Feedback on UFED sy...
 
Notifications
Clear all

Feedback on UFED system

24 Posts
17 Users
0 Reactions
2,089 Views
siggi-sche
(@siggi-sche)
Active Member
Joined: 18 years ago
Posts: 11
 

Like Yunus we use UFED and Xry plus Xact with the same statement.
UFED is quite good with phones new out in the market.
As far as I know they will also start / have started with physical images of the internal memory.
Up to know we use a lot of different flashing boxes for the physical images.


   
ReplyQuote
Nobin
(@nobin)
Active Member
Joined: 16 years ago
Posts: 8
 

After using the UFED the only flaw I have come across is when the ICCID is cut from the SIM you cannot examine it using this equipment as it will sit flush with the unit making it unreachable to remove, I've raised this with CelleBrite when they come back I will update.


   
ReplyQuote
darren_q
(@darren_q)
Eminent Member
Joined: 20 years ago
Posts: 48
 

I've used adhesive tape in the past when a SIM has been cut short. Tweezers also help. Our XRY SIM reader is a push in type like the Cellebrite, so the issue applies to both.


   
ReplyQuote
(@trewmte)
Noble Member
Joined: 19 years ago
Posts: 1877
 

Why are you not using the blue sleeve SIM holder for cut down cards?


   
ReplyQuote
Nobin
(@nobin)
Active Member
Joined: 16 years ago
Posts: 8
 

For the XRY OMNIKEY we had the same problem, however you can remove the outer casing (pushing the blue button and pulling the blue plastic top off) leaving a skeleton reader, you are then able to insert and remove the sim without using tweezers or tape.


   
ReplyQuote
PaulSanderson
(@paulsanderson)
Honorable Member
Joined: 19 years ago
Posts: 651
 

Because, when you dump the memory, you will have thousands of hex values which you can not interpret into regular characters because you will never know which values include SMS

I have just added a feature to the latest beta of RevEnge (available to licenced users) that I had to use in anger this morning on an LG viewty that will search for SMS messages that are encoded as 7BIT PDU data.

I did a hex dump of the phone with UFED (its not really a hex dump rather a file dump) identified the largest none media file from the phone and then ran the search option - an example from a case that is now dead (phone number obscured). After extracting the data (10 mins) and identifying the right file (20 secs) it took all of 2 seconds to find the SMS )


   
ReplyQuote
(@thepm)
Reputable Member
Joined: 17 years ago
Posts: 254
 

Has anyone from Canada tried the Cellebrite with phones from Canadian providers?

I know that Bell and Telus often change their phone's firmware preventing some forensic tools from working properly.


   
ReplyQuote
(@mitch)
Estimable Member
Joined: 19 years ago
Posts: 135
 

How much is UFED ? in £

regards


   
ReplyQuote
Nobin
(@nobin)
Active Member
Joined: 16 years ago
Posts: 8
 

The last quote one of our offices received for the kit was £2,674.


   
ReplyQuote
Ninja
(@ninja)
Eminent Member
Joined: 16 years ago
Posts: 23
 

What does the UFED cost in the market now? I mean the latest version?


   
ReplyQuote
Page 2 / 3
Share: