Physical Pro : Cost V. Performance

It's a shame your training isn't as competitively priced as your software - £600.00 a day. 😯

Where did you get this info? It's £999 for 2 days (http//www.oxygen-forensic.com/en/training/2011_05_uk_london.php). I hope it's competitive enough -)

Training & certification costs are a killer for us independent examiners…… a serious expense. Necessary yes, but ouch!

Is $99 webinar affordable for you? If yes, in March we offer two http//www.oxygen-forensic.com/en/training/webinar.php

kc5mhb
Are you recommending Lee's training and Access Data product as the alternative to Cellebrite or all products and training out there?

Also do you only see the basis of expert being data recovery? Where does the line get drawn when it comes to possible "interpretation" of data?

I have no hidden agenda in asking; I am curious though about the depth and breadth of the package you have recommended.

What I'm advocating is gathering knowledge before equipment. Anyone can plug up a piece of equipment and push a few buttons. However, if you get a GSM phone in without a SIM card, chances are slim that someone is going to know what to do with it. I've been there but it was after Lee's training and I was able to generate a SIM based on simple information I was able to get out of the phone using Hyperterminal. I would not have known that without the training. And what about the CDMA phones that have subsity code locks? BitPim works on some, cdmaWorkshop works on others and again without the training I wouldn't know where to look for the code. So before you go out and spend lots of money on devices, I suggest getting training that will help you understand how the phones work, store data, etc. Understand I'm not bashing any of the commercial tools, its just they don't always get all of the data. In my line of work, we need comprehensive and thorough results and with limited budget, you learn to take the manual approach when you have to. I do recommend Lee's course only because I've been through it. Go to the AD website and view for yourself what is offered on the 101 and 202 courses.
Expert is not only data recovery, but explaining where the data came from, how its stored, the format it is stored in, how it is converted into human readable form and being able to convey that to a jury in terms they can understand.

kc5mhb, thanks for your reply.

I see the point about data acquisition and recovery but I am curious how the scope of going on one, two or three courses makes an expert? I couldn't see how the two parties of training and product development you mentioned possess the experience, knowledge and expertise to be metaphorcially speaking an industry de facto standard. This is why I wanted to get a better understand of the boundaries of the depth and breadth of what your vision or that of your Justice Department. I did state before, and happy to state again, I have no hidden agenda. I would add I am not suggesting anything about the two parties you mentioned. I am genuinely curious how the US makes decisions in this area.

I understand you have acquired knowledge and experience on courses (and your personal appreciation of what you felt you come away with is how you see yourself), but surely expertise is gained over many years in order to give expert evidence? I am avoiding that old chestnut - if the judge says you're an expert on the day then that is it - I am talking about real deep-rooted experience/exposure that your peers say this is expertise.

Just to clarify the point of "interpretation" of data, I was referring to the meaning of the data in mobile telephone usage terms. It is only one element of mobile telephone evidence to acquire data and the technical methodology that brought that about and how a mobile telephone works, so to speak. It is entirely another being able to demonstrate an expert understanding of the data in relation to mobile usage overall. It seems odd to me that, if I understood you correctly, it is possible to go to a US court to give evidence about how the flash translation layer operates in response to a question about e.g. SMS text messages are the texts message actually there (saved or deleted) due to some thing the defendant actually caused or is associated with those text messages?

My thoughts came about because I got the impression from your location ID under your name this morning (which seems to have changed now) that I thought your location ID mentioned Minnesota Justice Department and it was this department advocating the package you were discussing?

It's a shame your training isn't as competitively priced as your software - £600.00 a day. 😯

Where did you get this info?

It's on your web site!

It's £999 for 2 days (http//www.oxygen-forensic.com/en/training/2011_05_uk_london.php). I hope it's competitive enough -)

£999 + VAT = £1200. That's £600 per day.

Oh, I always forget about your VAT. You're right.
And every time I receive invoice for training room rental it also becomes a "surprise" for me 😉

…Then there are the locked iPhones, Blackberrys and pay as you go phones. Many times the Cellebrite cannot do anything with them.

Take a look at this recent article by our VP of Engineering "UFED Physical Pro as a Means to Examine Prepaid Devices"

http//bit.ly/gHO7Yb

I'm involved person of course, but below is my personal opinion.
Some time ago I had a chance to try UFED Physical Pro with a couple of devices (mainly - smartphones).

Don't know how long "some time ago" is, but I invite you to see UFED 2.0
http//www.cellebrite.com/ufed2-release-notes.html

I'm involved person of course, but below is my personal opinion.
Some time ago I had a chance to try UFED Physical Pro with a couple of devices (mainly - smartphones).

Don't know how long "some time ago" is, but I invite you to see UFED 2.0
http//www.cellebrite.com/ufed2-release-notes.html

I'll be glad to do that! Would you please send me one? 😉

Don't you already have one? )
Oleg, see you in May