Many times, because of case backlog or by specific request, the person doing the data extraction from the device(s) will create a “data dump” report, viewable in the UFED Reader. The “Analyzed Data” portion provides a great overview of the simple data areas decoded automatically by Cellebrite, including *some* deleted data (red parentheses) How Is a Cellebrite Reader File Generated And What Is Included?Ī Cellebrite/UFED Reader File is generated within the larger licensed tool called Cellebrite UFED Physical Analyzer. The issues emerge when we dive into how the data is generated and what is included, or rather not included, by the person who generated the Reader file. If you have absolutely no need to dig into the data at all, the UFED Reader program should serve your purposes just fine. The tool is best for on-staff investigators, paralegals, private investigators and other mostly non-technical support staff. So then who should use the Cellebrite/UFED Reader? If your case involves any of the “basic” data areas, such as undeleted text messages, photographs and some location data, then the UFED Reader tool is probably fine. At first glance in the user interface, the two applications look very similar, but as with most things in digital forensic analysis, the devil is in the details. To say it’s a “lightweight version” of Physical Analyzer is a bit of an understatement.
#Using ufed reader full#
The Cellebrite (or UFED) Reader is a lightweight version of the paid version of the analysis tool that accompanies a full Cellebrite product license called Physical Analyzer. These are traditionally the “high points” of the data on the phone or tablet and can sometimes include deleted items, but a serious warning should accompany the Cellebrite Reader file: You don’t know what you’re missing!
#Using ufed reader free#
This pared-down or lightweight version of the Cellebrite Physical Analyzer program, called the Cellebrite Reader, is a great free way to browse the 30,000-foot view of the data, particularly for laypersons who may just want to get text messages, pictures, videos, etc. Being one of the most commonly used mobile forensic tools on the market (particularly by law enforcement), Cellebrite has wisely developed a way for people who wish to view the data on a particular device to do so, also with the capability of generating their own report. As a digital forensic practitioner who logs approximately 70% of cases in the mobile device forensics arena, it has become the norm for us to receive discovery in any number of forms from opposing counsel, law enforcement agencies, etc.