background image

 

UFED Standard 

UFED Ruggedized 

 

UNIVERSAL FORENSIC EXTRACTION DEVICE

USER MANUAL

Содержание UNIVERSAL FORENSIC EXTRACTION DEVICE Ruggedized

Страница 1: ...UFED Standard UFED Ruggedized UNIVERSAL FORENSIC EXTRACTION DEVICE USER MANUAL...

Страница 2: ......

Страница 3: ...UFED SYSTEM UNIVERSAL FORENSIC EXTRACTION DEVICE USER MANUAL June 2009 version 4b...

Страница 4: ...t is subject to change without notice Corporate and individual names and data used in examples herein are fictitious unless otherwise noted Copyright 2007 CelleBrite Ltd All rights reserved WARNING Th...

Страница 5: ...0 3 2 UFED Menu Navigation 11 Chapter 4 Extract Phone Data 12 4 1 Overview 12 4 2 Flowchart 12 4 3 Extract Phone Data to USB Disk Drive or SD Card 13 4 4 Extract Phone Data to a PC 18 Chapter 5 Extrac...

Страница 6: ...10 4 Help 40 10 5 Network Settings 40 10 6 Screen Settings 40 10 7 Time and Date 40 10 8 User Settings 40 10 9 UFED Settings 41 10 10 Admin Settings 42 Chapter 11 Upgrade 43 11 1 Overview 43 11 2 Upgr...

Страница 7: ...connects to the phone via cable Bluetooth or infrared and the data is read logically from the phone It also performs a physical extraction from SIM cards allowing extraction of additional data such a...

Страница 8: ...UFED Report Manager software on your PC creates detailed reports of the extracted data that can be used as evidence Reports include full extraction details as well as MD5 hash information that proves...

Страница 9: ...you need for mobile phone analysis You can choose from either of two kit types Standard Kit and Ruggedized Kit Standard Kit Ruggedized Kit The following table lists the features and accessories that c...

Страница 10: ...dataport flap coverings Cable Organizer Data Cables Full Set Full Set Small Cable Pouch for quick excursions Bluetooth Dongle for wireless phone connection USB Flash Drive for saving examination data...

Страница 11: ...all 4 ON OFF Power Button 5 Target side Connectors For extraction to USB disk drive 6 SIM Smart Card Slots Slot for reading SIM cards and smart cards 7 Navigation Keys For navigating the UFED menu 8...

Страница 12: ...g 16 Charging switch 17 Battery s state of charge test and LED indicators 2 3 Ruggedized UFED Carrying Case The UFED Ruggedized carrying case is designed specifically for field use conditions To open...

Страница 13: ...sions User Manual 7 2 4 Ruggedized UFED Rubber Casing The Ruggedized UFED device is encased in a rubber casing to hold the battery house and to protect the UFED from dirt dust sand or other contaminan...

Страница 14: ...r will take over Charging the Battery To re charge the battery connect the device to an AC adapter supplied with the kit and then flip the power switch to the left CHG position LED Indicator The LED i...

Страница 15: ...apter 2 UFED Configuration Ruggedized and Standard Versions User Manual 9 Inserting or Removing Battery Please refer to Appendix A for instructions on installing removing or exchanging the battery pac...

Страница 16: ...is point the UFED is ready to be used and the Main Menu is displayed Extract Phone Data This option is for extracting data from a mobile phone See Chapter 3 Extract SIM USIM Data This option is physic...

Страница 17: ...UFED shows menu options on the display Use the keys to move between options To select an option press or the OK key To return to the previous menu press When additional help is available a help icon w...

Страница 18: ...this function to extract phonebook SMS text messages pictures etc from mobile phone memory to a USB disk drive SD card or directly to a PC The UFED guides you each step of the way during this process...

Страница 19: ...he main menu Use the keys to move between options Press OK or to continue 2 Source Vendor Select the vendor manufacturer of the source phone Use the keys to move between options Press OK or to continu...

Страница 20: ...to the SIM card data via the data cable In these cases you will be prompted during the process to remove the SIM card and insert it into the SIM Card Slot 5 Source Link This step determines how the p...

Страница 21: ...Use the keys to move between options Press OK or to continue 7 Content Types Select content types to be extracted The UFED displays the options according to the capabilities available in the phone ex...

Страница 22: ...ered on and the data connector is clean NOTE When connected to the UFED some phones will prompt you to choose an operating mode such as PC Suite or Phone Mode Press to start extraction 9 Connect Targe...

Страница 23: ...user phone data the UFED also provides metadata about he phone Among this data is the ESN for CDMA phones or IMEI for GSM phones The ESN or IMEA is a unique identifier or serial number uniquely associ...

Страница 24: ...nk method This part of the process is identical to the USB Extraction process see Section 4 3 Use the keys to move between options Press OK or to continue 2 Target Selection Select PC from the target...

Страница 25: ...he UFED displays the cable number to be used to connect the phone NOTE When connected to the UFED some phones will prompt you to choose an operating mode such as PC Suite or Phone Mode Press to contin...

Страница 26: ...pter 6 for details If connecting via IrDA Infrared place the phone with its infrared port directly in front of the UFED s source or target infrared port 5 Smartphone PDA Installation If the extracted...

Страница 27: ...f via the phone or when the SIM card is not accessible via the phone Using the second option from the main menu gives the option of Physical extraction and the output of this extraction is additional...

Страница 28: ...menu Insert the SIM card as described above and continue exactly as described for phone extraction in Chapter 3 NOTE If the SIM is protected with a PIN you will need to enter the PIN during the trans...

Страница 29: ...ar device from connecting to the network The handset will be invisible to the network with no calls or SMS messages to or from the handset preserving the current call and SMS history in the device No...

Страница 30: ...ystem 6 2 Flowchart 6 3 SIM Cloning Steps 1 Main Menu Select Clone SIM ID from the main menu Use the keys to move between options Press OK or to continue 2 Select Source Select Clone an existing SIM C...

Страница 31: ...he bottom of the UFED device 4 Select Partition to Read If the card is a 3G SIM card you will next be asked to choose the partition Use the keys to move between options Press OK or to continue 5 Inser...

Страница 32: ...uating the phone 6 4 Manually Creating a Clone SIM Card Steps 1 Main Menu Select Clone SIM ID from the main menu Use the keys to move between options Press OK or to continue 2 Select Source Select Man...

Страница 33: ...nd GID2 settings to the SIM card select Yes at the Advanced Settings menu Otherwise select No Use the keys to move between options Press OK or to continue 6 Insert Target Card The UFED then asks you t...

Страница 34: ...IM ID 28 UFED System 7 Finished The UFED next completes the SIM Cloning process ICCID and IMSI data is shown on screen At this point you can insert the cloned SIM card into the phone and continue eval...

Страница 35: ...d When necessary the UFED will inform you to upload the client application as follows 3 Install Client Prompt The UFED now instructs you to run the installation on the phone 4 Install and Run the clie...

Страница 36: ...D Bluetooth Adapter The UFED kit comes with a Bluetooth USB adapter as shown Insert the Bluetooth adapter in either of the two USB ports at the top of the UFED as shown Press to continue 8 3 Identifyi...

Страница 37: ...file The MD5 hash provides a tamper proof signature of the source file Any modifications to the file will cause the MD5 hash to change In this way the MD5 hash proves the authenticity of each file 9 2...

Страница 38: ...E The connection between the UFED device and the PC is necessary only if you will be performing extractions directly to PC If you perform extraction to USB or SD card you do not this connection UFED D...

Страница 39: ...sections The Contacts icon shows the phonebook contacts list in tabular format The table is sortable by clicking on each column header The SMS icon shows all SMS messages sent and received with time s...

Страница 40: ...Chapter 9 UFED Report Manager Software 34 UFED System The Audio icon gives a list of each audio file The Ringtones icon gives a list of each ringtone...

Страница 41: ...en data in a content pack file ucp in a new location or different name Print preview Displays the full content report on screen in the format that it will be printed Print Sends the report to a printe...

Страница 42: ...ts Help Displays basic information about the software version 9 5 Reports Selecting Forensics Settings on the Tools menu allows you to configure the formatting and layout of the UFED reports and also...

Страница 43: ...and the default value in the field on the right of the window Show in report Specifies whether to show this field in the report Mandatory If the field is enabled then this specifies if the field must...

Страница 44: ...lick on the Optional Information tab and enter the information in the fields provided Mandatory fields are marked with a Entering Optional Information At any stage you can view and print reports Click...

Страница 45: ...l in Chapter 1 10 2 Software Versions Displays the current version numbers and system information App The application version Full and Tiny The software image versions S N The UFED Serial Number ID Th...

Страница 46: ...r configuration Settings include Dynamic IP settings Dynamic or Static DNS Static IP settings IP addresses 10 6 Screen Settings Contrast Modify the contrast level of the LCD screen 10 7 Time and Date...

Страница 47: ...between LastName FirstName and FirstName LastName ordering when copying phonebook data Phonebook Setting Name Order 10 9 UFED Settings If these options are enabled it allows you to enter free text su...

Страница 48: ...from the examined smartphone Report Format Change the layout of the HTML report to compact mode or normal mode Report Settings Generate XML Report Enabling this feature will add a report in XML forma...

Страница 49: ...The UFED application and data including support for the various phone models When upgrading you choose either Application Upgrade or Images Upgrade The Images Upgrade option updates both the Full and...

Страница 50: ...OK or to continue 3 Upgrade Menu For a manual upgrade you have two options Upgrade Application Now The application refers to the UFED application data which includes the support information for any n...

Страница 51: ...file Press OK or to continue The UFED now performs the upgrade Do not interrupt the UFED until the full process is complete 6 Finish After finishing the upgrade process the UFED displays a message in...

Страница 52: ...ion or Image and select PC as the source for the upgrade Use the keys to move between options Press OK or to continue 2 Run the Upgrade Program on the PC Run the Upgrade Program via Start Programs Cel...

Страница 53: ...are s dialog box displayed on your PC 10 Upgrade The UFED now performs the upgrade Do not interrupt the UFED until the full process is complete 11 Finish After finishing the upgrade process the UFED d...

Страница 54: ...s and userid passwords set these settings as described in Section 11 5 2 Connect the UFED to the network Connect the UFED device to your network via the Ethernet port on the top of the UFED Use a stan...

Страница 55: ...nu 11 5 Automatic Upgrade from Web If your UFED is connected to the network via the Ethernet port you can configure it to perform automatic upgrades This enables you to keep your UFED up to date witho...

Страница 56: ...des Daily Weekly or Monthly FTP Settings If you chose FTP for your upgrade method specify the ftp details as provided by your distributor You will need to specify FTP Address Port Number Username Pass...

Страница 57: ...to the FTP settings when the upgrade method is HTTP HTTP Proxy Settings Similar to FTP Proxy settings when the upgrade method is HTTP App The application version Full and Tiny The software image versi...

Страница 58: ...ire personal injury and damage to property Warning The batteries could be used within the following temperature ranges Exceeding these ranges could result in fire personal injury and damage to propert...

Страница 59: ...TD IrDA speeds up to 115kbps Ethernet controller LAN91C111 10 100MBPS Ethernet controller and an 8KB packet buffer SDRAM CPU Intel XScale micro architecture CPU frequency 520MHz Bus frequency 104MHz M...

Страница 60: ...to maximize it s capability to support all the latest mobile devices available Software updates are emailed from Cellebrite monthly to contacts on an email distribution list If your organization is n...

Страница 61: ......

Отзывы: