Zergling wrote:
Just another call on cellebrite (physical).
At least in comparison with xry and oxygen there is no real competition.
...
Hope that helpsHorse for courses surely?
I recently did a comparison of UFED with XRY purely as imaging tools (not carving, interpretation, reporting etc). It was only on one iPad2 with IOS 7 captured from the wild (so only another 12K devices, God knows how many variants of o/s times the unique history of each device remaining to test), <img src="images/smiles/icon_biggrin.gif" alt="Very Happy" title="Very Happy" />
I popped the results of that imaging into Encase, ran hopefully appropriate searches & XRY won hands=down on that one - UFED missed some really important stuff including plists & SQLite databases.
This is unfair because I think UFED improved IOS7 support shortly thereafter. Haven't got the time/energy/patience to re-run the test & anyway I'm on leave at the moment.
Finally, totally agree that dual-tooling is a must if a case really matters.
↧