Thursday, October 25, 2012

Cellebrite has two new updates.

Cellebrite Physical Analyzer 3.3 has been released.
iOS support package 4.2 has been released.

Physical Analyzer 3.3 mainly gives support for iOS 6 on devices that were currently supported by Cellebrite.

 The new iOS package gives support for older versions of iOS.

To read more visit Cellebrite

To be trained with the Cellebrite tool and on cellular technologies in the Forensics environment, visit H-11 Digital Forensics


Thursday, October 11, 2012

Cellebrite has some new releases

To start I have added the Cellebrite Touch to the "Current Versions" page.

The Releases are:
Cellebrite Touch Application
Cellebrite Classic Application
Physical Analyzer 3.2
Logical Analyzer 3.2
Phone Detective 1.1.7

Updates include:
  • iPhone 5 file system support
  • iOS 6 file system extractions (I know this pretty much includes the iPhone 5...)
  • Android 4.1 "Jelly Bean" physical and file system support including, pattern, pin, or passcode lock bypass during physical extraction
  • 550 new logical extractions (remember, this can mean multiple versions of the same phone as "multiple" new devices"
  • 34 new physical extractions
  • 6 new file system extractions
  • 4 new password extractions
  • And more
To read about this check out Cellebrite

For training visit H-11 Digital Forensics


Wednesday, October 10, 2012

Passware has released a new version

Passware 12.0 has been released.

To read up on what it can do for you visit Passware

To purchase visit H-11 Digital Forensics 


Vound Software has a new version of Intella

Intella 1.6.2 has been released.

The main changes include:
  • Improved the reporting of indexing errors
  • Faster performance and heightened stability
  • An experimental 64 bit version is now available on request.
To learn more visit Vound

To purchase visit H-11 Digital Forensics


Katana Forensics has released a new version of Lantern

Lantern 2.4 has been released.

To see/read more visit them Katana Forensics


Access Data has released some new versions.

FTK Imager 3.1.1 has been released!
License Manager 3.1.5
Mobile Phone Examiner Plus 5.1
Codemeter Runtime 4.5.0b (both 32 bit and 64 bit)

FTK Imager release notes mention that it now:
  • Supports creating, reading, and verifying E01 files of drives greater than 2 TB
  • When performing a memory capture, you can now include the pagefile and save memory as an AD1
  • A fixed issue with reading exFAT partitions even if there is a slight difference between the sector count of the volume and the partition information.
The release note for Mobile Phone Examiner Plus 5.1 include:
  • A Social Analyzer Spoke Chart that allows you to visually represent multiple contacts on a cluster
  • Performance enhancements
  • Support of DD8 images
  • More support for iOS devices
  • Ability to mount any image as a drive letter
 Fore more information visit Access Data

To purchase or for even more information visit H-11 Digital Forensics 


Guidance Software release EnCase 7.05

EnCase 7.05 has been released!
Guidance Software also released EnCase Portable 4.01

For the most part, this update revolves around speeding up processing time within EnCase 7.  The release notes talk about:
  • Faster processing
  • Prioritized processing
  • Ability to embed Hyperlinks in Exported Reports
  • Two new ways to filter
  •   Filter the current table and stay in the same view with all the metadata available
  •   Filter across all pieces of evidence in your case and view the responsive items in the results view.
  • You can now review search hits while EnCase is processing, rather than waiting for EnCase to finish.
  • In the Search and Results Tabs you can now copy files, copy folders, add results to the hash library, and save results!
  • PGP 10.1 and 10.2 support
  • Mac OS 10.6 and OS 10.7 supported
  • Enhancements were made to the Windows Event Log Parser.
  • And more
To see more visit

Or to purchase and get trained on EnCase visit H-11 Digital Forensics


An Apology

I feel the need to apologize to any of my readers.

I have been traveling for the past few weeks and updating the blog from different areas has been problematic in the past so I avoided doing so.  I promised myself that I would update over the weekends, but that did not happen.

There have been a few updates since my last post so here they are...

Well, in the the next couple posts... ;)