Difference between pages "Paraben Device Seizure" and "Paraben SIM Card Seizure"

From ForensicsWiki
(Difference between pages)
Jump to: navigation, search
(No longer reads like marketing)
 
(Overview)
 
Line 1: Line 1:
Paraben's Device Seizure is a handheld forensics tool that provides deleted data recovery, full data dumps of certain cell phone models, logical and physical acquisitions of PDAs, data cable access, and advanced reporting. The amount and quality of data you can get from a full physical acquisition surpasses the information you can get from a simple logical acquisition. Device Seizure does not change data on the device.  
+
Paraben has acquired SIMCon and has integrated it into SIM Card Seizure and Device Seizure. Recover deleted sms/text messages and perform comprehensive analysis of SIM card data. SIM Card Seizure takes the SIM Card acquisition and analysis components from Paraben's Device Seizure and puts it into a specialized SIM Card forensic acquisition and analysis tool. SIM Card Seizure includes the software as well as a Forensic SIM Card Reader. If you already have Device Seizure & the Device Seizure Toolbox, there's no need for you to get SIM Card Seizure as well because they contain the components to perform a forensic SIM Card acquisition and analysis. This tool is for the investigator who only wants to acquire SIM Cards and does not want to perform forensic exams of all cell phone data.
  
Note: Accessing phones via IrDA and Bluetooth should only be used when other data connections are not available due to the insecure nature of these communication methods.
+
SIM Card Seizure has unicode support to read multiple languages such as Arabic, Chinese, & Russian: Features:
  
Supported Cell Phone Manufacturers
+
    * Forensic SIM Card Reader Included
 +
    * Calculates MD5 & SHA1 Hash Values
 +
    * Search Function
 +
    * Recovers Deleted SMS Data*
 +
    * Bookmarking Options
 +
    * Report Creation Wizard
 +
    * Save Workspaces for Further Review
 +
    * Time Stamps Calculate GMT Offset
 +
    * Access to Paraben's Forum
 +
    * Access to Paraben's 24 Hour Support
  
* LG
+
Data Acquired from SIM Cards
* Motorola - Including iDen
+
* Nokia
+
* Siemens
+
* Samsung
+
* Sony-Ericsson
+
  
Paraben's Device Seizure supports PDAs with the following Operating Systems:
+
    * Phase Phase ID
* Palm through 5.4
+
    * SST SIM Service table
* Windows CE/Pocket PC/Mobile 5.0 and earlier
+
    * ICCID Serial Number
* BlackBerry 4.x and earlier
+
    * LP Preferred languages variable
* Symbian 6.0, 6.1, 7.X, 8.X, & 9.X
+
    * SPN Service Provider name
* EPOC 16/32 (Psion devices)
+
    * MSISDN Subscriber phone number
 +
    * AND Short Dial Number
 +
    * FDN Fixed Numbers
 +
    * LND Last Dialed numbers
 +
    * EXT1 Dialing Extension
 +
    * EXT2 Dialing Extension
 +
    * GID1 Groups
 +
    * GID2 Groups
 +
    * SMS Text Messages
 +
    * SMSP Text Message parameters
 +
    * SMSS Text message status
 +
    * CBMI Preferred network messages
 +
    * PUCT Charges per unit
 +
    * ACM Charge counter
 +
    * ACMmax Charge limit
 +
    * HPLMNSP HPLMN search period
 +
    * PLMNsel PLMN selector
 +
    * FPLMN Forbidden PLMNs
 +
    * CCP Capability configuration parameter
 +
    * ACC Access control class
 +
    * IMSI IMSI
 +
    * LOCI Location information
 +
    * BCCH Broadcast control channels
 +
    * Kc Ciphering key
  
Paraben's Device Seizure supports GSM SIM cards with use of a SIM card reader (which can be found in Device Seizure Toolbox).
+
SIM Card Seizure also acquires the whole catalog system with data in a tree-view presentation. Additionally, it can recover some deleted SMS data by analysis of unallocated space.
 
+
Paraben's Device Seizure also supports the following types of GPS Devices with more manufacturers to follow:
+
* Garmin
+

Revision as of 06:58, 5 February 2008

Paraben has acquired SIMCon and has integrated it into SIM Card Seizure and Device Seizure. Recover deleted sms/text messages and perform comprehensive analysis of SIM card data. SIM Card Seizure takes the SIM Card acquisition and analysis components from Paraben's Device Seizure and puts it into a specialized SIM Card forensic acquisition and analysis tool. SIM Card Seizure includes the software as well as a Forensic SIM Card Reader. If you already have Device Seizure & the Device Seizure Toolbox, there's no need for you to get SIM Card Seizure as well because they contain the components to perform a forensic SIM Card acquisition and analysis. This tool is for the investigator who only wants to acquire SIM Cards and does not want to perform forensic exams of all cell phone data.

SIM Card Seizure has unicode support to read multiple languages such as Arabic, Chinese, & Russian: Features:

   * Forensic SIM Card Reader Included
   * Calculates MD5 & SHA1 Hash Values
   * Search Function
   * Recovers Deleted SMS Data*
   * Bookmarking Options
   * Report Creation Wizard
   * Save Workspaces for Further Review
   * Time Stamps Calculate GMT Offset
   * Access to Paraben's Forum
   * Access to Paraben's 24 Hour Support 

Data Acquired from SIM Cards

   * Phase Phase ID
   * SST SIM Service table
   * ICCID Serial Number
   * LP Preferred languages variable
   * SPN Service Provider name
   * MSISDN Subscriber phone number
   * AND Short Dial Number
   * FDN Fixed Numbers
   * LND Last Dialed numbers
   * EXT1 Dialing Extension
   * EXT2 Dialing Extension
   * GID1 Groups
   * GID2 Groups
   * SMS Text Messages
   * SMSP Text Message parameters
   * SMSS Text message status
   * CBMI Preferred network messages
   * PUCT Charges per unit
   * ACM Charge counter
   * ACMmax Charge limit
   * HPLMNSP HPLMN search period
   * PLMNsel PLMN selector
   * FPLMN Forbidden PLMNs
   * CCP Capability configuration parameter
   * ACC Access control class
   * IMSI IMSI
   * LOCI Location information
   * BCCH Broadcast control channels
   * Kc Ciphering key

SIM Card Seizure also acquires the whole catalog system with data in a tree-view presentation. Additionally, it can recover some deleted SMS data by analysis of unallocated space.