Discover, Decode and Deliver
Mobile Data

Available with the UFED Touch Ultimate and UFED Classic Ultimate is the UFED Physical Analyzer: the most advanced analysis, decoding and reporting application in the mobile forensic industry. It includes malware detection, enhanced decoding and reporting functions, project analytics, timeline graph, exporting data capabilities and much more.

Advanced capabilities for:

iOS
  • Bypassing simple and complex passcode while performing physical and file system extraction on selected devices running iOS 3.0 or higher including iOS 6
  • Real-time decryption and decoding of data, applications, and keychain real-time decryption while revealing user passwords
  • Advanced decoding of applications
BlackBerry
  • Advanced decoding of BlackBerry Messenger (BBM), emails, locations, applications and more
  • Real-time decryption of protected content from selected BlackBerry devices running OS 4+ using a given password
Android
  • Advanced decoding of all physical extractions performed on devices running any Android versions
  • Advanced decoding of applications and application files
GPS
  • Portable GPS devices extraction and decoding
  • Exclusive – Physical extraction of Tom Tom trip-log files

Decoding

data

Rich set of data

Includes calendar, call logs, contacts SMS, MMS, chats, applications
Highlight
Highlighted parsed content in the Hex
Highlights the exact position for each decoded content entry, enabling full tractability between the analyzed data and the Hex
scripting

Python scripting

Using the Python shell, enhances the capabilities for content decoding
chain

Plugin and chain management

Able to run Python scripts via plugins, and edit and create new decoding chains

Analysis

malware
Malware Detection

Perform on-demand searches for viruses, spyware, Trojans and other malicious payloads in files
chart
Project Analytics

View statistics on communications and identifying relationship strengths
time line

Timeline Graph

Visualize events over time, view distances between events and see the number of events within a defined timespan
locations

Exporting Locations

Export selected latitudes, longitudes, and timestamps to KML reports
mail

Exporting Emails

Export selected emails to EML format
embedded text

Embedded Text Viewer

View text files including file information, content, and Hex
search

Advanced search

Based either on open text or specific parameters
PC

Watch list

Ability to highlight information based on predefined list of values
time line

Timeline

Monitor events in a single chronological view
image

Image carving

Powerful feature used to recover deleted image files and fragments when only remnants are available. Only applicable for physical extraction
search

All projects field search

Quick search within decoded data
Conversation

Conversation view

View communications between sources in date and time order
bookmarks

Entities bookmarks

Quick reference pointer set to analyzed data item and data file item
PC

Hex viewer

Hexadecimal view of the extracted data enabling advanced search based on multiple parameters, regular expressions and more
bookmarks

Hex bookmarks

Define and save specific locations in Hex data
DB

SQLite databases viewer

Viewing, searching and exporting tables and content (including deleted data) from SQLite database files

Reporting

embedded text

Report generator

Generate and customize reports in different formats e. g. PDF, HTML, XML and Excel

Confirmation

verfication

Hash verification

Ensures the extraction decoded is the same extraction received from UFED device

Part No:
AP-UFED-4PCU