UFED 4PC/Touch 4.1 & UFED Physical/Logical Analyzer Release Notes

Transcription

1 UFED 4PC/Touch 4.1 & UFED Physical/Logical Analyzer Release Notes January 2015

2 Contents Release highlights... 3 Additional information... 4 Forensic methods... 7 Supported devices... 7 End of life announcement for Windows XP... 7 Solved issues... 8 Known limitations... 8 UFED Release Notes 2015 Cellebrite. All rights reserved. 2 P a g e

3 Release highlights Physical/file system extraction and decoding support for additional Android OS versions Support for Android devices with operating system version: 4.2 to Physical extraction and decoding from Nokia Windows Phone devices UFED now supports physical extraction and decoding of various Nokia Lumia devices based on Windows Phone 8.0 and 8.1 operating systems. This allows users to bypass the device lock code and use UFED without the need to perform JTAG extractions. The following table lists the supported Nokia Lumia devices that were verified for this release: Nokia Lumia model RM Number 520 RM RM RM RM RM RM RM RM RM RM RM RM RM RM RM RM RM RM RM RM-994 UFED Release Notes 2015 Cellebrite. All rights reserved. 3 P a g e

4 WhatsApp new encryption UFED Physical Analyzer decrypts WhatsApp s new encrypted chat history database. The extension of the new encrypted file is crypt8. The decryption capability is applicable for the decoding of physical and files system extractions (excluding file system extractions using Android Backup). Solution for prepaid devices with locked ports Enhanced use of Bluetooth in the generic Android profile, adding an option to load a client over a Bluetooth link. This enables users to perform logical extractions via Bluetooth on prepaid/tracfone Android devices with damaged or locked USB ports. Samsung E1200R physical extraction and decoding Physical extraction and decoding are now available for this popular burner phone. New home screen Improved, simplified and more intuitive user experience to help users perform extractions or access required tools. New search screen The search screen now supports three different device identification methods: Auto detect, search or manual selection. For more information, see ADDITIONAL INFORMATION. Additional information Additional Android OS Enhanced the file system (via ADB extraction), physical extraction and decoding of Android devices utilizing operating systems from 4.2 up to and including This supports leading devices such as Samsung Galaxy series (S5, Nexus, Note 3, S3 Mini etc.) along with other leading vendors and models such as: LG, Motorola and Sony. The following table displays a selection of devices and operating systems that were verified for this release. Note: For devices that do not appear in this table or were not yet tested, you should use the relevant generic Android profile. Model HTC 0P6B160 One M HTC 0P8B210 One Mini HTC 0P90201 Desire Huawei Y536A LG LG-D850 G LG LG-LS620 Volt LG LG-MS323 Optimus L LG LG-VS985 G LG-VS415PP CDMA 4.4 LG-VS810PP Motorola XT1032 Moto G Motorola XT1058 Moto X Samsung SM-900R7 Galaxy S Android OS UFED Release Notes 2015 Cellebrite. All rights reserved. 4 P a g e

5 Model Samsung SM-G900A Galaxy S Samsung SM-G900P Galaxy S Samsung SM-T237P Galaxy Tab Samsung SM-T330NU Galaxy Tab Android OS UFED Release Notes 2015 Cellebrite. All rights reserved. 5 P a g e

6 New home screen The home screen now groups the extraction data into distinct areas: mobile device, SIM card and USB device. In addition, users can directly operate the camera for immediate image capturing or access the device tools. The new search screen supports three device identification methods: Auto detect Improved automatic identification of the device. Search Perform a global device search, from character search to an exact word search. Manual selection Search by selecting the vendor and model (similar to old home screen search). UFED Release Notes 2015 Cellebrite. All rights reserved. 6 P a g e

7 Forensic methods Forensic methods New Total Logical extraction Physical extraction* File system extraction Unlock password Total ,062 *Including GPS devices Supported devices 141 new devices supported for logical extraction 143 new devices supported for physical extraction 21 new devices supported for "unlock password" 71 new devices supported for file system extraction End of life announcement for Windows XP Following the recent announcement that Microsoft has officially ceased support for Windows XP on April 8, 2014, Cellebrite recommends installing UFED Series Software Products on top of 64 bit versions of Windows 7 and above. By February 28, 2015, the UFED Series will no longer support Windows XP. IMPORTANT: This note does not affect any UFED Touch systems. For further information you can contact: support@cellebrite.com UFED Release Notes 2015 Cellebrite. All rights reserved. 7 P a g e

8 Solved issues Model number for iphone and Nokia devices The model number for iphone and Nokia devices is now displayed when identifying the device. Known limitations Video tutorials To reduce the size of the software installation, the video tutorials are now available as a media package. If UFED 4PC/Touch is connected to the Internet, you will receive an automatic notification to install the video tutorials, or you download the media package from MyCellebrite and then install it via the Version tab (Settings > Version > File). UFED Release Notes 2015 Cellebrite. All rights reserved. 8 P a g e