Difference between pages "Cellebrite UFED" and "SIMIS"

From ForensicsWiki
(Difference between pages)
Jump to: navigation, search
(Undo revision 8474 by Jessek (Talk))
 
 
Line 1: Line 1:
The Cellebrite 'Universal Forensic Extraction Device' , or UFED, is a unique and very cost effective mobile phone, smartphone, and PDA forensic device that is completely stand alone.
+
== SIMIS 2G ==
+
  
As of February 2009, the UFED is compatible with 1,874 mobile phones (including GSM, TDMS, CDMA, iDEN), with the standard package containing 71 different phone cables. The UFED has an intergrated SIM reader, with Wireless connection options also being integrated, such as IR and Bluetooth.
+
Feature Overview
 +
* Forensically safe - no facility for the modification of system or user data held on the SIM
 +
* Correctly handles PIN and PUK entry under controlled conditions.
 +
* Builds a database with unique file references for each SIM Card.
 +
* Searchable database with appropriate index categories.
 +
* Facility to read data from the SIMIS Mobile card interrogation unit.
 +
* Presents data in a printable format for reports.
 +
* Provides commented RAW data in a standard format for use in third party applications.
  
  
The UFED also supports native Apple iPOD Touch, and Apple iPHONE extraction on both 2G and 3G versions. This is clientless, and via a physical cable, and works on jailbroken and non-jailbroken devices.
+
The SIMIS package is flexible, with a range of options available to suit your needs. Typically a SIMIS package consists of:
 +
* PC based software application
 +
* PC/SC Smart Card Reader (USB or Serial)
 +
* Mini-Sim Adapter
 +
* USB License Key
  
 +
There is also the option to use a PC Card (PCMCIA) Reader for laptops and notebooks.
  
Using the MD5 Hash Algorithm, and SHA-256, subject data can be retrieved via logical extraction or via physical extraction (ie: hex dump). Moreover, all cable connectors from subject (source) side act as a write-blocker, being read only via the onboard hardware chipset. Extracted data includes:
+
== SIMIS 3G ==
 +
SIMIS 3G provides the examiner with broadly similar features and facilities to SIMIS 2, however the 3G 'SIM' holds a vast amount of user and network information. SIMIS 3G is a most comprehensive tool for the recovery and clear precise presentation of the data.
  
 +
SIMIS 3G presents the recovered data in its original language (Unicode fully supported), in an easily browsable format, complete with comprehensive print facilities and selectable scan depth. SIMIS 3G allows the examiner to view recovered data (including phone book contacts and numbers, SMS text messages, deleted text messages, time and date information and more )
  
- Handset data (IMEI, ESN, Manufacturer, Model No., ect.)
+
SIMIS3G provides access to all areas of the USIM, however SIMIS3G was designed to be intuitive and easy to use, requiring no detailed knowledge of the USIM operating system. SIMIS3G will generate human readable clear consice reports for each USIM interrogation, with optional additional user entered information such as, operator name, case ID, exhibit number, Handset type etc.
  
– Phonebook
+
Recovered data is secured against tampering using both MD5 and SHA-1 hashing techniques. Recovered data, reports and hashing codes are stored locally in unique folders to ensure integrity of data and ease of access.
+
– SMS and MMS messages
+
  
- SIM data
+
Dual SIMIS 2 and SIMIS3G licensing with Auto Detect of card format allows the user to harvest data in a clean simple environment with robust powerful tools, configured for everyday use.
  
- SIM cloning
+
SIMIS 3G has been evaluated tested and used by leading mobile intelligence examiners and forensic experts. Meeting or exceeding their every needs.
  
- Multimedia (images, videos, audio, ect.)
 
  
- Date and Time stamps (with GMT and daylight savings options)
+
SIMIS3G comprises of:
 
+
* USB card readers (PCSC Industry standard)
- Deleted data
+
* PC software on CDROM
 
+
* mini sim adapter and USIM storage card
- Fragmented or Partial data
+
* license
 
+
- HEX Dump
+
 
+
- and much more.
+
 
+
 
+
The UFED is flexible enough to be used in many environments, such as:
+
 
+
 
+
- Fixed to a desk in a crime lab connect to a PC
+
 
+
- Fixed to a desk in a crime lab (stand alone with no PC)
+
 
+
- Mobile in a car or at a VCP (connected to car 12V power)
+
 
+
- Mobile in the field (using integrated battery kit)
+
 
+
 
+
The UFED is completely stand alone, allowing extraction to a USB Thumb Stick or USB HDD. With this said, additional software is also included to create specialised reports of the retrieved raw data on a PC/Laptop. Customised reports give the additional option of containing your own logo, case file number, address, etc.
+
 
+
Standard hardware options include a portable mobile phone battery charger set (with 42 plug heads), Faraday bag, and 9-in-1 media card reader.
+

Revision as of 16:00, 23 September 2008

SIMIS 2G

Feature Overview

  • Forensically safe - no facility for the modification of system or user data held on the SIM
  • Correctly handles PIN and PUK entry under controlled conditions.
  • Builds a database with unique file references for each SIM Card.
  • Searchable database with appropriate index categories.
  • Facility to read data from the SIMIS Mobile card interrogation unit.
  • Presents data in a printable format for reports.
  • Provides commented RAW data in a standard format for use in third party applications.


The SIMIS package is flexible, with a range of options available to suit your needs. Typically a SIMIS package consists of:

  • PC based software application
  • PC/SC Smart Card Reader (USB or Serial)
  • Mini-Sim Adapter
  • USB License Key

There is also the option to use a PC Card (PCMCIA) Reader for laptops and notebooks.

SIMIS 3G

SIMIS 3G provides the examiner with broadly similar features and facilities to SIMIS 2, however the 3G 'SIM' holds a vast amount of user and network information. SIMIS 3G is a most comprehensive tool for the recovery and clear precise presentation of the data.

SIMIS 3G presents the recovered data in its original language (Unicode fully supported), in an easily browsable format, complete with comprehensive print facilities and selectable scan depth. SIMIS 3G allows the examiner to view recovered data (including phone book contacts and numbers, SMS text messages, deleted text messages, time and date information and more )

SIMIS3G provides access to all areas of the USIM, however SIMIS3G was designed to be intuitive and easy to use, requiring no detailed knowledge of the USIM operating system. SIMIS3G will generate human readable clear consice reports for each USIM interrogation, with optional additional user entered information such as, operator name, case ID, exhibit number, Handset type etc.

Recovered data is secured against tampering using both MD5 and SHA-1 hashing techniques. Recovered data, reports and hashing codes are stored locally in unique folders to ensure integrity of data and ease of access.

Dual SIMIS 2 and SIMIS3G licensing with Auto Detect of card format allows the user to harvest data in a clean simple environment with robust powerful tools, configured for everyday use.

SIMIS 3G has been evaluated tested and used by leading mobile intelligence examiners and forensic experts. Meeting or exceeding their every needs.


SIMIS3G comprises of:

  • USB card readers (PCSC Industry standard)
  • PC software on CDROM
  • mini sim adapter and USIM storage card
  • license