Of course, you also need to determine whether such filtering is proper and correct for your examination and analysis.įor further information about Reader, look at the UFED Reader Manual by clicking on the Help, Manual pulldown menu. This reduces the number of images to a manageable number. To test this, click (in this order), the M, funnel, and J buttons, which will display only JPEG files greater than 100 KB in size. The funnel icon triggers the JGBP buttons by turning on the filter files by signature. The gray J, G, B, and P buttons find JPEG, GIF, BMP, or PNG images, respectively. The file never loads-all areas are grayed out. The green S, M, and L buttons can be used to filter the display based upon the size of the file S filters out files <30 KB in size, M filters out files <100 KB, and L filters out files <500 KB. I am trying to open a UFDR file with the latest version of the CellebriteReader. Note the buttons at the top of the right pane with the images: Rather than look at thousands of images, the Reader software provides a way to filter the output. Note that there are 2,969 images on the phone this is a lot to slog through. One particular items of interest will be images. As an example, if you clicked on Emails, you should see this screen:Ĭontinue looking at the various items of information on the phone. ed a virtuous man, though he have made many flips- Yet before we end, we muft anfwer a third cavil and in his life, (elfe there were none virtuous, tor in objection of their’s againft us, for altering and a- narty things wt offend all. In fact, you can navigate around the leftmost pane just as you would Windows Explorer. Note: Other drivers are necessary for the protection key (HASP drivers) they are installed automatically when installing the software. You can double-click any of the entries in the leftmost pane, labeled Project Tree. NOTE the information shown on the Extraction Summary page. It may take a few minutes to process the file.

Open the UFDR file by clicking on File, Open and selecting the name of the dump file. An anonymous reader quotes a report from Al Jazeera: Documents obtained by Al Jazeeras Investigative Unit (I-Unit) and Israeli newspaper Haaretz reveal how the Bangladesh government spent at least 330,000 on phone-hacking equipment made by an Israeli company, even though the two countries do not have diplomatic relations. For purposes of this exercise, you should feel free to look at any and all files that you want. Your task is to examine the data from the iPhone and try to determine who owns the phone, the service provider, roughly where (geographically) this phone has been used, the kinds of Web sites that the phone has visited, names of contacts, contents of e-mail and SMS messages, and any other information you find that might be of interest. You can also find different phone images from other types of phones on that page, as well. Locate the iPhone3GS_ report.ufdr file in the Resources folder of this exercise.įor other report formats, go to and select an HTML, PDF, or XML version of the iPhone 3GS Physical Acquisition. Locate the UFEDReader.exe file in the Resources folder of this exercise.

Ufed reader troubleshooting