Intella New Version

Intella has released version 1.5.3

Whats new:

General
Date Format setting in the preferences, so you can display the dates in the format of your region
Solved an issue of the main process not stopping properly when a user exits Intella
Java heap size of the main and child processes can no be adjusted

Numerous Index features added as well

www.vound-software.com

Wetstone has two new releases

Gargoyle Investigator Forensic Pro Edition Version 5.0

Stego Suite Version 6.0

www.wetstonetech.com

Access Data New License Manager

License Manager 3.1.3 has been released

www.accessdata.com

Cellebrite Release

Cellebrite has released two new versions of software.

Physical Analyzer 2.4.1.3 has been released

Cellebrite Application 1.1.9.2 Firmware Update has been released

Four (4) new Blackberry devices supported via physical:

• GSM - 8520 Curve
• GSM - 8120 Pearl
• GSM - 8910
• CDMA - 9650 Bold

Improvements related to:

• Blackberry Logical Extractions
• Blackberry 8900 curve physical extraction
• Android Physical Extractions

Physical Analyzer has had the following changes:

• New Decoding for the following

1. HTC: ADR6400L, ADR6425, PG41200
2. Motorola: A953, A956, MB810, MB855, MB870, XT610, XT865

• UFED Physical Analyzer Improvements to iPhone backups and the decryption and decoding of Blackberry email. 

www.cellebrite.com

EnCase 6 New Version

EnCase 6.19.3 has been released

Items fixed as of the release:

Fluctuating CPU speeds with On Demand machines causes values in the Registry to change, which in turn stops the SAFE.

A user cannot decrypt RMS devices with known good credentials

The default error granularity (64) for memory acquisitions is too high.  It should be 1.

CREDANT file decryption intermittently fails to properly process a file, resulting in a hash mismatch.

www.guidancesoftware.com

Cellebrite Blackberry Physical

It is here.  It works.

This is not a chip off examination.  The blackberry was not damaged by this imaging!

I have tried it on one phone so far and intend to keep playing with the tool.  I had a successful physical dump from a blackberry!

The Cellebrite dumped this into a .bin file that you can look at with any tool that allows you to view hex.  (Physical Analyzer, EnCase, FTK Imager, or any others.)

www.cellebrite.com

Encase 7 New Version

Encase 7.02.04 is here.

Foreign language support is here!

Items Fixed:

An Internal error occasionally displays when running Case Analyzer, casing Case Analyzer to not start.

When using the format DD/MM/YY, EnCase reports a "Date is out of range" error.  This occurs only for European customers.

www.guidancesoftware.com

Cellebrite Update!

New Cellebrite Version is out.

Application 1.1.9.0
Physical Analyzer 2.4 is also out

Cellebrite is claiming Blackberry Support.  I will test it this week and report back on it here.

Thanks for tuning in!

Remember to keep a copy of the previous versions just in case an error occurs.  This happens with all Forensic tools on occasion and it is better to be safe than sorry.

www.cellebrite.com

Current Versions

Listed are some of the tools I use and the current versions.  I will update this blog weekly and edit this list as a Master of these tools.  If there are any tools you want added to the list please ask.

The homepages for the listed tools are linked as well.  For most of the sites you will need to create user accounts to gain access.

If you want/need to purchase any of these tools visit us at: http://www.h11dfs.com or call us 801-596-2727

Regards Hew

Guidance Software
www.guidancesoftware.com
EnCase 7.06
EnCase 6.19.7
EnCase Portable 4.01

Access Data
www.accessdata.com
FTK 4.2
FTK 3.4.1
FTK 1.81.6
Registry Viewer 1.6.3
FTK Imager 3.1.2
FTK Imager Lite 3.1.1
PRTK 7.0
DNA 7.0
PORT 2.0.3
License Manager 3.1.5
Mobile Phone Examiner Plus 5.2.1
MPE+ Investigator 5.2.1

Paraben
www.paraben.com
Device Seizure v6
P2 Commander v2
E-mail Examiner v7.1


X-Ways
www.x-ways.net
X-Ways Forensic 16.8
Investigator 16.8
Win Hex 16.8

Lightbox Technologies
www.lightboxtechnologies.com
Lightgrep Search 1.01

Tableau
www.tableau.com
Firware Updater 7.01


Logicube
www.logicube.com
Forensic Dossier 3.3.3RC13
USB/Firewire Cloning 0.27
Talon Enhanced 3.3.3RC13
Quest 2 1.08
Talon (Legacy) 2.57
CellXtract 1.4.0.5

Cellebrite
www.cellebrite.com
UFED Touch Application: 1.8.5.0
UFED Classic Application: 1.8.5.0
Full 1.0.2.9_34
Tiny 1.0.2.1
UFED Physical Analyzer 3.6.5
Phone Detective 1.1.7

Micro Systemation
www.msab.com
XRY 6.5 current


Black Bag
www.blackbagtech.com
MacQuisition 2013 Release 1
BlackLight 2012 Release 4.1

Katana Forensics
http://katanaforensics.com
Lantern 2.4.1
Lantern Lite Imager 0.7.2

Intella
www.vound-software.com
Intella 1.6.3

WetStone
www.wetstonetech.com
Gargoyle Forensic Pro 5.2.1
 Latest Gargoyle Data-set is November 2012
Fibonacci Dataset Creator 1.0
Gargoyle Investigator Enterprise Module (GEM) 3.2.0
Stego Hunt 6.0
Stego Break 6.0
Stego Analyst 6.0

SARC
www.sarc-wv.com
StegAlyzer

F-Response
www.f-response.com
F-Response Field Kit 4.0.6
F-Response Consultant 4.0.6
F-Response Enterprise 4.0.6

Magnet Forensics (Formerly JAD Software)
www.magnetforensics.com
Internet Evidence Finder v5.8.1

Passware
www.lostpassword.com
Passware Kit Forensic 12.3

Elcomsoft
www.elcomsoft.com
Distributed Password Recovery 2.99
Office Password Recovery 5.11
Office Password Breaker 3.02
Phone Password Breaker 1.87

H-11 Digital Forensics offers training on many of the tools listed above.  If you have questions about any of the tools feel free to email me.  Matt@h11dfs.com

 If you are interested in training check out our training pages:
 www.h11-digital-forensics.com/h11-tap-training.php