UFED Ultimate & UFED Infield V6.3 & UFED Physical Analyzer, UFED
Total Page:16
File Type:pdf, Size:1020Kb
Release Notes Now supporting UFED Ultimate & UFED InField v6.3 (Touch 2, Touch2 Ruggedized, Touch, 4PC, Kiosk, Ruggedized Laptop & Ruggedized Tablet) 22,968 device profiles & UFED Physical Analyzer, UFED Logical Analyzer & Reader v6.3.6 4,538 App versions Version 6.3 | August 2017 Forensic device profiles v6.3 Total Highlights Logical extraction 250 9,590 *Physical extraction 197 5,365 Device support File system extraction 193 5,343 • The newly released physical extraction and unlocking method for Samsung devices, supports more than 100 Extract/disable user lock 149 2,670 Exynos-based and Qualcomm-based Samsung devices. Total 789 22,968 Please note: Physical extraction while bypassing lock from 4,299 devices • Qualcomm-based Samsung devices: The capability Including GPS devices* generically supports devices with a security patch level earlier then March 2017. • Exynos-based Samsung devices: The capability generically supports devices with a security patch level earlier then January 2017. Some devices may be supported on later patch levels. This method works in a generic fashion, and may support more Samsung NEW SUPPORT! Physical extraction and unlocking devices than we have tested so far. If you are handling capabilities for Samsung devices! an unsupported device, we recommend that you use We have extended support to more than 100 Exynos and the generic profile: Samsung GSM Generic Android Qualcomm devices. Devices include: Galaxy S7 Edge, S7, S6 Exynos with the relevant chipset number. Edge, S6 Edge+, Note 5, A5 and J7 families. • Enhanced disable user lock support has been added to 75 LG devices, including prepaid devices. This capability allows you to perform the required extraction without any limitations once you have permanently unlocked the device. Please note: This capability requires the use of two new cables: 521 and 522. Click here for more details. New unlocking capabilities for LG devices • Bootloader-based physical extraction while bypassing lock New disable user lock capabilities have been added to 65 for 7 Acer, Lenovo, ZTE and other Android devices, supported LG devices, including prepaid devices: L52VL including: Acer Z320 Liquid and ZTE GSM NX512J nubia Treasure, L15G Sunrise, LGL22C Power and LGL41C Ultimate 2 Z9 Max. • Physical extraction (ADB method) for 12 Huawei, Motorola, Wiko and other Android devices, including: Huawei Y560-L01, Huawei Watch 2608 and Motorola XT1526 Moto E 2nd Gen. App support • 116 updated application versions for iOS and Android devices 2 Cellebrite Release Notes UFED v6.3 Enhanced APK downgrade Decode more images from Thumbnail files for The enhanced APK downgrade capability is now possible on iOS devices 24 applications including Kik, QQ messenger, FireChat, Text UFED Physical Analyzer can now decode more images Me, Voxer and many more! To do this, simply download the from Thumbnail files format (.ithmb container). On iOS APK from MyCellebrite (a separate package) and install it via devices, all thumbnails are stored in the folder /var/mobile/ Settings > Version > File. Media/PhotoData/Thumbnails. Even if an image was deleted from the device, the original thumbnail will remain and can Please note: This method extracts applications data using be recovered. the Android backup service. During the process, the selected application (*.apk file) is temporarily downgraded to an earlier Attachment indication for images in version, so that the data can be extracted. The current version Thumbnail view is restored at the end of the extraction process. Images which were sent or received, now appear with an attachment icon in the thumbnail view. Improved device model search using TAC (Including unsupported devices) When searching for devices that are not supported by UFED, based on the TAC value we are able to suggest an alternative extraction solution for generic profile devices running OS Android, BlackBerry, MTK and Windows Phone. Keep your eyes open for an updated version of Reader When a new version of Reader is available (while working online), you will be notified by a pop up and can easily upgrade to the latest version. New update for the wireless network/BSSID offline database Download it now from My.Cellebrite to convert more locations data. 3 Cellebrite Release Notes UFED v6.3 Did you approve your shipping address Solved Issues to receive the latest extraction cables? The following issues have now been resolved: The new disable user lock capability for this release requires the use of two new cables (521 • In UFED Physical Analyzer, contacts’ images now appear as & 522). If you have not approved your shipping address since images (under data files) and can be linked to the associated January 2017, you are required to do so in MyCellebrite via contact item. this link only, EVEN IF YOUR SHIPPING DETAILS HAVE NOT • A crash issue when running Fuzzy methods plug-in. CHANGED to initiate the shipment of these cables free of • A failure causing the Reader to not show data files. charge. Taking these steps will also ensure that you receive • Voice calls from Android devices - Certain voice calls, future complimentary cables as they become available. some of which went to voicemail, were incorrectly marked as deleted. Note: The new cables are available to all users with an active license. • Missing parties in SMS messages when decoding iCloud backup from an iPhone 7 device. • Cable No. 521 – Disables user lock for many LG devices with • A decoding issue related to Telegram Messenger version 3.4 micro USB connectivity version for iOS devices. • Cable No. 522 – Disables user lock for many LG devices with USB Type C connectivity The following issues have been resolved in UFED: • File duplication in iOS file system extraction. How do I receive the new cables? • UFED 4PC installation stuck with “installation codecs” error. You must approve your shipping address, even if it has not changed, to initiate the shipment of the cables. If you have not yet approved your shipping address, please follow the instructions below: • Make sure that all your UFED Devices/ Dongles are registered at MyCellebrite. If not registered, you must register the devices first to receive the cables. Note: If you have more than one UFED license, please make sure they are all listed under your account in MyCellebrite, to receive all new cables per any UFED license. • Update and approve your shipping address in this link to initiate the shipment of the cables: https://cellevault-mng.cellebrite.com/ userModify?newCableCampaign=true&cable=501,508. The cables will be shipped to users with a valid license to the updated address in MyCellebrite at no charge. 4 Cellebrite Release Notes UFED v6.3 iOS: New and updated apps 76 updated apps Any.DO 4.11.0 Text Now 8.9.0 ASKfm 4.5 TigerText 6.6 Booking.com 14.8 Tinder 7.6.1 Chrome 60.0.3112.72 Truecaller 7.60 Ctrip 5.0.3 Twitterrific 5.17.5 Dolphin Browser 10.0.1 Viber 7.2 Dropbox 56.2 Vkontakte 2.15.1 Endomondo 17.7.0 Voxer 3.21.6 Expedia 17.29 Waze 4.26 Facebook Messenger 127.0 WeChat 6.5.12 Firefox 8.0.1 Weibo 7.7.1 Flipboard 4.0.17 Whisper 8.8.5 Foursquare 10.8 Aliwangwang 4.1.9 Gmail 5.0.170703 Badoo 5.15.0 Google Drive 4.2017.25202 Blendr 5.17.0 Google Translate 5.11.0 Ctrip (Chinese) 7.5.2 Google+ 6.13.0 Facebook 133.0 Grindr 3.12.3 FireChat 8.0.13 GroupMe 5.12.2 Garmin Connect 3.20 HERE Maps 2.0.25 Glide 6.1.4 hike messenger 5.0.2 Google App 31.0 Hot or Not 5.17.0 Google Docs 1.2017.26207 ICQ 6.13.5 Google Maps 4.34 Inbox 1.3.170703 imo 7.0.98 Instagram 10.31 Skype 8.2.1 InstaMessage 2.7.9 Snapchat 10.13.2.0 KakaoTalk 6.3.5 Swarm 4.17 Keeper 10.8.0 Twitter 7.3.2 Kik Messenger 11.25.1 WhatsApp 2.17.41 LINE 7.7.0 LinkedIn 9.1.38 Android: New and updated apps Mail.Ru 8.3 40 updated apps Meet24 1.7.52 MeetMe 12.3.0 µTorrent® - Torrent 3.43.328 Momo 8.0.3 Downloader Pinterest 6.30 Aliwangwang 4.4.4 QQ 7.1.5 ASKfm 4.4 QQ Browser 7.7.0 Booking.com 13.1.2 Runtastic 7.3.3 Chatous 3.9.68 SayHi 6.62 Chrome 59.0.3071.125 Skout 4.26.0 CM Security Browser 5.21.09 SwiftKey 2.1.0 Dropbox 56.2.2 Tango 4.2.221105 Endomondo 17.6.2 Taxify 3.16 Facebook 133.0.0.19.83 Text Free Ultra Texting 9.28.1 Facebook Messenger 127.0.0.18.81 Text Me Up 3.9.1 Flipboard 4.0.15 Text Me! 3.9.1 Glide 10.340.034 5 Cellebrite Release Notes UFED v6.3 Android: New and updated apps Physical extraction while bypassing user lock 40 updated apps (cont...) for 104 Exynos-based and Qualcomm-based Samsung devices Gmail 7.6.18.160170480.release Google Maps 9.57.1 Samsung GSM SM-G935F Galaxy S7 Edge, SC-05G (Galaxy S6), Inbox 1.51.161852796 SM-G9209 Galaxy S6, SM-G920FD Galaxy S6, Instagram 10.30.0 SM-G920I Galaxy S6, SM-G920T Galaxy S6, SM- Kik Messenger 11.26.0.16889 G920W8 Galaxy S6, SM-G925F Galaxy S6 Edge, Tango 4.2.220883 SM-G925I Galaxy S6 Edge, SM-G930W8 Galaxy S7, SM-G925W8 Galaxy S6 Edge, SM-G925T Threema 3.15 Galaxy S6 Edge, SM-G930F Galaxy S7, SM-G920A TigerText 6.9.544 Galaxy S6, SM-G935FD Galaxy S7 Edge, 404SC WeChat 6.5.10 (Galaxy S6 Edge), SM-G890A Galaxy S6 Active, WhatsApp 2.17.254 SM-G9200 Galaxy S6, SM-G9208 Galaxy S6, Whisper 9.1.0 SM-G9287 Galaxy S6 edge+, SM-N9200 Galaxy Badoo 5.21.2 Note 5, SM-G9280 Galaxy S6 Edge+, SM-G928C BeeTalk 2.3.5 Galaxy S6 Edge+, SM-G928T Galaxy S6 Edge+, Blendr 5.22.0 SM-G920T1 Galaxy S6, SM-G935K Galaxy S7 FireChat 8.0.44 Edge, SM-G930FD Galaxy S7 Dous, SM-N9208 Badoo 5.21.2 Galaxy Note 5, SM-N920C Galaxy Note 5, SM- N920T Galaxy Note 5, SM-G9250 Galaxy S6 Edge, BeeTalk 2.3.5 SM-G928F Galaxy S6 Edge+, SM-N920I Galaxy Blendr 5.22.0 Note 5, SM-G935W8 Galaxy S7 edge, SM-G935S