Discover, Decode and Deliver
Mobile Data
Available with the UFED Touch Ultimate and UFED Classic Ultimate is the UFED Physical Analyzer: the most advanced analysis, decoding and reporting application in the mobile forensic industry. It includes malware detection, enhanced decoding and reporting functions, project analytics, timeline graph, exporting data capabilities and much more.
Advanced capabilities for:
iOS
- Bypassing simple and complex passcode while performing physical and file system extraction on selected devices running iOS 3.0 or higher including iOS 6
- Real-time decryption and decoding of data, applications, and keychain real-time decryption while revealing user passwords
- Advanced decoding of applications
BlackBerry
- Advanced decoding of BlackBerry Messenger (BBM), emails, locations, applications and more
- Real-time decryption of protected content from selected BlackBerry devices running OS 4+ using a given password
Android
- Advanced decoding of all physical extractions performed on devices running any Android versions
- Advanced decoding of applications and application files
GPS
- Portable GPS devices extraction and decoding
- Exclusive – Physical extraction of Tom Tom trip-log files
Decoding
Rich set of data
Includes calendar, call logs, contacts SMS, MMS, chats, applications
Highlighted parsed content in the Hex
Highlights the exact position for each decoded content entry, enabling full tractability between the analyzed data and the Hex
Python scripting
Using the Python shell, enhances the capabilities for content decoding
Plugin and chain management
Able to run Python scripts via plugins, and edit and create new decoding chains
Analysis
Malware Detection
Perform on-demand searches for viruses, spyware, Trojans and other malicious payloads in files
Project Analytics
View statistics on communications and identifying relationship strengths
Timeline Graph
Visualize events over time, view distances between events and see the number of events within a defined timespan
Exporting Locations
Export selected latitudes, longitudes, and timestamps to KML reports
Exporting Emails
Export selected emails to EML format
Embedded Text Viewer
View text files including file information, content, and Hex
Advanced search
Based either on open text or specific parameters
Watch list
Ability to highlight information based on predefined list of values
Timeline
Monitor events in a single chronological view
Image carving
Powerful feature used to recover deleted image files and fragments when only remnants are available. Only applicable for physical extraction
All projects field search
Quick search within decoded data
Conversation view
View communications between sources in date and time order
Entities bookmarks
Quick reference pointer set to analyzed data item and data file item
Hex viewer
Hexadecimal view of the extracted data enabling advanced search based on multiple parameters, regular expressions and more
Hex bookmarks
Define and save specific locations in Hex data
SQLite databases viewer
Viewing, searching and exporting tables and content (including deleted data) from SQLite database files
Reporting
Report generator
Generate and customize reports in different formats e. g. PDF, HTML, XML and Excel
Confirmation
Hash verification
Ensures the extraction decoded is the same extraction received from UFED device
Part No:
AP-UFED-PA-LE – for law enforcement