Cellebrite Physical Analyzer v7.61 Logical Analyzer 7.61.0.12 2023

Here’s What’s New in Cellebrite Physical Analyzer Version 7.61

Summary

Cellebrite Physical Analyzer Version 7.61 introduces new examination and validation capabilities.

Android

»    Samsung Dual Messenger Support

View Samsung’s implementation of Dual Apps for WhatsApp, Telegram, and Snapchat applications.

»    Support for Samsung Digital Wellbeing

Review the device events, user app usage, and notifications collected by Digital Wellbeing to identify usage patterns.

iOS

»    Updated support for imo

Take advantage of the latest version of the messaging app imo (version 2023.02.3031)

»    Updated Biome Support

Make the most of the new Biome Notes decoding.

»    Increased Support of WhatsApp

Exploit the parsing of WhatsApp messages which were received while the device was locked and have not yet been written to the main WhatsApp database.

General

»    LevelDB Database Viewer Support

Use the LevelDB databases within the Database Viewer for validation or research purposes.

»    Enhanced PA-Commander Communication

Benefit from easier management and distribution of Physical Analyzer licenses and installations across your agency.

UFED Cloud

»    Added Support iCloud Advanced Data Protection

Make use of the support for cloud extractions of the updated Apple iCloud security method using either Apple credentials or Account Packages (for supported devices and OS)

*Note that the use of Security Keys is currently not supported.

»    Snapchat Access Token Enhancements

Due to changes made by Snapchat authentication, we have temporarily disabled the ability to use tokens found on a device to download data for any account which is not currently logged

If you require cloud data from any account other than the currently logged-in account, it is suggested to wait until the next release of UFED

The 14-day limitation for extracting Snapchat cloud data using Account tokens has been removed, and the account tokens will now work

Support for Updated App versions

**65 updated applications: Support for 65 new app versions of iOS (30) and Android (35) devices.

New Examination Capabilities

PA Commander Communication

Physical Analyzer has updated support for the management, distribution, and updates of software licenses using Cellebrite

Supports software license update from commander CMS to

Supports issue C2V V2C license

C2V license can now be loaded from the PA

PA commander connection UI

Supports CMS Commander 26

Silent PA update from Commander is now Once a new PA version is available, CMS will update PA on a PA application startup or by user demand from the HELP menu ‘Check for new version’

Support Apple Notes from iOS Biome

Physical Analyzer has expanded the number of artifacts supported by iOS Biome.
PA can now parse Notes from Biome streams, which might contain unique
content from notes that were recently deleted or edited.

Support WhatsApp iOS – LocalKeyValue.sqlite

Extracts data from WhatsApp cache DB LocalKeyValue (AFU).

Physical Analyzer now supports the parsing of WhatsApp messages received
while the device was locked and not yet written to the main WhatsApp database.

Support for Samsung Digital Wellbeing

Digital Wellbeing is an Android service that allows users to personalize and monitor their
Phone and App usage. PA users can now see the device events, user app usage,
and notifications that Digital Wellbeing uses to identify user patterns.

PA now supports Samsung implementation for this service.

Samsung Dual Messenger Support

Physical Analyzer now supports the Samsung implementation for dual apps for these applications: WhatsApp, Telegram, and Snapchat.

Kakao Apps – Android

Added support for Kakao Map and Kakao T (Taxi)

Kakao Map artifacts: Locations, Journey,
Searched Item Kakao T artifacts: Locations
Support for latest Kakao Talk

 

Firefox Android

Physical Analyzer now parses credit cards that are saved on the Firefox browser.

 

LevelDB Database Viewer Support

Physical Analyzer now supports viewing LevelDB databases within the Database Viewer. Note that LevelDB databases are made of a collection of files within the LevelDB database folder. Launching any of the *.ldb files within a folder will result in the LevelDB database being displayed.

 

Support for the latest version of imo on Android

This version provides updated support for the imo application. It supports the parsing of the DB of logged-out users.

Added parsing capabilities of additional artifacts: Shared locations, Call Logs, Friend Requests, and Stickers.

BSSID service is disabled in PA 7

BSSID and cell tower enrichment service are disabled as of this version.

 

New UFED Cloud Capabilities

Snapchat Access Token Enhancements

» Access Tokens within the account package will now remain available and valid for an extended period of time.

» Authentication using Account Package now works for the Snapchat account that was active at the time of the device extraction. There are no time limits.

» Due to changes made by Snapchat to the user authentication process, support for extracting secondary (offline) accounts via Account Package has been temporarily disabled.

Support iCloud Advanced Data Protection

UFED cloud now supports the new Apple security method using credentials.

Install “iCloud For Windows” from Microsoft Store on your machine. You will then be able to use the new capability to authenticate iCloud ADP enabled accounts.

Download FREE Cellebrite Physical Analyzer v7.61 Logical Analyzer 7.61.0.12 2023 – IAASteam.com