The following are features of Cellebrite UFED Physical Analyzer:
- It supports physical and advanced logical acquisition (filesystem acquisition)
- It extracts device keys required to decrypt raw disk images as well as keychain items
- It decrypts raw disk images and keychain items
- It reveals device passwords (not available for all locked devices)
- It allows the examiner to open an encrypted raw disk image file with a known password
- It supports passcode recovery attacks
- It supports advanced analysis and decoding of extracted application data
- The platform provides access to physical and logical data extracted in the same user interface, making analysis easier
- It reports generation in several popular ...