UFED Enquiry about ...
 
Notifications
Clear all

UFED Enquiry about thier products !!

8 Posts
6 Users
0 Reactions
757 Views
(@evilcode1)
Estimable Member
Joined: 10 years ago
Posts: 157
Topic starter  

hello all
i want to buy UFED products for my company and there are a lot of product's and packag's in the offical website

im intersted in chip-off and extract data from physical dumps and also logical !!
what i should buy ??

UFED Pro Series ??? is my choice right ??

http//www.cellebrite.com/Mobile-Forensics/Solutions/ufed-pro-series

and what is the price for UFED Pro Series ?

and do they support windows phone ??
and live ram capture ?


   
Quote
(@sasha)
Active Member
Joined: 11 years ago
Posts: 16
 

If you need to work with dumps only - get UFED Physical analyzer.
Although there's also Oxygen and Rusolut with adapters for chip-off.


   
ReplyQuote
Igor_Michailov
(@igor_michailov)
Honorable Member
Joined: 20 years ago
Posts: 529
 

Rusolut sell special sets of adapters for chip-off. The prices aren't expensive.


   
ReplyQuote
JaredDM
(@jareddm)
Estimable Member
Joined: 9 years ago
Posts: 118
 

Keep in mind that chip off is a very difficult field of study. It's not just getting a dump and running a RAW scan for lost files like you would with an SD card or something like that. Each NAND chip will have a complex structure of XOR and wear leveling patterns that must be reverse engineered. Some may have known solutions, but many will not. Also a single NAND chip may have 4 or even 8 internal crystals. So it essentially becomes a RAID of scrambled data to put back together. Very Humpty Dumpty if you catch my drift.

We have RuSolut here that we use for data recovery, but we generally just get the dumps locally and then send them out digitally to a company in Australia who unscrambles the data for us. It's actually more cost effective to do it that way as this is really something that requires full time attention. Someone who's already handled thousands of cases of these will have a much better idea what they are looking at and be able to reverse engineer it much faster.

The good news is that most newer devices are now going to eMMC memory instead of NAND which basically follows the SD card protocol. They'll be much easier to recover and just require a USB adapter to read (assuming that encryption isn't enabled).


   
ReplyQuote
(@evilcode1)
Estimable Member
Joined: 10 years ago
Posts: 157
Topic starter  

Keep in mind that chip off is a very difficult field of study. It's not just getting a dump and running a RAW scan for lost files like you would with an SD card or something like that. Each NAND chip will have a complex structure of XOR and wear leveling patterns that must be reverse engineered. Some may have known solutions, but many will not. Also a single NAND chip may have 4 or even 8 internal crystals. So it essentially becomes a RAID of scrambled data to put back together. Very Humpty Dumpty if you catch my drift.

We have RuSolut here that we use for data recovery, but we generally just get the dumps locally and then send them out digitally to a company in Australia who unscrambles the data for us. It's actually more cost effective to do it that way as this is really something that requires full time attention. Someone who's already handled thousands of cases of these will have a much better idea what they are looking at and be able to reverse engineer it much faster.

The good news is that most newer devices are now going to eMMC memory instead of NAND which basically follows the SD card protocol. They'll be much easier to recover and just require a USB adapter to read (assuming that encryption isn't enabled).

thank u very much man fir ur replay …
i know that failed is not easy, bit im working with a good team in hardware failed ,,, and with forensicfocus forums experienced we wil mange )

but that about nand and chip-off ..
what about UFED they didnt answer on my emails do you know their product prices ?? like ( UFED pro )
and do you any think about shipment system i mean do they ship it internationally


   
ReplyQuote
Bolo
 Bolo
(@bolo)
Trusted Member
Joined: 9 years ago
Posts: 97
 

@JaredDM Trust me or not but VNR (Rusolut) is best tool for NAND recovery but only if you will understand it and learn how to use it. I suggest to take a training class for VNR if you got a problems and Sasha will give you all information that you require - you will not need to send your dumps anywhere else after.

P.S
Regarding eMMC… yes - it's true that you can access eMMC over ISP even without removing it from PCB board or by ChipOff and SD but eMMC got also NAND inside as yo know and there in some situations firmware in controller also can be corrupted - only access then it's by NAND protocol.


   
ReplyQuote
(@dr-wonder)
Eminent Member
Joined: 9 years ago
Posts: 49
 

The good news is that most newer devices are now going to eMMC memory instead of NAND which basically follows the SD card protocol. They'll be much easier to recover and just require a USB adapter to read (assuming that encryption isn't enabled).

thank u very much man fir ur replay …
i know that failed is not easy, bit im working with a good team in hardware failed ,,, and with forensicfocus forums experienced we wil mange )

but that about nand and chip-off ..
what about UFED they didnt answer on my emails do you know their product prices ?? like ( UFED pro )
and do you any think about shipment system i mean do they ship it internationally

In fact the UFED series prices may cost $10,000 or more? It depend on which country areyou in.
for ship details you can contact ur local seller. D

Cheers
wonder


   
ReplyQuote
Igor_Michailov
(@igor_michailov)
Honorable Member
Joined: 20 years ago
Posts: 529
 

In fact the UFED series prices may cost $10,000 or more? It depend on which country areyou in.
for ship details you can contact ur local seller. D

http//www.forensicfocus.com/Forums/viewtopic/t=14931/

1. UFED Ultimate Kit + UFED Camera Kit. Licence expired October 2017. All cables and adapters included. Mint condition. Asking price 4,000 Euro


   
ReplyQuote
Share: