Yuval Ben Moshe, Forensics Technical Director, Cellebrite

Yuval, could you start by telling us more about your role at Cellebrite?

At Cellebrite, we firmly believe in maintaining very open communication channels with the global community of forensics specialists. Through these, we deliver the latest developments and information, ensuring law enforcement and other professionals are kept up-to-date with this rapidly-evolving domain. My role is to facilitate one of these key channels by representing Cellebrite at summits and conferences and delivering content.

In addition, I’m also responsible for running seminars with customers and users, again, facilitating open and direct dialogue, to share what’s new and more importantly, put a very attentive ear to what customers want or need. This ensures we always focus on meeting their ever-changing requirements.Cellebrite management and product management enables me to provide a clear knowledge of what customers need and what they will need soon, so that we’ll be ready with the right solutions when challenges occur.

What challenges within the digital forensic industry is Cellebrite aiming to address?

The best answer I can give is: helping law enforcement and other digital forensics specialists deal with ever-changing challenges within this rapidly-evolving domain. I’ve discussed some of these during my presentation at Forensics Europe Expo. They range from dealing with a constantly-increasing workload, through to the extremely dynamic domain where new and sophisticated devices are introduced almost daily, plus many more technological issues in obtaining digital evidence from complex, sophisticated devices.


Get The Latest DFIR News

Join the Forensic Focus newsletter for the best DFIR articles in your inbox every month.


Unsubscribe any time. We respect your privacy - read our privacy policy.

Tell us more about the products and solutions offered by Cellebrite, and what sets them apart from similar forensics tools.

Cellebrite is committed to providing law enforcement and other digital forensics professionals with the right solutions to obtain evidence from mobile devices efficiently and within a controlled process supporting the admissibility to a court of law. As such, the range of products covers everything needed to get the evidence and produce a report that can later be used in court. Our products cover all the necessary steps along the way, allowing filtering and searching through enormous amounts of data to help the investigators find the really important evidence. Furthermore, we also provide visualisation tools to allow investigators to sort through the data, to find what’s really needed and important.

There are many things that set Cellebrite apart from all other tools, including the frequency with which our products are updated – making sure customers are always one step ahead of the market – and releasing new developments at a rate that is unmatched by anyone else.

What can we expect from Cellebrite over the next couple of years? Are there any new developments we should be aware of?

Our customers can always trust Cellebrite to be at the forefront; keeping them up-to-date and one step ahead – this is engrained within all our ranks. We listen to our customers as well, and will always look to address their needs and challenges.

How important are emerging markets to the digital forensics field? What are the unique challenges associated with them, and how can they be addressed?

All markets are equally as important, with each one carrying unique factors resulting from its legal system, mobile device penetration rate, usage patterns, demographics and many other issues. We try to accommodate each market and match our products and offerings to its characteristics. Not all emerging markets have the same challenges, but many are faced with legal systems that do not recognise digital evidence as admissible in criminal proceedings; a legal system that does not empower law enforcement to investigate digital devices and of course, lack of budgets and funds.

You mentioned in your presentation at this year's Forensics Europe Expo that mobile malware detection is a particular interest of yours – can you tell us more?

Mobile malware is a growing challenge for us all as it involves three major trends competing with each other. Firstly, mobile devices are becoming more embedded in our day-to-day routines, carrying more data, and becoming critical for many aspects of our lives. Secondly, malware is increasingly being introduced into the realm of mobile devices, carrying the risk of jeopardising the mobile devices in our lives. Finally, detection and prevention tools are also improving, competing with malware sophistication and protecting us from danger. As long as item three keeps up with item one and both are ahead of item two, we should be okay, otherwise it may impact the use of mobile devices and render it unsafe for critical or personal data.

What do you think the next developments in mobile forensics will be?

No-one can know what will happen tomorrow, especially in our dynamic and rapidly-changing field. I can only say that as it seems right now, mobile device usage will grow and become more embedded in our daily lives, supporting and enhancing more functions, becoming more sophisticated and complex. With that said, for the forensics professional, this means more opportunities for reflecting on people’s actions by obtaining evidence from mobile devices, and therefore a much wider and richer evidential landscape.

Yuval Ben Moshe is the Forensics Technical Director at Cellebrite, a leading manufacturer of data extraction, transfer and analysis equipment for mobile devices. Cellebrite's mobile forensics division produces software and hardware used by law enforcement, intelligence agencies, corporate security and private digital forensic examiners worldwide.

Leave a Comment

Latest Videos

Throughout the past few years, the way employees communicate with each other has changed forever.

69% of employees note that the number of business applications they use at work has increased during the pandemic.

Desk phones, LAN lines and even VOIP have become technologies of the past workplace environment as employees turn to cloud applications on their computers and phones to collaborate with each other in today’s workplace environment.

Whether it’s conversations in Teams, file uploads in Slack chats, or confidential documents stored in Office 365, the amount of data stored and where it is stored, is growing quicker than IT and systems administrators can keep up with.

Corporate investigators and eDiscovery professionals need to seamlessly collect relevant data from cloud sources and accelerate the time to investigative and discovery review.

With the latest in Cellebrite’s remote collection suite of capabilities, investigators and legal professionals can benefit from secure collection with targeted capabilities for the most used workplace applications.

Join Monica Harris, Product Business Manager, as she showcases how investigators can:

- Manage multiple cloud collections through a web interface
- Cull data prior to collection to save time and money by gaining these valuable insights of the data available
- Collect data from the fastest growing cloud collaboration applications like Office365, Google Workspace, Slack and Box
- Login to a single source for workplace app collection without logging into every app and pulling data from multiple sources for every employee
- Utilize a single unified collection workflow for computer, mobile and workplace cloud applications without the need to purchase multiple tools for different types of collections – a solution unique to Cellebrite’s enterprise solution capabilities

Throughout the past few years, the way employees communicate with each other has changed forever.

69% of employees note that the number of business applications they use at work has increased during the pandemic.

Desk phones, LAN lines and even VOIP have become technologies of the past workplace environment as employees turn to cloud applications on their computers and phones to collaborate with each other in today’s workplace environment.

Whether it’s conversations in Teams, file uploads in Slack chats, or confidential documents stored in Office 365, the amount of data stored and where it is stored, is growing quicker than IT and systems administrators can keep up with.

Corporate investigators and eDiscovery professionals need to seamlessly collect relevant data from cloud sources and accelerate the time to investigative and discovery review.

With the latest in Cellebrite’s remote collection suite of capabilities, investigators and legal professionals can benefit from secure collection with targeted capabilities for the most used workplace applications.

Join Monica Harris, Product Business Manager, as she showcases how investigators can:

- Manage multiple cloud collections through a web interface
- Cull data prior to collection to save time and money by gaining these valuable insights of the data available
- Collect data from the fastest growing cloud collaboration applications like Office365, Google Workspace, Slack and Box
- Login to a single source for workplace app collection without logging into every app and pulling data from multiple sources for every employee
- Utilize a single unified collection workflow for computer, mobile and workplace cloud applications without the need to purchase multiple tools for different types of collections – a solution unique to Cellebrite’s enterprise solution capabilities

YouTube Video UCQajlJPesqmyWJDN52AZI4Q_g6nTjfEMnsA

Tips And Tricks Data Collection For Cloud Workplace Applications

Forensic Focus 10 hours ago

In this episode of the Forensic Focus podcast, Si and Desi explore the cutting-edge technology of deepfake videos and image manipulation. In addition to discussing the latest technological developments and efforts being made to detect manipulated media, they also examine the associated legal and ethical implications.

Show notes:

Boris Johnson image - https://www.theguardian.com/politics/2023/jan/10/spot-the-difference-boris-johnson-appears-scrubbed-from-photo-posted-by-grant-shapps

Deep Fake Neighbour Wars - https://m.imdb.com/title/tt21371376/

Stalin image - https://www.history.com/news/josef-stalin-great-purge-photo-retouching

Nvidia eye contact AI - https://www.polygon.com/23571376/nvidia-broadcast-eye-contact-ai and https://www.youtube.com/watch?v=xl87WTDrReo

Birthday problem - https://en.wikipedia.org/wiki/Birthday_problem

Same frightening woman in AI images - https://petapixel.com/2022/09/09/the-same-frightening-woman-keeps-appearing-in-ai-generated-images/

Inherent mysogeny of AI portraits - https://www.theguardian.com/us-news/2022/dec/09/lensa-ai-portraits-misogyny

Midjourney - https://www.midjourney.org/

Deepfake porn legality - https://www.theverge.com/2022/11/25/23477548/uk-deepfake-porn-illegal-offence-online-safety-bill-proposal and https://www.technologyreview.com/2021/02/12/1018222/deepfake-revenge-porn-coming-ban/

AIATSIS - https://aiatsis.gov.au/cultural-sensitivity

Fake tiger porn story - https://www.dailydot.com/unclick/tiger-porn-britain-law/

Group photo with no blinking - https://www.countrylife.co.uk/comment-opinion/curious-questions-group-photo-179102

Emma Watson deefake audio - https://www.thetimes.co.uk/article/ai-4chan-emma-watson-mein-kampf-elevenlabs-9wghsmt9c

Domestika - https://www.domestika.org/en/courses/981-introduction-to-interviewing-the-art-of-conversation

Investigative Interviewing - https://www.amazon.co.uk/dp/0199681899?ref=ppx_pop_mob_ap_share

Forensic Focus events calendar - https://www.forensicfocus.com/events/

Si Twitter - https://twitter.com/si_biles

In this episode of the Forensic Focus podcast, Si and Desi explore the cutting-edge technology of deepfake videos and image manipulation. In addition to discussing the latest technological developments and efforts being made to detect manipulated media, they also examine the associated legal and ethical implications.

Show notes:

Boris Johnson image - https://www.theguardian.com/politics/2023/jan/10/spot-the-difference-boris-johnson-appears-scrubbed-from-photo-posted-by-grant-shapps

Deep Fake Neighbour Wars - https://m.imdb.com/title/tt21371376/

Stalin image - https://www.history.com/news/josef-stalin-great-purge-photo-retouching

Nvidia eye contact AI - https://www.polygon.com/23571376/nvidia-broadcast-eye-contact-ai and https://www.youtube.com/watch?v=xl87WTDrReo

Birthday problem - https://en.wikipedia.org/wiki/Birthday_problem

Same frightening woman in AI images - https://petapixel.com/2022/09/09/the-same-frightening-woman-keeps-appearing-in-ai-generated-images/

Inherent mysogeny of AI portraits - https://www.theguardian.com/us-news/2022/dec/09/lensa-ai-portraits-misogyny

Midjourney - https://www.midjourney.org/

Deepfake porn legality - https://www.theverge.com/2022/11/25/23477548/uk-deepfake-porn-illegal-offence-online-safety-bill-proposal and https://www.technologyreview.com/2021/02/12/1018222/deepfake-revenge-porn-coming-ban/

AIATSIS - https://aiatsis.gov.au/cultural-sensitivity

Fake tiger porn story - https://www.dailydot.com/unclick/tiger-porn-britain-law/

Group photo with no blinking - https://www.countrylife.co.uk/comment-opinion/curious-questions-group-photo-179102

Emma Watson deefake audio - https://www.thetimes.co.uk/article/ai-4chan-emma-watson-mein-kampf-elevenlabs-9wghsmt9c

Domestika - https://www.domestika.org/en/courses/981-introduction-to-interviewing-the-art-of-conversation

Investigative Interviewing - https://www.amazon.co.uk/dp/0199681899?ref=ppx_pop_mob_ap_share

Forensic Focus events calendar - https://www.forensicfocus.com/events/

Si Twitter - https://twitter.com/si_biles

YouTube Video UCQajlJPesqmyWJDN52AZI4Q_i41eg24YGZg

Deepfake Videos And Altered Images - A Challenge For Digital Forensics?

Forensic Focus 13th February 2023 10:30 am

This error message is only visible to WordPress admins

Important: No API Key Entered.

Many features are not available without adding an API Key. Please go to the YouTube Feed settings page to add an API key after following these instructions.

Latest Articles

Share to...