Cellebrite's mobile forensic solutions include a combination of hardware, software, and services designed for extracting and analyzing data from mobile devices. These tools are some of the most popular in mobile device forensics. While the views in Physical Analyzer may change as updates are released, the concepts covered in this course will be the same. Cellebrite is strong at application parsing, timelining and carving additional artifacts. Physical Analyzer is a great platform for conducting analysis as it provides support for almost all mobile platforms and shows you both the phone extraction image file and the file system for examiners to dig into data that isn’t parsed. 

Cellebrite’s hardware and software package solutions are summarized below. While there may be more available, these are the ones we deemed relevant when writing the course.

•  UFED4PC – Acquisition tool: The “Ultimate” version features both logical and physical support. This is where the checkm8 capability exists. The logical version features simply logical support. UFED4PC offers a version of UFED that is installed on your forensic workstation.

•  UFED Touch 2 – Acquisition tool: The portable version. This can be ruggedized for extreme conditions or in a traditional format. The features are the same as UFED4PC depending on if you have “Ultimate” or logical. This is also where the checkm8 capability exists.

•  Physical Analyzer – The platform for examiners to conduct analysis. Features cloud and may feature Analytics in the future.

•  Pathfinder (Analytics) – Platform for conducing OCR searches, redacting images/videos, link analysis, correlation, similar images, image recognition and more.

•  Reader – The free platform for investigative review.

•  Premium – LAW ENFORCEMENT ONLY (unlock access) acquisition tool: Additional access to Android and iOS devices for acquisition and unlocking – reach out to Cellebrite for more info, as we do not have it.

•  Guardian – The case management system

•  Inspector – Digital forensic platform for analysis – previously BlackLight

•  Digital Collector – Remote collection tool for PC and Mac acquisitions – previously macquisition

•  CAS – Cellebrite Advanced Services – The specialized services available to anyone with just cause and proper paperwork to unlock and extract data from smartphones.