Cellebrite OnRetrieval UFED Touch Manual Usuario

UFED Touch
User Manual
March 2014
Legal Notices
Copyright © 2014 Cellebrite Mobile Synchronization Ltd. All rights reserved.
This manual is delivered subject to the following conditions and restrictions:
This manual contains proprietary information belonging to Cellebrite Ltd. Such information is
supplied solely for the purpose of assisting explicitly and properly authorized users of the UFED
Touch.
 No part of this content may be used for any other purpose, disclosed to any person or firm, or
reproduced by any means, electronic or mechanical, without the express prior written permission
of Cellebrite Ltd.
 The text and graphics are for the purpose of illustration and reference only. The specifications on
which they are based are subject to change without notice.
 Information in this document is subject to change without notice. Corporate and individual names
and data used in examples herein are Fictitious unless otherwise noted.
WARNING: UFED Touch should be used only with the dedicated AC/DC adapter
supplied with this device.
WARNING: USB, Ethernet and target and source connectors should be connected only
to CE approved devices (according to IEC/EN 60065 standard).
WARNING: Make sure that all external connections to other devices (except for the
power adapter) are only indoor and SELV (safety extra low voltage, not exceed 42.4 V
peak or 60 VDC).
This device complies with part 15 of the FCC rules. Operation is subject to the following two
conditions:
1) This device may not cause harmful interference
2) This device must accept any interference received, including interference that may cause
undesired operation
2.5. Right panel ........................................... 31
Contents 2.6. Bottom Panel ....................................... 32
Chapter 3: Getting started................... 35

Chapter 1: Introduction ....................... 11 3.1. Turning the UFED Touch Unit
1.1. Overview .............................................. 11 On or Off ..................................................... 35
1.2. UFED Touch extraction types and 3.2. Working with UFED Touch ................... 37
device tools ................................................. 14 3.2.1. Starting the UFED Touch
application manually ................................. 37
1.3. UFED Touch accessories..................... 17
3.2.2. Home screen .................................. 38
1.3.1. Using cables and tips ..................... 18
3.2.3. Search function .............................. 42
1.4. Supported devices ............................... 21
3.2.4. Detect automatically ....................... 45
1.5. Cellebrite YouTube channel ................. 22 3.2.5. Application taskbar ......................... 49
3.2.6. Virtual keyboard ............................. 51
Chapter 2: Orientation to the UFED
Touch unit ............................................ 25 3.3. Waking up from sleep mode................. 53
2.1. Top view .............................................. 25 3.4. Charging the battery............................. 53
2.2. Front panel........................................... 28 3.5. Enabling wireless and Bluetooth
communication ............................................ 54
2.3. Back panel ........................................... 28
2.4. Left panel ............................................. 30
6
Chapter 4: Application License 8.1. Performing a file system extraction .... 103
Activation ............................................. 55 8.2. The file system extraction folder ......... 108
Chapter 5: Extracting Data to PC........ 61 Chapter 9: Physical extraction ......... 109
Chapter 6: Logical extraction ............. 73 9.1. Performing a physical extraction ........ 109
6.1. Performing logical extraction ................ 74 9.2. The Physical Extraction folder ............ 117
6.1.1. Connect mobile device ................... 75
Chapter 10: SIM card functionality ... 119
6.1.2. Select phone memory..................... 76
10.1. SIM data extraction .......................... 119
6.1.3. Select extraction location ................ 78
10.1.1. Performing SIM data extraction .. 119
6.1.4. Select content types ....................... 79
10.1.2. The extracted SIM data folder .... 129
6.1.5. Extraction in progress ..................... 82
6.1.6. The extracted data folder ................ 86 10.2. Clone SIM ........................................ 130
10.2.1. Cloning an existing SIM card ID.. 131
Chapter 7: Password extraction ......... 89 10.2.2. Entering SIM data manually........ 138
7.1. Performing password extraction ........... 89 10.2.3. Creating GSM test SIM............... 147
7.2. The extracted passwords folder ........... 94
Chapter 11: Device tools ................... 151
7.3. Disabling the password ........................ 95
11.1. Bluetooth Scan................................. 152
Chapter 8: File system extraction .... 103 11.2. Switch to CDMA offline mode ........... 155
Contents 7
11.3. Test peek/poke functionality ............. 157 12.6. Users permissions............................ 186
11.4. Activate TomTom trip log ................. 159 12.6.1. Permission management ............ 189
11.5. Uninstall Windows Mobile Client ...... 159 12.7. Network............................................ 197
11.6. Uninstall Android client ..................... 160 Chapter 13: Special cables ............... 199
11.7. Exit Odin mode ................................ 160 13.1. Device power-up cable ..................... 199
Chapter 12: Settings .......................... 161 Chapter 14: Technical
12.1. General settings ............................... 162 specifications ..................................... 201
12.1.1. Managing the custom list ............ 163 14.1. General specifications ...................... 201
12.1.2. Changing the application interface 14.2. Battery ............................................. 202
language ................................................ 169
12.1.3. Mobile extraction client ............... 173 14.3. Power supply ................................... 202
12.2. Report settings ................................. 174 14.4. Network............................................ 203

12.2.1. Managing report fields ................ 177 14.5. I/O interfaces.................................... 204
12.3. System settings ................................ 180 14.6. Dimensions and weights .................. 205
12.4. License settings ............................... 182 14.7. Temperature .................................... 205
12.5. Version details ................................. 184 Chapter 15: Extracting Android
12.5.1. Updates and versions ................. 185 devices ............................................... 207
8
15.1. Android extraction methods.............. 207

15.1.1. Android debugging bridge
method ................................................... 208
15.1.2. Bootloader extraction.................. 211
15.2. Performing File System extraction for
an Android device ..................................... 212
15.2.1. Locked Motorola devices ............ 212
15.2.2. Locked HTC, Huawei, and ZTE
devices ................................................... 213
15.2.3. Other locked devices .................. 214
15.2.4. Unlocked devices ....................... 216
15.3. Technical terms ................................ 217
Chapter 16: Appendix ........................ 219

Contents 9
Chapter 1: Introduction
UFED Touch is a new generation handheld unit that empowers law enforcement, military,
intelligence, corporate security, and e-discovery personnel to capture critical forensic
evidence from all mobile devices. This includes mobile phones, handheld tablets, portable
GPS devices, and devices manufactured with Chinese chipsets. With an intuitive
touch-screen interface and an integrated battery, UFED Touch is portable, easy to operate,
and can be used in the forensic lab and field.
1.1. Overview
UFED Touch enables you to:
 Perform physical, file system, and logical extraction of device data and passwords.
Capabilities may vary, based on the UFED Touch product purchased - UFED Touch
Logical or UFED Touch Ultimate.
 Extract vital data such as call logs, phonebook entries, text messages (SMS), pictures,
videos, audio files, ESN IMEI, ICCID and IMSI information and more, from a wide range
of mobile devices.
12
 Extract data from the widest selection of operating systems, such as Apple iOS,
Blackberry, Android, Symbian, Microsoft Mobile, and Palm OS.
 Clone the SIM ID, which allows you to extract phone data while preventing the mobile
device from connecting to the network. It can also help if the SIM card is missing.
 Extract the data from a mobile device either by a cable based connection (serial or USB)
or a Bluetooth wireless connection. The tips and cable kit consists of four master cables
and various tips.
The extracted data can be saved to any standard USB mass storage drive, SD card, or PC,
and then generated in the form of clear and concise reports.
Chapter 1: Introduction 13
Cellebrite’s industry expertise provides reliability and ease-of-use, and ensures the broadest
support for mobile devices, including updates for newly released models before they are
available to the market.
Figure 1: UFED Touch unit

14
1.2. UFED Touch extraction types and device tools

UFED Touch includes a range of data extraction types that can be accessed through the
Select Extraction Type screen.
NOTE: The available extraction functionalities may vary, based on the type of product
purchased; the UFED Touch Logical or the UFED Touch Ultimate product.
Table 1-1: Functionalities of the UFED Touch products

Functionality UFED Touch Logical UFED Touch Ultimate
Logical Extraction Yes Yes
SIM Data Extraction Yes Yes
Password Extraction Yes Yes
Clone SIM Yes Yes
File System Extraction Not available Yes
Physical Extraction Not available Yes
The extraction types are:

 Logical extraction (page 73)
Logical Extraction enables the extraction of various data types. This includes call logs,
phonebook entries, SMS text messages, MMS, emails, calendar events, multimedia files
(images, videos, and so on), and more.
 SIM data extraction (page 89)
Sim Data Extraction enables the extraction of information from a SIM or USIM card to a
removable storage device or PC.
 File system extraction (page Error! Bookmark not defined.)
File System Extraction enables a full system extraction of a source mobile device's
memory.
 Password extraction (page Error! Bookmark not defined.)
Password Extraction enables the extraction of passwords from a source mobile device
and displayed directly in the Password Obtained screen, or saved.
 Clone SIM (page 130)
Clone SIM ID copies a SIM ID from one SIM card to another SIM or to a UFED SIM ID
Access Card.
16
 Physical extraction (page 151)

Physical Extraction uses advanced methods in order to extract a physical bit-for-bit
image of the flash memory of a mobile device, including unallocated space. Unlike
conventional logical extraction processes, physical extraction bypasses the mobile
device’s operating system, and extracts data from the phone's internal flash memory
directly. Unallocated space may contain deleted items such as SMS, call logs, phonebook
entries, pictures, and videos.
All types of extractions can be done to a removable storage device or PC.
The Device tools (page 151) menu tab is also located in the Select Extraction Type screen,
and includes:
 Bluetooth scan
 Switch to CDMA offline mode
 Odin mode
 Test Peek/ Poke functionality
 Activate TomTom trip log
 Uninstall Windows Mobile Client
 Uninstall Android Client
1.3. UFED Touch accessories

The UFED Touch kit includes connection cables and tips. These are used in order to connect
mobile devices to UFED Touch.
Figure 2: UFED Touch Cables and tips
The UFED Touch Ultimate kit contains tips and cables for logical, file system, and physical
extractions.
The UFED Logical kit contains tips and cables for Logical Extraction only.
18
1.3.1. Using cables and tips

The cables and tips set includes up to various adapter cables (the number of cables depends
on the UFED product and kit purchased). Each cable has a letter and name for example: A
Adapter – USB.
Figure 3: Single cable

For easy recognition, the tips are color coded and numbered; the color represents the vendor.
Figure 4: UFED Touch tip (example)
Before each extraction, the required cable and tip number and color is specified in the Source
area of the Select Content Types screen.
20
Figure 5: Enlargement of notification

1.4. Supported devices

To find out which mobile devices are supported in UFED Touch and which data extraction
capabilities are available for every mobile device use one of the following:
The UFED <version no>
Supported Phone List file is
delivered with every UFED
software version update. The
Microsoft Excel file contains
two worksheets:
 The UFED Logical
sheet lists the mobile
devices supported for
logical extraction.
 The UFED Physical Figure 6: Supported devices list Excel file
sheet lists the mobile
devices supported for
physical, file system,
and password
extractions.
 UFED Phone Detective (devices supported for logical extraction only).

22
 On Cellebrite's website:
 Logical extraction:
http://www.cellebrite.com/mobile-forensics-products/forensics-products/_ufed-logica
l/ufed-logical-supported-phones.html
 Physical extraction:
http://www.cellebrite.com/mobile-forensics-products/forensics-products/_ufed-ultima
te/ufed-physical-supported-phones.html
1.5. Cellebrite YouTube channel

For your convenience, a selection of useful videos demonstrating typical workflows and
common procedures are available at www.youtube.com/cellebriteufed (http://www.).
Chapter 2: Orientation to the UFED Touch unit
This section describes the layout and components of the UFED Touch unit.
2.1. Top view

Access the UFED Touch application through the UFED Touch screen. Navigate the
application using a stylus or your index finger. The screen can be tilted into position as
desired.
26
The following components can be found in the top panel:
Figure 7: UFED Touch top view

Chapter 2: Orientation to the UFED Touch
unit 27
The LED indicator panel displays the following:
Figure 8: Top panel LED indicators

28
2.2. Front panel

The SIM card slot is located in the front panel of the UFED Touch unit.
Figure 9: UFED Touch front panel
2.3. Back panel

The back panel of the UFED Touch unit includes multiple ports and a security slot. The ports
are protected by a cover.
To gain access to the back panel, flip the cover open. The cover is hinged to the unit.
unit 29
The back panel includes the following components:
Figure 10: UFED Touch back panel

30
2.4. Left panel

The left (source) panel of the UFED Touch unit includes the following components:
Figure 11: UFED Touch left panel

unit 31
2.5. Right panel

The right (target) panel of the UFED Touch unit includes the following components:
Figure 12: UFED Touch right panel

32
2.6. Bottom Panel

Access to the unit's battery is through the bottom panel. This panel is covered by a protective
cover which includes a carry handle and brackets. The handle, brackets, and protective cover
must be removed in order to reach the battery housing.
The bottom panel includes the following components:
Figure 13: UFED Touch bottom panel

unit 33
The handle strap and brackets must be removed in order to remove the protective cover. The
brackets are attached to the UFED Touch unit with four Phillip screws.
Remove the protective covering to access the battery storage area of the UFED Touch unit.
Figure 14: UFED Touch bottom panel with protective covering removed
34
Chapter 3: Getting started
3.1. Turning the UFED Touch Unit On or Off

The On/off switch of the UFED Touch unit is located on the right (target) panel.
Figure 15: Device right panel – On/Off switch

36
To turn the UFED Touch unit on:

1) Push the power switch located on the right panel of the device to the On position.
The LED power indicator lights up and the startup sequence begins.
Figure 16: Power indicator
During the startup sequence:

 The operating system (Microsoft® Windows® XP) launches automatically.
 The UFED Touch application launches automatically.
To turn the UFED Touch unit off:
NOTE: Turning off the UFED Touch unit is similar to the standard process of turning a
Windows based computer off.
1) Close the UFED Touch application.
2) Select Start > Turn Off Computer > Turn Off.
To perform an immediate shut down, pull the power switch to the left and hold it until the
device powers down.
Chapter 3: Getting started 37
3.2. Working with UFED Touch

3.2.1. Starting the UFED Touch application manually
When you turn on the UFED Touch unit, the UFED Touch application is launched
automatically. If the application does not launch automatically or if you had to previously quit,
use one of the following to launch the application:
 Tap the UFED Touch application shortcut located in the UFED shortcuts panel at the
right of the screen.
 Double-tap the UFED Touch icon located on the desktop.
38
3.2.2. Home screen

All extraction functionality available in UFED Touch is driven by Vendor and Model of the
device in question. UFED Touch will first ask that the user select the vendor and model of the
device in question. UFED Touch will then determine what functions are available for this
specific device and will present the relevant functions. The possible functions are:
 Logical extraction (page 73)
 Password extraction (page Error! Bookmark not defined.)
 File system extraction (page Error! Bookmark not defined.)
 Physical extraction (page 151)
There is also the option to use Device Tools or SIM Card functionality.
 Device tools (page 151)
 Clone SIM (page 130) and SIM data extraction (page 89)
On the home screen the user is presented with the Select Vendor screen, where the vendor
of the device is chosen.
40
After choosing the Vendor, the application presents the Select Model screen where the
specific model of the device is chosen:
Having chosen the Vendor and the Model, UFED Touch will determine what extraction
functions are available for this combination and present those functions as follows:
42
3.2.3. Search function

To perform a search for the mobile device:
1) In the Select Vendor screen, tap the keyboard icon in the top toolbar to activate the
device keyboard.
2) Begin typing the vendor name. As you type each letter, the list of vendors is reduced to
meet the criteria.
These letters appear in the Search field.
The various options appear in the screen. In this example "sa" is the search criteria, and
the vendors that match the criteria are displayed.
3) Select the vendor.
44
The Select Model screen appears.
4) In the Select Model screen tap to activate the device keyboard.

5) Start typing the letters of the model.

These letters appear in the search field.
The matching options appear in the screen.
6) Select the device model type from the list.
Use the down arrow to view additional models. If the vendor type is known, it is
recommended the Search function is used.
3.2.4. Detect automatically

To use Autodetect function to locate the mobile device:
1) Connect the mobile device to the UFED Touch unit.
In the event that the device has not been connected, a waiting for a device to be connected
prompt appears with a red Source arrow flashing on the left side of the screen.
46
The following screen appears.
If the connected device cannot be recognized by the system, a message prompts you to
select the device manually.
48
In the event that multiple matches are found, the Select Autodetected Model screen
appears.
2) Select the relevant model.

3.2.5. Application taskbar

The application taskbar is located at the top of the touch screen.
Figure 17: Application taskbar

50
Table 3-1: Application taskbar icons and descriptions

Icon Description
Wireless network connection ( = Disconnected, = Connected)
Show/Hide the virtual keyboard
Return to home screen
Display the Settings (page 161) screen from where the device settings can be
defined.
Quit the application
Battery indicator
3.2.6. Virtual keyboard

The virtual keyboard allows you to type text whenever needed.
Figure 18: Virtual keyboard
 To show the virtual keyboard, tap the keyboard icon in the application taskbar.
 To hide the virtual keyboard, tap the icon in the top right corner of keyboard panel.
52
NOTE: The virtual keyboard is not limited for use in the UFED Touch application. It can be
accessed by tapping the keyboard icon in the UFED shortcuts panel at the right of the
screen.
Table 3-2: Virtual keyboard icons and descriptions
Icon Key Function
Switch to numbers and symbols mode
Switch to letters mode (from numbers and symbols mode
Create a new line
Delete the last character
Switch between the keyboard layouts of supported languages

Icon Key Function
Activate CAPS LOCK
NOTE: Any external USB keyboard can be connected to a USB port in the back panel, or a
Bluetooth keyboard paired with the Bluetooth interface of the device.
3.3. Waking up from sleep mode

The UFED Touch unit enters sleep mode after being idle for 20 minutes in order to reduce
power consumption.
To wake the unit up:
 Press any of the navigation buttons on the top of the unit.
3.4. Charging the battery

To charge the UFED Touch battery, connect the supplied power adapter to the power supply
jack on the right (target) panel of the device.
54
The battery indicator is located within the LED panel and lights up when the power adapter is
connected and display one of the following color indications:
 Orange - battery is charging
 Green - battery is fully charged
3.5. Enabling wireless and Bluetooth communication

The UFED Touch unit is equipped with integrated wireless and Bluetooth communication
interfaces, configurable in the operating system Device Manager list, and can be used to
connect UFED TouchUFED Touch to standard WLAN networks and Bluetooth-enabled
devices using the standard WLAN and Bluetooth features of the operating system.
NOTE: For information regarding the use of Wi-Fi/Wireless Networks and the operating
system’s wireless features, contact your IT manager or system administrator.
When using the wireless interfaces when the device is in battery operation mode increases
battery power consumption, resulting in a shorter operation time. When the wireless
interfaces are disabled, the WLAN and Bluetooth interfaces are turned off and cannot be
turned on or used by the operating system, thus saving battery power.
To enable or disable the wireless interfaces:
 Turn the Wi-Fi switch, located in the back panel of the UFED Touch unit, to ON or OFF.
Chapter 4: Application License Activation 55
Chapter 4: Application License Activation

Before you can use the UFED Touch application, you need to install the application license
provided by Cellebrite in your my.cellebrite.com account.
1) Power on your UFED Touch unit.
56
The UFED License Activation screen appears.
2) On a computer, log in to your account at my.cellebrite.com.

The Register My Device dialog box opens.
3) Register the new UFED Touch unit – enter the UFED Touch serial number and UFED
Touch ID as they appear in the UFED Touch unit activation window.
4) Click Add Device.
58
The My Devices window opens listing your UFED Touch unit.
5) Select your UFED Touch unit in My Devices and tap Retrieve Licenses.
The license is sent via email to your account as defined in MyCellebrite.

6) Copy the license.dat file to the root directory of a USB flash drive.
7) At the back of the UFED Touch unit, flip the cover open to gain access to the back panel.
Figure 19: UFED Touch back panel
8) Insert the USB drive into the USB EXT 1 or 2 port.

9) On the UFED Touch unit, in the UFED License Activation screen, tap USB and follow the
instructions on the unit.
Chapter 5: Extracting Data to PC
NOTE: Extraction to a PC with Windows Vista Operating System is not supported.
1) Do one of the following:
 Connect the UFED unit to your PC using a USB to mini-USB cable, utilizing the port
marked “PC” located on the top of your UFED unit. Your PC may prompt you to install
drivers (refer to the UFED Touch User Manual).
 Connect your UFED unit to your PC using the UFED to PC cable (U-441) provided in
the UFED Standard and ruggedized kits. Your PC may prompt you to install drivers
(refer to the UFED Touch User Manual).
Figure 20: UFED to PC cable

62
2) Connect the source device, using the appropriate cable, to the left USB port of the UFED
device.
3) On the UFED unit:
a) From the Main Menu, do one of the following:
 For a physical extraction, select Physical Extraction.
 For a file system extraction, select File System Extraction.
b) Select the manufacturer of the device from the Select Model menu.
c) Select the model of the device.
4) On the PC, click Start > UFED Physical Analyzer to open the UFED Physical Analyzer.
The UFED Physical Analyzer application opens.
5) Click the Read Data from UFED icon in the application toolbar.
Chapter 5: Extracting Data to PC 63
The UFED Downloader window appears.
6) In the Download path area, click and browse to the desired location for the
extraction.
Tip: Click Open Target Folder to display the content of the selected target folder.
7) On the UFED Touch unit, in the Select Extract Location screen, select PC.
64
8) Follow the prompts in the UFED Touch unit until prompted to start the download
procedure.
9) On the PC, in UFED Physical Analyzer, click Start in the UFED Downloader window.
The data transfer from the device to the PC starts.

66
During the extraction process, the Extraction in Progress screen appears on the UFED
unit:
On the UFED unit, you are prompted to select the types of multimedia to include in the
extraction:
68
10) Make sure that the media types that you want to include in the extraction are marked with
. To cancel the extraction of a particular multimedia type, click on the multimedia
name.
11) Click OK.
The extraction process continues. When complete, the Phone Extraction Summary
window appears on the UFED Touch unit.
70
On the PC in UFED Physical Analyzer, the following message appears:
12) Click Yes.

The extraction opens in UFED Physical Analyzer and the Extraction Summary screen is
displayed.
72
Chapter 6: Logical extraction
The Logical Extraction function enables you to extract various types of data, such as call logs,
phonebook records, SMS text messages, calendar events, and multimedia files (images,
videos, etc.) from a source device and saved to your PC or to a removable storage device, as
desired.
In addition, data can be extracted from the following Android apps:
Facebook, Facebook Messenger, Google+, PingChat!, Skype, Twitter, Viber, Yahoo
messenger, Whatsapp, TigerText, Dropbox, QIP, Kik Messenger, Evernote, Kakao Talk,
ICQ, and Vkontakte.
Data extracted from Android apps can be analyzed using UFED Logical Analyzer (although
the data is not included in UFED HTML and XML reports).
NOTE: The available types of extracted data may vary depending on the source device
manufacturer and model. The supported data types are listed in the UFED Phone
Detective or within the UFED Supported Phone List Microsoft Excel file.
74
6.1. Performing logical extraction

To perform a logical extraction from a mobile device:
 In the home screen after choosing Vendor and Model, click Logical Extraction.
Chapter 6: Logical extraction 75
6.1.1. Connect mobile device

NOTE: The following screen appears only when more than one connection option is
available.
NOTE: For Apple devices use the generic option that is available in the Model selection
screen.
 Select the connection type from the options shown.

76
6.1.2. Select phone memory

Data can be extracted from the device memory, memory cards and SIM memory of the
device. All memories can be selected or only one. The types of memories can vary between
devices. Where only a single memory is available, this screen is not displayed.
To select a phone memory:

1) The Phone memory selection box is selected by default. It can be deselected if desired.
2) Select any other memories, as desired.
3) Tap Next to continue.
The Select extraction location screen appears.
78
6.1.3. Select extraction location
NOTE: The UFED Physical Analyzer Application must be installed on the PC before the
PC option can be selected. See Extracting Data to PC (page 61).
To select a target location:

1) In the Select Extract Location screen, select the desired target location.
 Select Removable Drive to extract the device data to a USB Flash drive connected
to the UFED Touch TARGET USB port (on the right panel) or SD card inserted to the
SD card reader (on the back panel).
 Select PC to extract information directly to the PC.
The Select Content Types screen appears.
6.1.4. Select content types

Multiple content types are listed. The types are displayed in three different ways:
 Types selected by default – shown with a check mark.
 Types available for selection – shown without check marks.
 Types not available – shown with a cross.

80
To select content types:

1) Select the additional content types required to be included in the information extracted
from this device.
2) Tap Select All to select all the available types.
NOTE: Only content types that are supported by the selected device are enabled for
selection. Unsupported content types appear with a cross.
3) Tap Next to continue.
The Waiting for Device screen appears.
82
6.1.5. Extraction in progress
During the extraction process, the progress bar for the Source and then the Target is
active.
4) Tap the Keyboard button to enter a case number and then tap OK.
84
When extraction is complete and if required, the Source Instructions screen appears (this
depends on the device model).
5) Follow the instructions to return the mobile device settings to the correct settings.
6) Tap Continue.
The Phone Extraction Summary screen appears.
7) To end the process and return to the home screen, tap Finish.
86
6.1.6. The extracted data folder

At the end of the data extraction process, the extracted data is saved in the location you
selected.
NOTE: The extracted data folder is named "UFED" with the selected device name, the
IMEI/MEID info. and the extraction date. For example, "UFED Nokia GSM 3710 fold
356935030349119 2011_06_11 (001)"
The extracted data folder contains:
 Multimedia files folders named Audio, Images, Ringtones, and Video folders,
containing each of the respective type of media files.
 Phone extraction report files in HTML and XML formats. (One HTML report per
content type)
 UFED Manager files of the extracted calls log (*.clog), phonebook (*.pbb), SMS
messages (*.sms), and calendar (*.cal) Email(*.Email), MMS(*.MMS) and IM(*.IM)
data.
 UFD file.
NOTE: UFED Manager files are generated only for data types that contain items.
The XML file can be viewed by both the UFED Logical Analyzer and the UFED Physical
Analyzer.
Chapter 7: Password extraction
The Extract Password function can extract the password from a device.
7.1. Performing password extraction

To extract passwords from a mobile device:
1) In the home screen after choosing Vendor and Model, tap Password Extraction.
90
2) The Select Extraction Location screen appears.
3) In Select Extract Location, select the desired location.

 Select Display Only to display the extracted passwords on the UFED Touch display
without saving them to any media.
Chapter 7: Password extraction 91
 Select Removable Drive to save the extracted passwords to a USB drive connected
 Select PC to save the extracted passwords to the PC.
The Waiting for Device screens appears.
4) Connect the source device.

92
5) Tap Continue.
The Extraction in Progress screen appears.
At the end of the extraction process, the extracted passwords are displayed in the
Passwords screen.
6) Tap Continue to display a summary of the passwords extraction process.

94
7.2. The extracted passwords folder

At the end of the passwords extraction process, the extracted passwords are saved to a text
file named Passwords.txt at the location you selected during the data extraction process.
NOTE: The text file is located inside a folder named "Password" with the name of the selected
device name and the extraction date. For example, "Passwords Iden i9 2011_06_11
(001)"
7.3. Disabling the password

You can disable the password for the following Samsung models:
SamsungCDMA SPH-M820 Galaxy Prevail (Android)
SamsungGSM SGH-T499 Dart (Android)
SamsungGSM SGH-T589 Gravity Smart (Android)
SamsungGSM SGH-i857 Doubletime (Android)
SamsungGSM GT-i5500 Europa Galaxy 5 (Android)
SamsungGSM GT-i5510 Galaxy (Android)
SamsungGSM GT-S5570 Galaxy Mini (Android)
SamsungGSM GT-S5660 Galaxy Gio (Android)
SamsungGSM GT-S5670L (Android)
SamsungGSM GT-S5830 Ace (Android)
96
When you disable the password for these models using UFED Touch, UFED Touch disables
the code that enables the password.
Each device model has a slightly different process, depending on the phone lock combination
and how the model connects to UFED Touch.
1) In the home screen, choose Vendor and Model and then tap Password Extraction.
2) The Select Extraction Location screen appears.
3) Tap Display Only.

NOTE: Do not select Removable Drive or PC.
98
The Waiting for Device screens appears.
4) Follow the on-screen instructions to successfully connect to the device to UFED Touch.
NOTE: For the greatest chance at success, press Continue immediately.
The Executing screen appears.
5) When the Executing screen is display, click Continue.

100
6) Attempt to unlock the device using any password.

 If the device does not unlock, tap Abort, and repeat steps 5-6.
 If the device unlocks, tap Continue.
The device is disabled until another lock is set on the device.

102
8) Tap Continue.
9) Tap Continue to finish.

Chapter 8: File system extraction
The File System Extraction function enables you to perform a full system extraction from a
device to a removable storage device or PC.
8.1. Performing a file system extraction

1) In the home screen after choosing Vendor and Model, tap File System Extraction.
The Select Extraction Location screen appears.

104
2) Tap Next.
Chapter 8: File system extraction 105
3) Select the correct cable and tip for the mobile device based on the information written in
the screen.
4) Change the device settings according to the instructions
5) Connect the device.
106
6) Connect the device to the UFED Touch SOURCE port. A red source arrow continues to
flash on the left of the screen until the device is connected.
7) Tap Continue.
Chapter 8: File system extraction 107
active.
NOTE: For QCP and Samsung MTK devices, an estimation of the time the extraction will
take is displayed.
When extraction is complete the File System Extraction Summary screen appears.
108
8.2. The file system extraction folder

At the end of the file system extraction process, the extracted data is saved in the location you
selected previously (see Performing a File System Extraction (page 103).
NOTE: The extracted data folder is named "FileSystemDump" with the selected device model
and name and the extraction operation date. For example, "FileSystemDump Nokia
GSM Nokia 2626 2014_03_12 (001)"
 Zipped archive of the device file system containing files and folders in the same
structure they were extracted.
 UFD file containing the system extraction information, used by the UFED Physical
Analyzer application.
 PM file.
The File System extraction can be viewed using the UFED Physical Analyzer.
Chapter 9: Physical extraction 109
Chapter 9: Physical extraction

The Physical Extraction function enables you to perform a physical bit-for-bit image of the
source device memory to a removable storage device or PC.
9.1. Performing a physical extraction

1) In the home screen after choosing Vendor and Model, tap Physical Extraction.
The Select Extraction Location screen appears.

110
2) Tap ADB or Boot Loader (recommended).

3) Tap Next.
112
Depending on whether or not the device requires the UFED Device Adapter, the Waiting
for Device or Waiting for Device Adapter screen appears.

 Select the correct cable and tip for the mobile device based on the instruction on the
screen.
 Change the device settings according to the instructions.
 Connect the device to the UFED Touch SOURCE port. A red source arrow
continues to flash on the left of the screen until the device is connected.
5) Tap Continue.
114
active.
NOTE: For the following devices, an estimation of the time the extraction will take is
displayed: Blackberry, Nokia BB5, QCP (SamM550, LgEmergency, LgP0),
Android, (generic and SPF), SpreadTrum, Samsung GSM (MTK, LGInfinion,
and BCM2133), and Palm.
When extraction is complete the Physical Extraction Summary screen appears.
116
In the event that the system cannot connect to the device the Extraction Summary screen
appears with an error message.
7) Follow the instructions on the screen.

8) Tap Retry.
9.2. The Physical Extraction folder

At the end of the physical extraction process, the extracted data is saved in the location you
selected during the physical extraction process. See step 5 of Performing a Physical
Extraction.
NOTE: The extracted data folder is named "Physical" with the selected device name and the
extraction operation date. For example, "Physical Samsung GSM SGH-A711
2011_06_12 (001)"
 Binary file of the device memory.
 UFD file containing the system extraction information, used by the UFED Physical
Analyzer application.
The extraction information can be viewed using the UFED Physical Analyzer. You can double
tap on the UDF file or open it via the GUI.
Chapter 10: SIM card functionality
The SIM Card functions enable you to perform various SIM card related functions:
- Sim data extraction
- Clone SIM
- File system extraction
10.1. SIM data extraction

The SIM Data Extraction function enables you to perform logical extraction from a SIM or
USIM card to a removable storage device or PC.
10.1.1. Performing SIM data extraction

The following example is performed using a SIM Card.
To perform the SIM Data Extraction:
1) In the home screen, tap .

120
The Select Model (SIM reader) screen appears. Here you pick the type of SIM card.
Information can be extracted from either Iden SIM or SIM card.
2) Tap either Iden SIM or SIM Card.

Chapter 10: SIM card functionality 121
3) The Select Extraction Type screen appears.

122
4) Select an option. The Select Extraction Location screen appears.
NOTE: The UFED Physical Analyzer Application must be installed on the PC before the
PC option can be selected. See Extracting Data to PC (page 61).
5) Select the desired location:

 Select Removable Drive to extract the device data to a USB Flash drive connected
 Select PC to extract information directly to the PC.
The Select Content Types screen appears.
124
In the Select Content Types screen, select the content types that you want to extract from
the list of options on the center of the screen.
To select all the available data types, tap Select All under the data types list (Select All
appears after you tap one or more of the options on the screen).
6) Tap Next.
7) Insert SIM card into the SIM card reader slot located in the middle of the front panel.
NOTE: The SIM red arrow prompt at the bottom of the screen continues to flash
even after the SIM card has been inserted into the SIM reader slot.
8) Tap Continue.
126
9) If prompted, select which of the SIM card partitions to read.

10) Tap the Keyboard button to enter a case number and then tap OK.
When the extraction process is complete, the SIM Extraction Summary screen appears,
displaying a summary of the extraction process.
128
In the event that the Phone Extraction option was selected, the Phone Extraction
Summary screen appears.
11) To end the process and return to the home screen, tap OK.
10.1.2. The extracted SIM data folder

At the end of the SIM data extraction process, the extracted SIM data is saved in the location
you selected previously.
NOTE: The extracted SIM data folder is named "UFED SIM card" with the extraction date and
counter: "UFED SIM card SIM card <DATE> (001)"
If you selected to extract to the local drive, the extracted SIM data folder is located inside the
application’s Backup folder.
The extracted SIM data folder contains a detailed report of extracted data in both HTML and
XML formats and call log file (*.clog).
130
10.2. Clone SIM

The Clone SIM ID function enables you to copy the SIM ID from one SIM card to a UFED SIM
ID Access Card.
Cloning the SIM ID provides a suitable solution to several problems facing forensic
examiners, by allowing extraction of the device data:
 While preventing the cellular device from connecting to the network, rendering the
device invisible to the network without the ability to send or receive calls or SMS
messages, and thereby preserving the device's current information. (No Faraday Bag
is required to block RF signals).
 When the original SIM is not available, by manually programming the ICCID or IMSI
into the Cloned SIM ID Card to mimic the original missing card.
 When the SIM card is PIN locked, by cloning the identification of the original SIM,
which allows extraction of the device data without losing critical data including call
history and SMS messages.
There are three different ways that a SIM card can be cloned:
 Clone an existing SIM card - to create a cloned SIM to use to extract device data
without a network connection. See Cloning an existing SIM card ID.
 Manually enter SIM data - to manually program the ICCID and IMSI to the cloned SIM
card. See Entering SIM data manually.
 Create GSM Test SIM - The GSM test SIM card is used to extract device data when
the original SIM is not available – a default ICCID and IMSI are programmed into the
Cloned SIM ID Card to mimic the original missing card. See Creating GSM test SIM.
10.2.1. Cloning an existing SIM card ID

1) In the home screen, tap Clone SIM.

132
NOTE: The SIM red arrow prompt at the bottom of the screen flashes even after you insert
the SIM card into the SIM reader slot.
2) Insert the SIM card into the UFED Device Adapter.
3) Tap Continue.
The Select Source screen appears.
4) Tap Clone an existing SIM card

134
The Clone SIM ID prompt appears.
5) Check that the right SIM was inserted into the SIM card reader slot.
6) Tap Continue.
If the SIM card is partitioned, a prompt appears.
7) Select which of the SIM card partitions to read.

The Extraction in Progress Source screen appears.
136
When the information has been extracted from the SIM the Insert Target Card prompt
appears.
8) Remove the original SIM card from the UFED Device Adapter SIM card reader.
9) Insert a UFED SIM ID Access Card into the UFED Device Adapter SIM card reader.
10) Tap Continue.
At the end of the data process, a summary of the SIM cloning process is displayed,
detailing the ICCID and IMSI information of the cloned SIM card.
138
10.2.2. Entering SIM data manually

1) In the home screen, click Clone SIM.

2) Insert the UFED SIM ID Access card.
3) Tap Continue.
4) The Select Source screen appears.
5) Tap click Manually enter SIM data.

140
6) Enter the SIM ICCID number (up to 20 digits).

7) Tap OK.
The following screen appears:
8) Enter the SIM IMSI number (up to 15 digits), then click OK.
142
The Select Language screen appears.
9) If required, select either a language or click None.

The Enter advanced settings screen appears.
10) Tap Yes or No to continue.

 Tap Yes to display the advanced settings. Extraction in Progress > Enter SPN screen
appears. Proceed to the following step.
 Tap No to continue. Proceed to step 15.
144
11) Enter the SIM SPN number (up to 16 digits), then tap OK.
The following screen appears:

12) Enter the SIM GID 1 number (up to 8 characters) and tap OK.
The Extraction in Progress > Enter GID 2 screen appears.
13) Enter the SIM GID 2 number (up to 8 characters).
14) Tap OK.
The Insert Target Card prompt appears.
15) Insert the UFED SIM ID access card into the SIM reader slot.
16) Tap Continue.
NOTE: Reminder: The Extraction in Progress screen is displayed throughout the data
writing process.
146
At the end of the data writing process, a summary of the SIM cloning process is displayed,
detailing the ICCID and IMSI information programmed to the SIM card.
17) To end the process and return to home screen tap OK (Finish).
10.2.3. Creating GSM test SIM

1) In the home screen, click Clone SIM.
NOTE: The SIM red arrow prompt at the bottom of the screen flashes even after you insert
the SIM card into the SIM reader slot.
148
2) Insert the SIM card into the SIM card reader slot located in the left of the front panel.
3) Tap Continue. The Select Source screen appears.
4) Tap Create GSM Test SIM . The following screen appears.
5) Make sure that the target SIM card is inserted correctly into the SIM card reader slot, then
tap Continue.
The Extraction in Progress screen is displayed throughout the data reading process.
At the end of the data writing process, a summary of the SIM cloning process is displayed,
detailing the ICCID and IMSI information programmed to the SIM card.
Chapter 11: Device tools
1) In the home screen, click Device Tools.
The Select Tool screen appears.

152
The device tools include:

 Bluetooth Scan (page 152)
 Switch to CDMA Offline Mode (page 155)
 Test Peek/Poke functionality (page 157)
 Activate TomTom Trip log (page 159)
 Uninstall Windows Mobile Client (page 159)
 Uninstall Android client (page 160)
 Exit Odin mode (page 160)
11.1. Bluetooth Scan

NOTE: This feature is available for Bluetooth-enabled PCs only.
This tool scans for available Bluetooth devices in your proximity and enables you to pair with
them.
Make sure that the Bluetooth feature of the device is enabled.
Make sure that the Bluetooth switch is on.
Chapter 11: Device tools 153
To perform a Bluetooth scan:
1) In the Device Tools > Select Tool screen, tap Bluetooth scan .
The Connecting Bluetooth prompt appears.
2) Tap Continue.
3) A list of Bluetooth devices in the vicinity appears. Select one or the following options:
154
 Tap one of the devices – Device summary screen appears

 Tap Continue – Device summary screen appears
 Tap Refresh list - Device tool in progress screen appears and UFED Touch tries to
find additional devices.
11.2. Switch to CDMA offline mode

This tool enables you to switch radio on CDMA devices to offline mode.
To switch to CDMA offline mode:
1) In the Device Tools > Select Tool screen, tap Switch to CDMA offline mode.
The Select Link prompt appears.
2) Select the link type (USB cable or Serial cable).

The Device Tool in Progress screen appears.
156
The Device Tool Summary appears.

11.3. Test peek/poke functionality

This tool enables you to perform a Peek/Poke test in order to check if the device is supported
by the UFED Touch.
To Test Peek/Poke functionality:
1) In the Device Tools > Select Tool screen, tap Test Peek/Poke functionality.
The Select Link prompt appears.
2) Select the link type (USB cable or serial cable).

158
The Peek check reply prompt appears.

3) Tap Continue.
The Reporting prompt appears.
11.4. Activate TomTom trip log

This tool enables you to activate or deactivate the trip log sharing feature of a connected
TomTom device, which is often disabled by the user
To Activate TomTom trip log:
1) In the Device Tools > Select Tool screen, tap Activate TomTom trip log.
The Select Mode prompt appears.
2) Select the desired mode.
A prompt labeled Attention appears requesting to connect the device to the PC.
3) Connect the device to the PC.
4) Tap Continue.
11.5. Uninstall Windows Mobile Client

In order to perform Logical Extraction, the client is installed on the device.
In some cases, due to device failure, or if the mobile device was improperly disconnected
from the UFED Touch, the client remains installed on the mobile device.
This option enables the client to be manually uninstalled.
160
11.6. Uninstall Android client

In order to perform Logical Extraction, the client is installed on the device.
from the UFED Touch, the client remains installed on the mobile device.
This option enables the client to be manually uninstalled.
11.7. Exit Odin mode

In order to perform Logical Extraction, the device is placed in Odin mode.
from the UFED Touch, the mobile device remains in Odin mode.
This option enables the device to be taken out of Odin mode.
Chapter 12: Settings 161
Chapter 12: Settings
The settings screen provides access to a set of functional and behavioral setup options used
to control the functionality and usability of UFED Touch.
To access the settings screen, click in the application taskbar.

The settings are grouped in the settings screen in the following tabs:
 General (page 162)
 Report settings (page 174)
 System settings(page 180)
 License settings (page 182)
 Version details (page 184)
 Users permissions (page 186)
 Network (page 197)
The settings screen opens on the General tab.
162
12.1. General settings

The General tab provides access to the following functions and settings:
 Managing the Custom List (page 163)
 Changing the application interface language (page 169)
 Mobile Extraction Client (page 173)
 Changing the extraction location (page 173)
To swap the first and last name in the phone book:
 Select Swap first and last name in phonebook.
12.1.1. Managing the custom list

The Custom List is the list of devices available for use during the Logical Extraction process.
Device models can be added to or deleted from the list. Multiple device models can be
defined.
After a Custom List has been defined, a Custom List button is added to the Logical
Extraction screen.
164
To add devices to the custom list:
1) Tap in the application taskbar.

2) Tap Edit Custom List.
The Custom List opens. In the event that devices have been previously defined in the
custom list, the vendor names are selected.
In this example the Apple device was previously defined for the custom list and is indicated
with a blue .
NOTE: Use and to scroll through the lists of manufacturers and devices.
166
3) In the Custom List, select the required device vendor. For example, Alcatel.
The list of device models opens.
4) Select one or more device models that you would like to associate with this Device
Manufacturer.
A blue appears in each selected device model box.
5) Tap Back.
The selected manufacturer is marked with a blue .
6) Repeat steps 2-4 for each device manufacturer and model/s to be added to the Custom
List.
7) Tap Finish.
168
To remove a device from the Custom List:

1) Tap Edit Custom List.
2) In the displayed Custom List dialog, select a device manufacturer marked with a blue
that you would like to remove (all the associated models or only one).
3) Select one or more device models marked with a blue that you would like to remove
from the Custom List.
The mark is removed.
4) Tap Back.
5) Repeat steps 2-4 for each device that needs to be removes from the Custom List.
NOTE: Removing all the marked devices of a manufacturer also removes its blue
mark.
6) Tap Finish.
12.1.2. Changing the application interface language

1) Tap the language field.
170
The Select Single Value screen appears with the current language selected. (In this case,
English).
NOTE: Use the arrows to scroll through the list of available interface languages.
2) Tap the required language.

172
The following message appears:
3) Tap OK.
The General tab appears with the language of choice in the Interface language field.
4) Tap Save to close the Settings panel.
5) To restart the application:
a) To close the application, Tap in the application taskbar.

b) To re-launch the application, do one of the following:
 Tap the application shortcut icon located in the UFED shortcuts panel at the right
of the screen.
 Double-tap the UFED Touch icon located on the Desktop.
 Tap Start > UFED Touch
 Tap Start > All Programs > Cellebrite Touch > UFED Touch.
UFED Touch launches in the selected language.
12.1.3. Mobile extraction client

To operate in covert mode:
 In the Settings > General tab, select the following:
 Operate in covert mode - Renames the application client name from
"Cellebrite.sis/exe" to "AAA.sis/exe".
 Uninstall reminder - When enabled, the UFED Touch prompts you to uninstall the
client from the examined smartphone.
174
12.2. Report settings

To set the report settings:

1) Access the Settings > Reports tab.
2) To set the generated reports language, click next to Generate Reports Language,
and select the desired language.
3) To set how the known issues notes about the extracted device are logged in the generated
report, click next to Note display modes, and select one of the following:
 Disable – Do not include device specific notes in the report.
 Separated Notes – Add all the device specific notes at the end of the report.
 Embedded Notes – Device-specific notes follow the content type they refer to in the
report.
4) To set the generated reports visual formats, click next to Report format, and select
one of the following:
 Normal – The standard report structure, suitable to standard display screens.
 Compact – A compact report structure, suitable for devices with a small display area.
5) To set the generated reports folder name formats, select next to Report folder
format, and select one of the following:
 Model Serial YYYY_MM_DD – The folder name is constructed from <the model
name> <the model serial> <the year in 4 digits>_<the month in 2 digits>_<the day in
2 digits>
176
 YYYYMMDD Model Serial – The folder name is constructed from <the year in 4
digits><the month in 2 digits><the day in 2 digits> <the model name> <the model
serial>
6) Select or clear Show MD5 to toggle the display of the MD5 values which are generated for
each file in the extracted data.
7) Select Create MD5 list file to generate a Checksums.md5 file that contains all the
generated MD5 values of the extracted data.
8) Select or clear Show SHA256 to toggle the display of the SHA 256 values which are
generated for each file in the extracted data.
9) Select or clear Partial Extraction to set, in the event of an extraction error, whether or not
to include the partially extracted data up to the error point in the generated report.
10) Tap Report custom fields to add, remove and edit report fields. For more information,
see Managing report fields (page 177).
11) To set a field as required, click the field in the Required column.
12) Tap Save.
12.2.1. Managing report fields

1) Access the Settings > Reports tab.
2) Tap Report custom fields to customize the report by defining additional fields which will
be filled at the end of the extraction.
178
3) To add a new field:

a) Tap Add.
b) Enter the field name in the Field Name box.

NOTE: To display the keyboard, click Keyboard.
c) To set the field as mandatory, select Required next to the field name.
d) Tap Update, or to exit without saving, tap Cancel.
4) To add additional fields, repeat step 3.
5) To edit an existing field:

a) Tap the field in the list, and click Edit.
b) Repeat steps 3b-3d.
NOTE: You cannot edit the field name of a default custom field.
6) To delete a field:
a) Tap the field in the list, and click Delete.
b) In the confirmation message, click Yes.

7) Tap Save in the Reports tab.
180
12.3. System settings

Set the following in the System tab:
 Additional settings
 Extraction target
Define the following additional settings in the System tab:

1) To set the unit to make a sound for UFED Touch operations such as failure, select Play
notification sounds.
2) To display the screensaver that appears after the unit is idle for a period, select Disable
screensaver.
3) To change the ULG log level, click next to ULG logs level, and select one of the
following:
 Disable – set to not generate log files.
 Normal – set to generate log files. If the transaction is very fast, not all the
information is written to the log.
 Detailed – set to generate detailed log files. The transaction will be slower in order to
write to the log. Recommended in case of debugging/error situation.
4) To export system information, click Export system information.
5) To save the application logs, click Export application logs.
6) To monitor device usage, click the Transactions counter. This counts the number of
transactions performed on the UFED Touch. Transactions include all extractions per type
and device tool actions. The counters are managed locally and can be reset.
182
12.4. License settings

The license can be updated via the network (Web), or a using an external device (via USB
port).
To update the license via the web:
NOTE: Before updating the license from the network ensure that the device is connected to
the network.
 In the License tab, tap Web.
The following message appears:
To update the license from an external device (via USB port):

1) Save the license file on the root directory of the USB flash drive.
2) Connect the external device to the UFED Touch Ext1 or Ext 2 USB ports on the back
panel.
3) Tap USB.
UFED Touch identifies the license file automatically, and updated information appears on
screen.
184
12.5. Version details

The version details display information about the UFED Touch version and build.
The Version tab displays current information regarding the license and the available version
for upgrade.
The following information is displayed:

 Version – The application version
For more information on downloading a software update or new version, see Updates and
versions.
12.5.1. Updates and versions

When UFED Touch is connected to the network, automatic notifications appear in the event of
updates and new versions of the application.
 Tap Refresh in the Settings > Version tab to update the information available on the
screen.
To install a newer version of the UFED Touch application via the web:
NOTE: Before using this option, please ensure that the unit is connected to the network.
 In the Settings > Version tab, in the Version area, tap Web.
The unit upgrades the application to the latest version available on the Cellebrite
download server.
To install a newer version of the UFED Touch application using an external device (via
USB port):
1) Download the latest application version from your account in My Cellebrite, and save it to
the root directory of the external device.
186
2) Connect the external device to the UFED Touch Ext1 or Ext 2 USB ports on the back
panel.
3) In the Settings > Version tab, in the Version area, tap USB.
4) UFED Touch identifies the new software file and starts the upgrade process.
12.6. Users permissions

UFED Touch enables user authentication ensuring that only users with the right credentials
can access the application. Access rights are further enforced by defining permission levels
per profile. For more information, see Permission management page 189).
To import user permissions:

1) Run the UFED Touch as an administrator.
2) Select Enable Users Permissions and click Import.
The following warning appears.
188
3) Tap Yes and navigate to the directory where the permission management file (*.cp) is
located. For information on creating a permission management file, see Using the UFED
Permission Manager page 189).
4) Tap Open and then tap Save.
5) Restart the UFED touch application, which will now prompt for login credentials.
6) Use one of the login credentials configured in the permission management file. For more
information, see Permission management.
12.6.1. Permission management

The administrator can create multiple profiles using the UFED Permission Manager
standalone application. Each profile contains access permissions, including operation rights
per extraction type, content types etc. A single profile can be assigned to multiple users. The
users and profiles can be exported into an encrypted permission management file, which can
be imported into multiple UFED Touch applications.
12.6.1.1. Using the UFED Permission Manager

To create a new profile:
1) Download the latest UFED Permission Manager application from your account in
MyCellebrite, and save it to a directory on a PC or external device.
2) Run the UFED Permission Manager and follow the setup instructions.
The UFED Permission Manager screen appears.
190
3) Click Profiles.
4) Click New Profile.

192
5) Enter a name and description for this profile, and then click the Extraction Types tab.
6) Select the options for this profile, such as Admin who can manage users, and the
Extraction Type: Logical Extraction, SIM Data extraction, Password extraction etc.
NOTE: At least of the enabled users must be an Administrator (Admin).
7) Click Save and proceed to create a new user.
194
To create a new user:

1) In the UFED Permission Manager screen, click Users.
2) Click New User.

3) Enter the details for the new user including Username, Display Name, Description, and
Password.
4) Select a profile for the user.
5) Click User is disabled to enable the user.
6) Click Save.
196
To export an encrypted permission management file:

7) In the UFED Permission Manager screen, click Export, specify a directory for the file and
click Save.
8) Click OK.
NOTE: The next time you run the UFED Permission Manager you will be prompted for
your user credentials to access the application.
NOTE: Click Import to configure an existing permission management file.
12.7. Network
Local Area Network, Wireless Network and Bluetooth connections.
Chapter 13: Special cables
UFED Touch requires special cables for certain functions. These include:
 The device power-up cable
 The U-441 Windows Easy Transfer Cable (used for the extraction to PC)
13.1. Device power-up cable

In case of a drained or absent battery, the device power-up cable powers the device instead
of the battery while performing an extraction.
The device power-up cable contains four parts marked as: Data, Extra power, "-", "+".
Figure 21: Phone power-up cable

200
To connect the device power-up cable:

1) Connect the Extra Power connector to the UFED Touch USB Port extension.
2) Connect the Data connector to the UFED Touch USB Port extension.
3) Identify the device’s battery contacts:
 Open the device battery cover.
 Locate the positive (‘+’) and negative (‘–’) pole markings of the battery, usually found
next to the contacts area.
 Make sure that the battery contacts are marked clearly on the device’s body.
 Remove the battery in order to gain access to the device’s battery contacts.
TIP: For battery contacts which are not clearly marked on the device’s body, use the pole
markings on the battery body to identify them. To do that, simply flip the battery along its
contacts edge, and place it along the edge of the battery housing, then mark the device’s
contacts according to those on the battery.
NOTE: Use a multi-meter to identify the positive and negative poles of an unmarked
battery.
4) Connect the RED alligator clip to the device’s positive pole (‘+’), the Primary Black alligator
clip to the negative pole (‘–’) and the secondary Black alligator to middle pole in case of
three poles or to the one next to the (-) in case of four poles. Make sure the alligator clips
are not closing a circuit by touching each other.
5) Connect the source device to the phone power-up cable using the references cable from
the cable organizer kit as listed in the UFED Touch menu.
Chapter 14: Technical specifications 201
Chapter 14: Technical specifications
14.1. General specifications

Part UFED Standard and Ruggedized
Display 7" WVGA (800x480) TFT Touch LCD, 280 NITS LED
Backlight, 400:1 Contrast Ratio
Operation system Microsoft Window XP embedded
Processor Intel ATOM Z510 1.1GHz
Chipset Intel Poulsbo US15W Premium chipset
System memory 1GB DDR2, 333MHz (667 DDR2 Data Rate)
Storage PSSD MLC NAND Flash: 64GB capacity
202
14.2. Battery
Part UFED Standard and Ruggidized
Type Lithium Polymer, 7.4V, 3850mAh.
Discharge time While being used: 5 ± 1 hr.
Recharge time ~3 hours
14.3. Power supply

Power supply Input: AC 100-240V, 50/60Hz.
Output: DC 12V, 4.16A (50W max)
14.4. Network
USB ports 4 x USB 2.0 ports, 1 x Mini USB port
Serial ports RJ-45 for device and storage connectivity
SIM card reader Integrated SIM card reader
SD card reader Available SD card reader
Microphone & Speaker Intel High Definition Audio, integrated microphone and
speakers
Audio output 1x Headphone Jack
Video Output 1x VGA Port
204
14.5. I/O interfaces

USB ports 4 x USB 2.0 ports, 1 x Mini USB port
Serial ports RJ-45 for device and storage connectivity
SIM card reader Integrated SIM card reader
SD card reader Available SD card reader
Microphone & Speaker Intel High Definition Audio, integrated microphone and
speakers
Audio output 1x Headphone Jack
Video Output 1x VGA Port
14.6. Dimensions and weights

Weight & Dimensions UFED Standard UFED Ruggidized
Case dimension (cm) 44 (L) x 33.5 (W) x 16 48.7(L) x 38.6 (W) x 18.5 (H)
(H)
Weight 6.5 Kg 10 Kg
14.7. Temperature
Operating temperature 0°C to 40°C
Storage temperature 0°C to 40°C
206
Chapter 15: Extracting Android devices
This chapter covers the pros and cons of each Android extraction method, and provides
answers to frequently asked questions about the extraction methods.
15.1. Android extraction methods

Many different devices run the Android operating system: phones, MP3 players, tablets,
eBook Readers, and more.
There are two main extraction methods for Android devices:
 ADB debugging - extraction using a built-in protocol that runs within the operating system.
This method uses the Android Debugging Bridge (ADB), which is active when USB
Debugging is enabled. Using this method, it is possible to perform a physical or file
system extraction on almost any Android device, provided that the device USB
debugging option is enabled. All currently available Android OS versions are supported.
For more information, see Android Debugging Bridge method (page 208).
208
 Bootloader extraction - extraction that takes place before the Android operating system
starts running (several variations of this method are available). This method can be
performed on locked devices. For more information, see Bootloader extraction (page
211).
15.1.1. Android debugging bridge method

Q: How does ADB work?
A: ADB is a built-in protocol within the Android operating system. Every Android-based device
has this protocol, that enables developers to connect to an Android-based device and
perform low-level commands used for development. Cellebrite utilizes this protocol to extract
data from Android devices.
Q: Can ADB be used to extract any Android device?

A: In theory, data can be extracted from every Android device using ADB. However, there are
some limitations:
 The USB debugging option must be enabled on the device
 Access to the device must be with administrator permissions.
Chapter 15: Extracting Android devices 209
Q: How do I turn on the USB debugging option?

A: On most Android devices: go to Menu > Settings > Applications > Development and
then click USB debugging.
Q: Does this method bypass the unlock password or pattern? Will I be able to retrieve the
code?
A: The device USB debugging option must be turned on before it’s possible to attempt an
extraction. For locked devices, you can perform an extraction if the user enabled USB
debugging before locking the device.
For selected Android devices, you can perform a physical extraction, where there is greater
support for extraction from locked devices (pattern lock/PIN/password). Following a
successful physical extraction, you can view the numeric password or pattern lock protecting
the device in UFED Physical Analyzer, and use it to unlock the device.
Q: How do I get Administrator (root) permissions on the device?

A: When USB debugging enabled, UFED Touch automatically detects the Android OS
version, and whether or not access is at administrator level. If it is not, UFED Touch
automatically gains root permissions.
210
NOTE: It is possible to gain access at administrator level manually using third party tools, but
gaining access this way may harm the integrity of the data on the device, or has the
potential to render the device useless.
Q: I turned on USB debugging. What extraction types can I perform?

A: Once USB debugging is enabled, you can perform either a physical extraction which
extracts all the data on the device, or a File System Extraction which extracts only relevant
files.
The advantage of a physical extraction is that it retrieves more data from the device, making it
possible to recover deleted files such as photos that were saved on the device. The
disadvantage is that it takes more time, and that file system reconstruction is not supported
for all devices.
The advantage of a file system extraction is that it takes less time. You are able to view all vital
information including deleted records (but excluding deleted files), even if file system
reconstruction is not supported.
Q: When selecting the Generic Profile on UFED Touch, what are "Method 1" and "Method 2"?
Which should I choose?
A: Methods 1 and 2 are different connection configurations. It is not possible to tell which
Android devices requires which method. Try one method, and if unsuccessful, try the second
method.
Q: Does the ADB extraction method change any of the data on the device?
A: When extracting using the ADB method, a few client applications are written to the device
/data/local/tmp folder.
15.1.2. Bootloader extraction

Q: What is bootloader extraction?
A: The bootloader extraction method performs a physical extraction when the device is in
bootloader mode. In this extraction method, the Android operating system is not running, so
the device cannot connect to the mobile network.
Q: Does this method bypass the unlock password or pattern? Will I be able to retrieve the
code?
A: Using this method, you are able to bypass any type of lock, and can retrieve a numeric PIN
lock or unlock pattern.
Q: Does this extraction method change any of the data on the device?
A: No, this method is completely forensically sound.
212
Q: Which devices are supported by this method?

A: Currently most Motorola Android devices, and selected Samsung Android, Qualcomm, LG
GSM, and LG CDMA are supported.
15.2. Performing File System extraction for an Android device

15.2.1. Locked Motorola devices
If you have a locked Motorola device, perform the following procedure to bypass the lock and
perform a file system extraction:
1) In the home screen, tap File System Extraction.
The Select Vendor screen appears.

3) Select the device model.
NOTE: If you do not see the device model in the list, select <Vendor> Generic option.
The Select Mode screen opens.

4) If lock bypass is supported for the device, select File System Bypassing Lock
(Recommended).
5) Follow the on-screen instructions.
File system extraction is successful for locked Motorola devices in the following
circumstances:
 If lock bypass is supported for the device.
 If lock bypass is not supported for the device, but the device USB debugging option
is enabled.
6) If lock bypass is NOT supported for the device, and the device USB debugging option is
NOT enabled, perform a physical extraction in order to retrieve the device lock code, and
unlock the device. Then follow the directions in Unlocked devices (page 216).
15.2.2. Locked HTC, Huawei, and ZTE devices

If you have a locked HTC, Huawei, or ZTE device, perform the following procedure to bypass
the lock and perform a file system extraction:
214

File system extraction is successful for locked HTC devices in the following circumstances:
 If lock bypass is supported for the device.
 If lock bypass is not supported for the device, but the device USB debugging option
is enabled.
File system extraction is NOT successful for locked HTC devices in the following
circumstances:
 If lock bypass is NOT supported for the device, and the device USB debugging
option is NOT enabled.
15.2.3. Other locked devices

If you have a locked device that is not an HTC or Motorola device, perform the following
procedure to bypass the lock and perform a file system extraction:

File system extraction is successful for locked devices if the device USB debugging
option is enabled.
5) If the device USB debugging option is NOT enabled, perform a physical extraction in
order to retrieve the device lock code, and unlock the device. Then follow the directions in
Unlocked devices (page 216).
216
15.2.4. Unlocked devices

If you have an unlocked device, perform the following procedure to perform a file system
extraction:

 For an advanced File System extraction including application system files, select
Android FS + app sys. files.
 For a standard File System extraction, select the device model.
File system extraction is successful for unlocked devices.
15.3. Technical terms

Android - Google’s mobile operating system. You can find a list of Android devices here:
http://en.wikipedia.org/wiki/List_of_Android_devices (http://www.). Another very helpful
resource is http://pdadb.net (http://www.).
Brick - A device that cannot function in any capacity (such as a device with damaged
firmware). Refer to http://en.wikipedia.org/wiki/Brick_%28electronics%29 (http://www.).
Client - A program written by Cellebrite that runs on the Android operating system itself.
Root/rooting - A process that allows users of cell phones and other devices running the
Android operating system to attain privileged control (known as "root access") within
Android's Linux subsystem, similar to jailbreaking on Apple devices running the iOS operating
system, overcoming limitations that the carriers and manufacturers put on such phones.
(http://en.wikipedia.org/wiki/Rooting_%28Android_OS%29 (http://www.)).
218
Chapter 16: Appendix
IMPORTANT: PLEASE READ THIS END USER LICENSE AGREEMENT CAREFULLY.
DOWNLOADING, INSTALLING OR USING CELLEBRITE-SUPPLIED SOFTWARE
CONSTITUTES ACCEPTANCE OF THIS AGREEMENT.
CELLEBRITE IS WILLING TO LICENSE THE SOFTWARE TO YOU ONLY IF YOU ACCEPT
ALL OF THE TERMS CONTAINED IN THIS AGREEMENT (THE "EULA"), ANY
ADDITIONAL TERMS IN AN AGREEMENT SIGNED BY BUYER (AS DEFINED BELOW)
AND CELLEBRITE AND ANY "CLICK-ACCEPT" AGREEMENT, AS APPLICABLE. TO THE
EXTENT OF ANY CONFLICT AMONG THIS AGREEMENT, ANY ADDITIONAL TERMS IN
AN AGREEMENT SIGNED BY BUYER AND CELLEBRITE, ANY "CLICK-ACCEPT"
AGREEMENT, ANY TERMS ON A PURCHASE ORDER AND CELLEBRITE’S TERMS AND
CONDITIONS OF SALE, THE ORDER OF PRECEDENCE SHALL BE (A) AN AGREEMENT
SIGNED BY BUYER AND CELLEBRITE; (B) THIS AGREEMENT; (C) THE
"CLICK-ACCEPT" AGREEMENT; (D) CELLEBRITE’S TERMS AND CONDITIONS OF
SALE; AND (E) BUYER’S PURCHASE ORDER, TO THE EXTENT SUCH TERMS ARE
PERMISSIBLE UNDER CELLEBRITE’S TERMS AND CONDITIONS OF SALE OR AN
AGREEMENT SIGNED BY BUYER AND CELLEBRITE (COLLECTIVELY, (A)-(E), AFTER
APPLYING THE ORDER OF PRECEDENCE, THE "AGREEMENT").
220
BY DOWNLOADING, INSTALLING OR USING THE SOFTWARE OR OTHERWISE

EXPRESSING YOUR AGREEMENT TO THE TERMS CONTAINED IN THE AGREEMENT,
YOU INDIVIDUALLY AND ON BEHALF OF THE BUSINESS OR OTHER ORGANIZATION
THAT YOU REPRESENT (THE "BUYER") CONSENT TO BE BOUND BY THIS
AGREEMENT. IF YOU DO NOT OR CANNOT AGREE TO THE TERMS CONTAINED IN
THE AGREEMENT, THEN (A) DO NOT DOWNLOAD, INSTALL OR USE THE SOFTWARE
(OR, AS APPLICABLE, THE CELLEBRITE PRODUCT IN WHICH THE SOFTWARE IS
EMBEDDED), AND (B) WITHIN THIRTY (30) DAYS AFTER RECEIPT OF THE
SOFTWARE (OR, IF AN AGREEMENT BETWEEN YOU AND CELLEBRITE PROVIDES A
SHORTER TIME PERIOD FOR ACCEPTANCE, SUCH SHORTER TIME PERIOD FOR
ACCEPTANCE), EITHER RETURN THE SOFTWARE TO CELLEBRITE OR THE
APPLICABLE AUTHORIZED RESELLER FOR FULL REFUND OF THE SOFTWARE
LICENSE FEE, OR, IF THE SOFTWARE IS EMBEDDED IN A CELLEBRITE PRODUCT
FOR WHICH NO SEPARATE SOFTWARE LICENSE FEE WAS CHARGED, RETURN THE
EQUIPMENT AND EMBEDDED SOFTWARE, UNUSED, TO CELLEBRITE OR THE
APPLICABLE RESELLER FOR A FULL REFUND OF THE PURCHASE PRICE. YOUR
RIGHT TO RETURN AND REFUND ONLY APPLIES IF YOU ARE THE ORIGINAL END
USER PURCHASER.
This EULA governs Buyer’s access to and use of the Software (as defined below) first placed
in use by Buyer on or after the release date of this EULA (the "Release Date").
Chapter 16: Appendix 221
1) DEFINITIONS – In this Agreement, the following capitalized terms shall have the
meaning set forth below:
"Affiliate" of a party means such party’s parent corporation, an entity under the control of
such party’s parent corporation at any tier or an entity controlled by such party at any tier.
For these purposes, "control" shall mean the power to direct or cause the direction of the
management and policies of the entity, whether through the ownership of more than 50%
of the outstanding voting interests in such entity or otherwise.
"Authorization Product" means a product sold by Cellebrite or an authorized reseller of
Cellebrite with embedded License Authorization Software, including but not limited to a
USB stick with embedded License Authorization Software.
"Authorized Users" means the number of Concurrent Users that Buyer is licensed to
have access to the Software.
"Cellebrite" means (i) Cellebrite Mobile Synchronization Ltd., an Israeli corporation with
offices at 94 Em Hamoshavot Road, Petach Tikva, Israel 49130 or (ii) any subsidiary of
Cellebrite Mobile Synchronization Ltd. (including without limitation Cellebrite USA Inc.
and Cellebrite GMBH) which is engaged by Buyer and issue invoices to Buyer with respect
to the Software and/or the Product; as applicable.
"Concurrent Users" means the number of Users of Buyer concurrently accessing the
Software. If a single User connects to Software using multiple concurrent log-ins or
connections, each such active logical connection or log-in is counted toward the number of
Concurrent Users.
222
"Documentation" means any documentation related to any Software.

"Embedded Software" means a copy of Software delivered embedded in or loaded onto
Cellebrite hardware equipment when such equipment is sold by Cellebrite. Updates or
Upgrades to Embedded Software are also deemed "Embedded Software" to the extent
such an Update or Upgrade would be deemed Embedded Software without regard to this
sentence had it been delivered installed on the Cellebrite equipment.
"Forensic Product" means a Product used for the purposes of conducting forensic
analysis, including without limitation Products sold under the trade name "UFED".
"License Authorization Software" means Software that is provided together with
hardware on which it is embedded that is used to validate the authorized use of
Standalone Software.
"License Term" means the term of a paid subscription to the Standalone Software.
"Product" means a product sold by Cellebrite or an authorized reseller of Cellebrite with
Embedded Software.
"Software" means an instance of a program, module, feature, function, service,
application, operation or capability of the Cellebrite-supplied software. Software includes
Embedded Software and Standalone Software.
"Standalone Software" means Software that is not Embedded Software or License
Authorization Software.
"Third Party" means an individual or entity other than Buyer, Buyer’s Affiliates, Cellebrite
and Cellebrite’s Affiliates.
"Update" means an update to the Software or the Standalone Software that is provided by
Cellebrite and that may incorporate (i) corrections of any substantial defects; (ii) fixes of
any minor bugs; (iii) at the sole discretion of Cellebrite, allowing additional compatibility of
the Software with cellular phones provided by third parties; and/or (iv) at the sole discretion
of Cellebrite, minor enhancements to the Software or Standalone Software, as the case
may be; provided, however, that Updates shall not include Upgrades. Updates are
generally identified by Cellebrite by a change to the version number to the right of the first
decimal point (e.g., version 4.1 to 4.2).
"Upgrade" means a new release of the Software or Standalone Software that incorporates
substantial changes or additions that (i) provide additional value and utility; (ii) may be
priced and offered separately as optional additions to the Software or the Standalone
Software, as the case may be; and/or (iii) are not generally made available to Cellebrite’s
customers without a separate charge. Upgrades are generally identified by Cellebrite by
a change to the version number to the left of the first decimal point (e.g., version 4.2 to 5.0).
"User" means an individual able to gain access to any Software functionality (whether
Embedded Software or Standalone Software).
"You" means any individual seeking the benefit of or evaluating this EULA.
224
2) LICENSE GRANT
A. Embedded Software. Subject to the terms and conditions of this Agreement, Cellebrite
hereby grants to Buyer, and Buyer accepts, upon delivery of the Embedded Software, a
nonexclusive, perpetual and nontransferable license to use (only if such use does not
violate the prohibitions in Sections 2.F or 2.G) each copy of the Embedded Software, in
executable form only, provided by Cellebrite, and the accompanying documentation, only
for Buyer’s internal use in connection with the Products, in the country in which the
Product with the Embedded Software was purchased from Cellebrite or an authorized
reseller of Cellebrite and only as authorized in the Agreement.
i. General Limitations. Buyer shall use Embedded Software solely for execution on the
unit of Product originally delivered to Buyer with such Embedded Software installed, or
any replacement unit provided under a warranty from Cellebrite. Any Update or Upgrade
of such Embedded Software that Cellebrite has licensed to Buyer may be loaded and
executed only on the Product on which the originally licensed Embedded Software is
authorized to execute.
ii. License Exclusion. Notwithstanding any other provision of this EULA, except as may
otherwise be required by applicable law, no license is granted for installation or use of any
Embedded Software or associated Update or Upgrade on any Product resold by anyone
who is not an authorized reseller of Cellebrite for such Product.
iii. Single Product. Buyer’s license to the Embedded Software is limited to a license to use
the Embedded Software on one (1) Product for each Product purchased from Cellebrite
or Cellebrite’s authorized reseller.
B. Standalone Software. Subject to the terms and conditions of this EULA, Cellebrite
hereby grants to Buyer, and Buyer accepts, upon delivery of the Standalone Software,
during the License Term, a nonexclusive and nontransferable license to (i) use (only if
such use does not violate the prohibitions in Sections 2.F or 2.G) each copy of the
Standalone Software, in executable form only, provided by Cellebrite, and the
accompanying documentation, only for Buyer’s internal use, only as authorized in the
Agreement; (ii) only use a number of Concurrent Users that is equal to or less than the
number of Authorized Users specified in a written agreement signed by both the Buyer
and Cellebrite or purchase order accepted by Cellebrite, even if available on a higher
number of computer systems; (iii) make a reasonable number of copies of the
Standalone Software for use only as licensed in this Section 2.B, though in no case more
than the number of Authorized Users; and (iv) make one (1) copy of the Standalone
Software for backup, archival or disaster recovery purposes.
226
C. License Authorization Software. Subject to the terms and conditions of this EULA,
Cellebrite hereby grants to Buyer, and Buyer accepts, upon delivery of the Standalone
Software, during the License Term, a nonexclusive and nontransferable license to use
(only if such use does not violate the prohibitions in Sections 2.F or 2.G) each copy of the
License Authorization Software, in executable form only, provided by Cellebrite, and the
accompanying documentation, only for Buyer’s internal use and only in the country in
which the Standalone Software was licensed from Cellebrite or an authorized reseller of
Cellebrite and only as authorized in the Agreement. Buyer’s license to the License
Authorization Software is limited to a license to use the License Authorization Software
on one (1) Authorization Product for each license to the Standalone Software the
authorized use of which is validated by such License Authorization Software and where
such license is purchased from Cellebrite or Cellebrite’s authorized reseller.
D. Updates and Upgrades.
i. Updates. Updates or Upgrades to the Software may be made available to Buyer
pursuant to a separate agreement between Cellebrite and Buyer. Any particular
Update or Upgrade shall be licensed under the terms of the Software that is being
updated by such Update or Upgrade, as the case may be.
ii. Limitation. Except as expressly provided in the Agreement, Buyer shall have no rights in
any Update or Upgrade to Software, nor any rights to support services associated with
such Software.
iii. No Obligation. Nothing in this EULA requires Cellebrite to provide Updates or Upgrades
to Buyer or Buyer to accept such Updates or Upgrades. The provision of any Updates or
Upgrades shall be governed by a separate agreement between Cellebrite and Buyer, or
by a purchase order issued by Buyer and accepted by Cellebrite, in Cellebrite’s sole
discretion.
E. Specific License Terms for Particular Products.
i. Forensic Products. Subject to the terms and conditions of this Agreement, Cellebrite
hereby grants to Buyer, and Buyer accepts, a nonexclusive, time-limited and
nontransferable license, effective upon delivery, to use (only if such use does not
violate the prohibitions in Sections 2.F or 2.G) a copy of an Update or Upgrade to the
Embedded Software, in executable form only, provided by Cellebrite, and the
accompanying documentation, only for Buyer’s internal use in connection with the
Forensic Products or for a trial of such Update or Upgrade, as the case may be, in the
country in which the Forensic Product with the Embedded Software was purchased
from Cellebrite or an authorized reseller of Cellebrite and only as authorized in the
Agreement, for a period as specified by Cellebrite, but, in any case, no longer than
seven (7) days. Any time-limited license for the Embedded Software on a Forensic
Product shall be subject to the foregoing license grant and such license may be issued
at Cellebrite’s sole discretion. Buyer agrees to provide to Cellebrite one or more
email addresses at which Cellebrite can contact Buyer for communications from
Cellebrite, including regarding Updates or Upgrades. Buyer shall provide Cellebrite
with updated email address(es) each time such email address(es) change.
228
ii. Forensic Products Exclusions. Any use or operation of the Cellebrite UFED family of
products (including without limitation, UFED Logical, UFED Ultimate, UFED Physical
Analyzer) in connection with any product and/or cellular device developed,
manufactured, produced, programmed, assembled or otherwise maintained by any
corporation, shall be permitted only after the User of the Cellebrite UFED family of
products has obtained any consents or approvals required (to the extent required)
pursuant to applicable law in the jurisdiction in which such use is made. UNDER NO
CIRCUMSTANCES SHALL CELLEBRITE, ITS OFFICERS, EMPLOYEES OR
REPRESENTATIVES BE LIABLE TO USER OR ANY OTHER THIRD PARTY UNDER
ANY CAUSE OF ACTION (WHETHER IN CONTRACT, TORT OR OTHERWISE) FOR
ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, CONSEQUENTIAL, PUNITIVE, OR
EXEMPLARY DAMAGES UNDER ANY LEGAL THEORY WHATSOEVER ARISING
OUT OF OR RELATING TO THE USE OF THE CELLEBRITE UFED FAMILY OF
PRODUCTS IN CONNECTION WITH ANY PRODUCT AND/OR CELLULAR DEVICE
DEVELOPED, MANUFACTURED, PRODUCED, PROGRAMMED, ASSEMBLED OR
OTHERWISE MAINTAINED BY ANY CORPORATION, WITHOUT OBTAINING THE
APPLICABLE CONSENTS AND APPROVALS. User agrees to indemnify and hold
harmless Cellebrite its directors, shareholders and employees, from and against any
damages, claims, liabilities and expenses (including legal fees) arising as a result of the
use of the Cellebrite UFED family of products in connection with any product and/or
cellular device developed, manufactured, produced, programmed, assembled or
otherwise maintained by any corporation, without obtaining the applicable consents and
approvals.
iii. Reserved.
F. No Right to Sublicense or Assign. Except to the extent otherwise required by

applicable law or expressly provided for assignment generally in the Agreement, no
license provided in this Section 2 is sublicensable, transferable or assignable by Buyer,
including by operation of law, change of control, merger, purchase or otherwise, without
the prior written consent of Cellebrite in each instance. Other than as expressly
permitted by the foregoing, any attempted sublicense, transfer or assignment by Buyer
shall be null and void.
230
G. License Prohibitions. Notwithstanding anything to the contrary in this EULA, Buyer shall
not, alone, through a User, an Affiliate or a Third Party (or allow a User, an Affiliate or a
Third Party to): (a) modify any Software; (b) reverse compile, reverse assemble, reverse
engineer or otherwise translate all or any portion of any Software; (c) pledge, rent, lease,
share, distribute, sell or create derivative works of any Software; (d) use any Software on
a time sharing, service bureau, application service provider (ASP), rental or other similar
basis; (e) make copies of any Software, except as provided for in the license grant above;
(e) remove, alter or deface (or attempt any of the foregoing) proprietary notices, labels or
marks in any Software; (f) distribute any copy of any Software to any Third Party,
including without limitation selling any Product with Embedded Software in a secondhand
market; (g) use any Embedded Software other than with Products provided by Cellebrite
or an authorized reseller of Cellebrite or for more than the number of Products purchased
from Cellebrite or an authorized reseller of Cellebrite; (h) disclose the results of testing or
benchmarking of any Software to any Third Party without the prior written consent of
Cellebrite; (i) use any Update or Upgrade beyond those to which Buyer is entitled or with
any Software to which Buyer does not have a valid, current license; (j) deactivate, modify
or impair the functioning of any disabling code in any Software; (k) circumvent or disable
Cellebrite’s copyright protection mechanisms or license management mechanisms (l)
use the Software in violation of any applicable law or to support any illegal activity; (m)
use the Software to violate the rights of any Third Party; or (n) attempt any of the
foregoing. Cellebrite expressly reserves the right to seek all available legal and
equitable remedies to prevent any of the foregoing and to recover any lost profits,
damages or costs resulting from any of the foregoing.
H. Legal Exception. Buyer agrees that, to the extent that any applicable laws (including
without limitation national laws implementing EC Directive 91/250 on the Legal Protection
of Computer Programs) give Buyer the right to reverse engineer any Software to make it
interoperable without Cellebrite’s consent, before Buyer exercises any such rights, Buyer
shall notify Cellebrite of such desire and, no later than sixty (60) days following receipt of
such request, Cellebrite may decide either: (a) to perform the work to achieve such
interoperability and charge its then-standard rates for such work to Buyer; or (b) to permit
Buyer to reverse engineer parts of the Software only to the extent necessary to achieve
such interoperability. Only if and after Cellebrite, at its sole discretion, partly or
completely denies Buyer’s request, shall Buyer exercise its statutory rights.
I. Network Usage. Buyer understands and agrees that Cellebrite may use Buyer’s internal
network and Internet connection for the limited purpose of transmitting license-related
data at the time of installation, registration, use or update of Software to a
Cellebrite-operated license server. At such time, Cellebrite may validate the
license-related data in order to protect Cellebrite against unlicensed or illegal use of the
Software. Cellebrite may, at its option, only permit activation of the Software upon
exchange of license related data between Buyer’s computer and the Cellebrite license
server.
3) OWNERSHIP – Cellebrite (or its licensors) retains ownership of all right, title and interest
in and to the Software and Documentation and any derivative works thereof, and all copies
of the Software. Nothing in this EULA constitutes a sale, transfer or conveyance of any
right, title or interest in the Software or Documentation and any derivative works thereof.
Notwithstanding anything to the contrary, all Software is licensed and not sold and any
232
reference to a sale of Software shall be understood as a license to Software under the

terms and conditions of the Agreement.
4) CONFIDENTIALITY – Buyer agrees the Software and Documentation are the confidential
information of Cellebrite. Buyer shall maintain the Software and Documentation in
confidence, using the same degree of care it uses for its own confidential information, but
at least reasonable care.
5) EXCLUSIVE REMEDIES AND LIMITATION OF LIABILITY.
A. Definitions. For purposes of the exclusive remedies and limitations of liability set forth
in this Section 5, Cellebrite shall be deemed to include its subsidiaries and affiliates
and the directors, officers, employees, agents, representatives, shareholders,
subcontractors and suppliers of each of them; and "damages" shall be deemed to
refer collectively to all injury, damage, loss or expense incurred.
B. Exclusive Remedies. Cellebrite’s entire liability and Buyer’s exclusive remedies against
Cellebrite for any damages caused by any Software defect or failure, or arising from the
performance or non-performance of any obligation hereunder, regardless of the form of
action, whether in contract, tort including negligence, strict liability or otherwise shall be:
i. For bodily injury or death to any person proximately caused by Cellebrite, Buyer’s
direct damages; and
ii. For claims other than as set forth above, Cellebrite’s liability shall be limited to direct
damages that are proven, in an amount not to exceed the total amount paid by Buyer to
Cellebrite during the twelve (12) month period that immediately preceded the event that
gave rise to the applicable claim.
C. Limitation of Liability. Notwithstanding any other provision of this EULA, CELLEBRITE

shall NOT be liable for incidental, indirect, special, exemplary or consequential damages,
including but not limited to lost profits, savings or revenues of any kind, whether or not
CELLEBRITE has been advised of the possibility of such damages. This provision shall
APPLY EVEN IN THE EVENT OF THE failure of an exclusive remedy.
D. No Liability to any Third Party. TO THE MAXIMUM PERMITTED EXTENT,
CELLEBRITE DISCLAIMS ANY AND ALL LIABILITIES OR OBLIGATIONS
WHATSOEVER RELATED TO THE SOFTWARE OR ITS LICENSING TO OR USE BY
ANYONE OTHER THAN BUYER.
6) BUYER INDEMNITY – Buyer will, at its expense: (i) indemnify and hold Cellebrite and its
affiliates, officers and directors harmless from any claim (whether brought by a Third Party
or an employee, consultant or agent of Buyer’s) alleging that any Product or Software
furnished under this Agreement was used in a manner other than as authorized under this
EULA, including but not limited to using the Product or Software in a manner that violates a
person’s fourth amendment rights under the United States Constitution (or its equivalent in
the Territory) or misappropriating a person’s list of contacts or other personal information;
(ii) reimburse Cellebrite for any expenses, costs and liabilities (including reasonable
attorney fees) incurred relating to such claim; and (iii) pay all settlements, damages and
costs assessed against Cellebrite and attributable to such claim.
234
7) DISABLING CODE
A. Disabling Code. Software may be provided to Buyer with disabling code that allows
Cellebrite to disable such Software or the Products such Software is embedded in.
Any Updates or Upgrades to the Software may include disabling code. Cellebrite
agrees not to invoke such disabling code except as provided for in Section 7.B,
without Buyer’s prior consent, which may be given by telephone or email.
B. Invocation of Disabling Code. In addition to the invocation of disabling code when
Cellebrite has received Buyer’s consent described in Section 7.A, Cellebrite may, at its
option, invoke disabling code in Cellebrite’s Software without receiving Buyer’s consent
(i) if in Cellebrite’s sole, reasonable discretion, Cellebrite believes that such Software has
been, is being or will be used in violation of laws; (ii) if Cellebrite is required to do so,
because of a court or regulatory order; (iii) if Buyer has not paid an outstanding invoice
more than sixty (60) days after such invoice is due; or (iv) if Buyer has used the Software
other than as authorized by Buyer’s license. Cellebrite shall have no liability to Buyer for
any good faith invocation of any such disabling code.
8) TERM AND TERMINATION
A. Term. The term of this EULA is while any Software is under Buyer’s control or
possession. Notwithstanding the foregoing, (i) the license to any Embedded
Software may be terminated if Buyer has not paid an invoice sixty (60) days after such
invoice is due; and (ii) the license to any Standalone Software is only during the
License Term. The License Term shall be determined in a separate agreement
between Cellebrite and the Buyer.
B. Termination. Cellebrite shall have the right to terminate this EULA upon thirty (30) days
prior written notice to the other party if such other party has not cured any material breach
of this EULA by the end of such thirty (30) day notice period. Upon termination of this
EULA for any reason, (i) Buyer shall be responsible for payment for all purchase orders
delivered to Buyer by Cellebrite before the effective date of termination; and (ii) Buyer
shall destroy all copies of the Standalone Software under Buyer’s control or possession.
C. Survival. The provisions of Sections 1, 2.C, 2.E, 2.F, 2.G, 3, 4, 5, 6, 7, 8.C, and 9-13 of
this EULA shall survive any termination in accordance with their terms. In addition, any
purchase order accepted by Cellebrite prior to the effective date of termination shall
survive in accordance with its terms.
9) CHOICE OF LAW; JURISDICTION – The construction, interpretation, and performance of
the Agreement and all transactions under it shall be governed by the laws of the State in
which the Cellebrite entity engaged by Buyer is incorporated (the "Governing State"),
excluding its choice of law rules and excluding the Convention for the International Sale of
Goods. Buyer acknowledges that the courts of the Governing State shall have exclusive
jurisdiction with respect to any dispute arising under this Agreement, which is initiated
against Cellebrite by Buyer or any Third Party on its behalf. Notwithstanding the above: (i)
to the extent Cellebrite Mobile Synchronization Ltd. has engaged Buyer, the courts of
Tel-Aviv shall have exclusive jurisdiction with respect to any dispute arising under this
Agreement, which is initiated against Cellebrite by Buyer or any Third Party on its behalf;
and (ii) to the extent Cellebrite USA Inc. has engaged Buyer, the courts of the State of New
York shall have exclusive jurisdiction with respect to any dispute arising under this
Agreement, which is initiated against Cellebrite by Buyer or any Third Party on its behalf.
236
For the avoidance of any doubt, Buyer further acknowledges and agrees that Cellebrite
shall be allowed, at its sole and absolute discretion, to initiate any dispute against Buyer in
any jurisdiction worldwide (whether in or outside the Governing State), including with
respect to any application for injunctive remedies (or an equivalent type of urgent legal
relief).
10) ASSIGNMENT – Neither party may assign its rights and obligations hereunder without
the prior written consent of the other party. Notwithstanding the foregoing, either party may
assign this EULA to any Affiliate of the other or to an acquirer (by purchase, merger or
otherwise) of all or substantially all of such party’s business or assets relating to this EULA,
provided that (i) the assignee agrees in writing to be bound by the terms and conditions of
this EULA, (ii) neither the assignor nor assignee are in default hereunder. Any attempted
assignment other than as permitted shall be null and void.
11) NON-WAIVER – No course of dealing or failure of either party to strictly enforce any
term, right or condition of this Agreement shall be construed as a waiver of such term, right
or condition.
12) ENTIRE AGREEMENT – The terms and conditions contained in this Agreement
supersede all prior oral or written understandings between the parties and shall constitute
the entire agreement between the parties with respect to the subject matter of this
Agreement, except as provided for in the preamble to this Agreement regarding the order
of precedence. This Agreement shall not be modified or amended except by a writing
signed by Buyer and Cellebrite.
13) CONSTRUCTION; SEVERABILITY – The headings used in this Agreement are for
reference purposes only and will not be deemed to limit, expand or in any way affect the
interpretation of any term or provision hereof. If any provision or part hereof shall be held
to be invalid or unenforceable for any reason, then the meaning of such provision or part
hereof shall be construed so as to render it enforceable to the extent feasible. If no
feasible interpretation would save such provision or part hereof, it shall be severed
herefrom, but without in any way affecting the remainder of such provision or any other
provision contained herein, all of which shall continue in full force and effect unless such
severance effects such a material change as to render the Agreement unreasonable. In
case of any inconsistency between this Agreement and any other agreement, document
and/or instrument entered into by Buyer and Cellebrite, the terms of this Agreement shall
prevail.
14) WARRANTY
238
A. Hardware Warranty. Cellebrite warrants that each Product, including all firmware
and excluding Software (for which the warranty is only as provided under Section D
below), but not related services or prototypes of any such Product, shall be materially
in conformance with the written specification furnished or agreed to by Cellebrite for
twelve (12) months after acceptance (the "Warranty Period"). If any failure to
materially conform to such specification ("Defect") is suspected in any Product during
the Warranty Period, Buyer, after obtaining return authorization information from
Cellebrite, shall ship suspected defective samples of the Product to Cellebrite in
accordance with Cellebrite’s instructions. No Product will be accepted for repair,
replacement, credit or refund without the written authorization of Cellebrite.
Cellebrite shall analyze the failures, making use, when appropriate, of technical
information provided by Buyer relating to the circumstances surrounding the failures.
Cellebrite will verify whether any Defect appears in the Product. If a returned Product
does not have a Defect, Buyer shall pay Cellebrite all costs of handling, inspection,
repairs and transportation at Cellebrite’s then-prevailing rates. If a returned Product
has a Defect, Cellebrite shall, at Buyer’s option, either repair or replace the defective
Product with the same or equivalent Product without charge or, if such repair or
replacement has not occurred by the thirtieth (30th) day following Cellebrite’s receipt
of the returned Product, credit or refund (at Buyer’s option) the purchase price within
ten (10) days after such thirtieth (30th) day; provided: (i) Buyer notifies Cellebrite in
writing of the claimed Defect within thirty (30) days after Buyer knows or reasonably
should know of the claimed Defect, (ii) the claimed Defect actually exists, and (iii) the
Defect appears within the Warranty Period. Cellebrite shall ship any replacement
Product FCA Cellebrite’s premises (Incoterms 2010), freight prepaid to Buyer’s
destination. Any replaced Product or replaced parts of any Product shall become
Cellebrite’s property. In no event shall Cellebrite be responsible for de-installation or
reinstallation of any Product or for the expenses thereof. Repairs and replacements
covered by the above warranty are warranted to be free from Defects as set forth
above with respect to any Defect that appears (i) within six (6) months from the date of
repair or replacement or (ii) prior to the expiration of the original Warranty Period,
whichever is later.
B. Touch Screen Exclusion. Notwithstanding Section A, the Warranty Period for the touch
screen of any Product with a touch screen is the period from the date of Buyer’s initial
receipt of the Product until thirty (30) days after such date, and Cellebrite warrants such
touch screen only to the extent any damage to it was not caused by Buyer’s negligence or
willful misconduct.
C. Warranty of Title. Cellebrite warrants that any title conveyed hereunder (excluding
Software) shall be good and its transfer rightful, and that the Products delivered under
this EULA shall be free from all liens, encumbrances and restrictions. Cellebrite further
warrants that it has all rights and powers necessary to perform its obligations under this
EULA and that to its knowledge, it has the right to grant the licenses and other rights
provided to Buyer by this EULA.
D. Software Warranty. Cellebrite warrants to Buyer that for a period of sixty (60) days after
the date of shipment, the Software will perform substantially in conformity with its
Documentation. As Buyer’s sole and exclusive remedy, Cellebrite will, at its sole
expense, in its sole discretion and as its sole obligation, promptly repair or replace any
Software that fails to meet this limited warranty.
240
E. Exclusions. Notwithstanding anything to the contrary in this warranty, the warranties

herein do not apply to, and Cellebrite makes no warranties with respect to defects in
Products or Software in the following cases: (a) Buyer’s misuse, damage, or
unauthorized modification of the Products or Software; (b) Buyer’s combination of the
Products or Software with other products or software, other than as authorized in writing
by Cellebrite; (c) placement of the Products or Software in an operating environment
contrary to specific written instructions and training materials provided by Cellebrite to
Buyer; (d) Buyer’s intentional or negligent actions or omissions, including physical
damage, fire, loss or theft of a Product; (e) cosmetic damage to the outside of a Product,
including ordinary wear and tear, cracks or scratches; (f) for any Product with a touch
screen, any defect in such a touch screen after thirty (30) days from the date of receipt of
such Product, or any defect caused in a touch screen by Buyer’s negligence or willful
misconduct; (g) maintenance of the Products or Software in a manner that is contrary to
specific written instructions provided by Cellebrite to Buyer; (h) a product or service not
provided, authorized or approved by Cellebrite for use with the Products or Software; (i)
any repair services not authorized or approved by Cellebrite; (j) any design,
documentation, materials, test data or diagnostics supplied by Buyer that have not been
authorized or approved by Cellebrite; (k) usage of any test units, experimental products,
prototypes or units from risk lots (each of which is provided "AS IS"); (l) any third party
original equipment manufacturer’s restrictions on individual phones or models of phones
that prevent the phones or models of phones from working with the Products or Software;
(m) any damage to a third party device alleged to or actually caused by or as a result of
use of a Product or Software with a device; (n) any Products that have had their serial
numbers or month and year of manufacture or shipment removed, defected or altered; (o)
any interactions or other effects relating to or arising out of the installation of copies of the
Software beyond the number of copies authorized by an agreement between Cellebrite
and Buyer; (p) use of Products or Software incorporated into a system, other than as
authorized by Cellebrite; or (q) any Products or Software that has been resold or
otherwise transferred to a third party by Buyer (any Product or Software affected by the
cases in (a)-(q) is referred to hereinafter as an "Excluded Item").
F. It is expressly clarified that (i) the operation of the Software and/or Product will not be
error-free; (ii) not all defects in the Software and/or Product will be corrected; (iii) the
Software may not operate on hardware or operating systems or in conjunction with other
software other than as expressly specified in the Documentation or approved by
Cellebrite in writing.
G. Warranty Limitations. EXCEPT AS STATED IN THIS WARRANTY, CELLEBRITE, ITS
SUBSIDIARIES AND AFFILIATES, SUBCONTRACTORS AND SUPPLIERS MAKE NO
WARRANTIES, EXPRESS OR IMPLIED, AND SPECIFICALLY DISCLAIM ANY
WARRANTY OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE OR
NONINFRINGEMENT. BUYER’S SOLE AND EXCLUSIVE REMEDY FOR FAILURE
OF AN ITEM TO CONFORM WITH ITS SPECIFICATIONS SHALL BE SELLER’S
OBLIGATION (i) TO REPAIR OR (ii) TO REPLACE OR, (iii) IF NEITHER (i) NOR (ii) IS
COMMERCIALLY FEASIBLE, TO CREDIT OR REFUND (AT BUYER’S OPTION) SUCH
ITEM AS SET FORTH ABOVE. THIS DISCLAIMER AND EXCLUSION SHALL APPLY
EVEN IF THE EXPRESS WARRANTY FAILS OF ITS ESSENTIAL PURPOSE. THE
ENTIRE RISK ARISING OUT OF THE USE OR PERFORMANCE OF THE SOFTWARE
AND PRODUCT REMAINS WITH BUYER.
242
H. Repaired or Replaced Products. Before returning a Product for service, Cellebrite

recommends that Buyer back up any data contained in such a Product. IN NO EVENT
WILL CELLEBRITE, ITS AFFILIATES OR SUPPLIERS BE LIABLE TO BUYER OR ANY
THIRD PARTY FOR ANY DAMAGES OF ANY KIND WHATSOEVER RELATING TO OR
ARISING OUT OF DAMAGE TO, OR LOSS OR CORRUPTION OF, ANY RECORDS,
PROGRAMS OR OTHER DATA RESULTING FROM CELLEBRITE’S REPAIR OR
REPLACEMENT SERVICES UNDER THIS WARRANTY, OR AS A RESULT OF A
FAILURE OR MALFUNCTION OF A PRODUCT.
Index
Index
C
A
Cellebrite YouTube channel • 22
Activate TomTom Trip log • 152, 159
Changing the application interface language •
Android Debugging Bridge method • 207, 208
163, 169
Android extraction methods • 207
Changing the extraction location • 163
Appendix • 219
Charging the battery • 53
Application License Activation • 55
Clone SIM • 15, 38, 130
Application taskbar • 49
Cloning an existing SIM card ID • 131
B
Connect mobile device • 75
Back panel • 28
Cover Page • 1
Battery • 202
Creating GSM test SIM • 147
Bluetooth Scan • 152 D
Bootloader extraction • 208, 211
Detect automatically • 45
Bottom Panel • 32
Device power-up cable • 199
Device tools • 16, 38
246
Dimensions and weights • 205 General specifications • 201

Disabling the password • 95 Getting started • 35
E H
Enabling wireless and Bluetooth Home screen • 38
communication • 54
I
Entering SIM data manually • 138
I/O interfaces • 204
Exit Odin Mode • 160
Introduction • 11
Extracting Android devices • 207 L
Extracting Data to PC • 61, 78, 122 Left panel • 30
Extraction in Progress • 82 Legal notices • 3
F
License settings • 182
File system extraction • 15, 38, 103
Locked HTC, Huawei, and ZTE devices • 213
Front panel • 28
Locked Motorola devices • 212
G
Logical extraction • 14, 38, 73
General settings • 162
Index
M Performing a physical extraction • 109
Managing report fields • 176, 177 Performing File System extraction for an
Android device • 212
Managing the Custom List • 163
Performing logical extraction • 74
Mobile Extraction Client • 163, 173
Performing password extraction • 89
N
Performing SIM data extraction • 119
Network • 197, 203
Permission management • 189
O
Physical extraction • 16, 38, 109
Orientation to the UFED Touch unit • 25
Power supply • 202
Other locked devices • 214
R
Overview • 11
Report settings • 174
P
Right panel • 31
Password extraction • 15, 38, 89
S
Performing a file system extraction • 103
Search function • 42
Performing a File System Extraction • 108
Select Content Types • 79
248
Select extraction location • 78 Test Peek/Poke functionality • 152, 157

Select phone memory • 76 The Extracted Data Folder • 86
Settings • 50, 161 The extracted passwords folder • 94
SIM Card Functionality • 119 The extracted SIM data folder • 129
SIM data extraction • 15, 38, 119 The file system extraction folder • 108
Special cables • 199 The Physical Extraction folder • 117
Starting the UFED Touch application manually Top view • 25
• 37
Turning the UFED Touch Unit On or Off • 35
Supported devices • 21
U
Switch to CDMA Offline Mode • 152, 155
UFED Touch accessories • 17
System settings • 180
UFED Touch extraction types and device tools
T • 14
Technical specifications • 201 Uninstall Android Client • 160
Technical terms • 217 Uninstall Windows Mobile Client • 152, 159
Temperature • 205 Unlocked devices • 213, 215, 216
Index
Updates and versions • 185

User permissions • 186
Using cables and tips • 18
V
Version details • 184
Virtual keyboard • 51
W
Waking up from sleep mode • 53
Working with UFED Touch • 37

Cellebrite OnRetrieval UFED Touch Manual Usuario

Uploaded by

Copyright:

Available Formats

Cellebrite OnRetrieval UFED Touch Manual Usuario

Uploaded by

Document Information

Original Title

Copyright

Available Formats

Share this document

Share or Embed Document

Sharing Options

Did you find this document useful?

Is this content inappropriate?

Copyright:

Available Formats

Cellebrite OnRetrieval UFED Touch Manual Usuario

Uploaded by

Copyright:

Available Formats

UFED Touch

Chapter 3: Getting started................... 35

12.2. Report settings ................................. 174 14.4. Network............................................ 203

15.1. Android extraction methods.............. 207

Chapter 16: Appendix ........................ 219

Figure 1: UFED Touch unit

1.2. UFED Touch extraction types and device tools

Table 1-1: Functionalities of the UFED Touch products

The extraction types are:

 Physical extraction (page 151)

1.3. UFED Touch accessories

Figure 2: UFED Touch Cables and tips

1.3.1. Using cables and tips

Figure 3: Single cable

Figure 4: UFED Touch tip (example)

Figure 5: Enlargement of notification

1.4. Supported devices

 UFED Phone Detective (devices supported for logical extraction only).

1.5. Cellebrite YouTube channel

2.1. Top view

The following components can be found in the top panel:

Figure 7: UFED Touch top view

The LED indicator panel displays the following:

Figure 8: Top panel LED indicators

2.2. Front panel

Figure 9: UFED Touch front panel

2.3. Back panel

The back panel includes the following components:

Figure 10: UFED Touch back panel

2.4. Left panel

Figure 11: UFED Touch left panel

2.5. Right panel

Figure 12: UFED Touch right panel

2.6. Bottom Panel

Figure 13: UFED Touch bottom panel

3.1. Turning the UFED Touch Unit On or Off

Figure 15: Device right panel – On/Off switch

To turn the UFED Touch unit on:

Figure 16: Power indicator

During the startup sequence:

3.2. Working with UFED Touch

3.2.2. Home screen

3.2.3. Search function

These letters appear in the Search field.

The Select Model screen appears.

4) In the Select Model screen tap to activate the device keyboard.

5) Start typing the letters of the model.

3.2.4. Detect automatically

The following screen appears.

2) Select the relevant model.

3.2.5. Application taskbar

Figure 17: Application taskbar

Table 3-1: Application taskbar icons and descriptions

Show/Hide the virtual keyboard

Return to home screen

3.2.6. Virtual keyboard

Figure 18: Virtual keyboard

Table 3-2: Virtual keyboard icons and descriptions

Icon Key Function