Information Technology Reference
In-Depth Information
Features of Cellebrite UFED Physical Analyzer
The following are the features of Cellebrite UFED Physical Analyzer:
• Supports physical and advanced logical acquisition (file system acquisition)
• Extracts device keys required to decrypt raw disk images as well as keychain items
• Decrypts raw disk images and keychain items
• Reveals device passwords (not available for all locked devices)
• Allows to open an encrypted raw disk image file with a known password
• Supports passcode recovery attacks
• Advanced analysis and decoding of extracted applications data
• Reports generation in several popular formats—Microsoft Excel, PDF, HTML, and
so on.
• Ability to dump the raw file system partition to import and examine it in another
forensic tool
