Cellebrite Announces New Aid to Law Enforcement

Catching Bad Guys Using Digital Forensics
May 8, 2014
How Big Companies Are Using Digital Forensics to Fight Fraud
May 22, 2014
Show all

Cellebrite Announces New Aid to Law Enforcement

cellebriteManagers of forensic labs can now enforce data extraction policies based on department policies or user profiles. Cellebrite Inc., a developer of mobile forensic technology, has updated its Universal Forensic Extraction Device (UFED) software for Permission Management. This offers administrative support at physical, file system or logical levels of extraction, states the company.

What Does the Update Provide?

This update will allow digital forensic investigators to create specific user profiles and then assign permissions for data extraction according to internal policies or predefined procedures. Administrators will be able to use these tools to manage personnel in forensic labs, or to extend privileges to other users on a need to know or right to know basis.

UFED Permission Management will let administrators enforce their standard operating policies or procedures that may require their end users to have certification or competency levels in the collection of mobile data. The end user permissions can also be based on the roles the users fulfill. The features will ultimately help managers in cutting the risk of any users accessing private data, which is beyond their legal scope of authority.

Who Needs the UFED Update?

Dan Morrissey, who is a supervisor in the Sheriff’s Department of Sacramento County, California, states that supervisors in law enforcement are asked often to manage evidence of a digital type within various boundaries of legality, for collection purposes.

He said that it is difficult for law enforcement supervisors to develop methods that will allow for lawful information collection, while still ensuring that the search scope does not exceed the direction of the courts. He feels that the new tools for UFED permission management will enable law enforcement officers to manage their policies at the case level, while still ensuring that any searches will be handled with the proper need-to-know and right-to-know mindset.

What Is the Cellebrite UFED?

The Cellebrite UFED is a self-contained, standalone system that is speedy and reliable. It provides extraction of data from the content stored within mobile phones. It is able to extract critical evidence quickly, from more than 2,500 up-to-date verified mobile devices, in Call History, SMS, Video, Images and Phonebook. It takes almost no time for setup, and there are no annoying drivers to install. A first responder can extract and preserve evidence that they acquire in real time, on the scene.

Cellebrite works with more than 140 worldwide cell phone carriers including AT&T, Verizon Wireless, T-Mobile, Sprint/Nextel, US Cellular, Alltel, Rogers, Cricket, Bell Mobility, Telstra Australia, Orange France, Vodafone, Orange, O2 and SFR. They use vital means of ensuring that new devices will be supported.

The UFED by Cellebrite has a feature built-in that allows SIM cards to be read and cloned. You can clone the original SIM card to induce the phone to function normally. The cloned SIM does not register on the network of the mobile carrier. This eliminates Faraday bag needs, and any possibility that phone data will be erased or updated.

A UFED ships with roughly 72 cables that connect the device with nearly all mobile devices on the market today. The protocols for connection include Bluetooth, infrared, USB and serial.

How Is Data Extracted?

The data from cell phones will be extracted onto an SD card or USB flash drive. It will be organized into concise, clear reports. The UFED Report Manager is also distributed by Cellebrite. It provides users with an interface for intuitive reporting, and allows them to export reports and data into CSV, Outlook Express, MS Outlook, Excel, or they can easily print a report. This UFED device supports Unicode fully, and can thus process any language with which a phone is enabled.

Sources: