 

Re: UFED v CFID and differences

Post Posted: Oct 15, 19 17:00

Thanks for mentioning metadata. A few weeks ago I asked a senior FF member to suggest a good software for analyzing metadata and he laughed at me "there is no such thing."

Based on what I am reading I can use MOBILedit Forensic Express Pro to successfully analyze EXIF metadata.

Are there any other software options that can handle analyzing and extracting metadata?

Also, what software can be used to locate (by picture) a person, place or object?

Thanks You!  
 

Page 1 of 1