Service brief

Maximum access to data from the most complex mobile devicesYour daily challenges change rapidly. And with device and application technology evolving at a blinding pace, the need to quickly extract, analyze and act on digital evidence is an urgent priority. The outcomes of criminal investigations depend on it. Yet even with the most sophisticated digital forensics technology available, additional expertise and skills may be required to unlock the intelligence of data on devices that are broken, locked, burnt, water-damaged, or contain unknown application data formats and encryption technologies. Cellebrite’s Advanced Services provide that extra assistance when and where it’s needed most.

Our highly skilled forensics experts deliver customized Unlocking, Extraction, Technical and Advisory Services to augment existing agency resources with leading-edge, best-in-class processes and technical resources to help solve your most complex digital forensic investigative challenges. Cellebrite’s Advanced Services complement your existing digital forensic skillsets, and Cellebrite UFED Series solutions, and enhance evidence access and integrity to accelerate even the toughest investigations.

Advanced Services

Advanced Services

Forensics expertise on demandComprised of highly experienced and skilled mobile forensic professionals, our advanced investigative team delivers on-demand forensic expertise to help agency examiners discover and validate digital device evidence using the latest, most advanced unlock extraction, decoding and analysis techniques. Our global Advanced Unlocking, Advanced Extraction, Technical and Advisory Services help you speed up the development of evidence when lives are on the line. We provide the assistance and knowledge examiners can build on to solve their most complex operational, technical and procedural forensic challenges – and produce evidence you can stand behind anytime, anywhere.

Advanced Unlocking ServicesGiven the privacy interests of most smart phone owners these days, the majority of exhibits that come into the lab are locked. Cellebrite Advanced Unlocking Services is the industry’s only solution for overcoming many types of complex locks on market-leading devices. We can determine or disable the PIN, pattern, password screen locks or passcodes on the latest Apple, Alcatel, Google Nexus, HTC, Huawei, LG, Motorola, Samsung, and ZTE devices.

This exclusive paid Advanced Unlocking Service is available to law enforcement agencies globally for lawfully authorized examinations. Law enforcement agencies are then empowered to perform the device extraction themselves or take advantage of Cellebrite Advanced Extraction Services to retrieve more data from the most complex devices as part of the same submission process.

Strengthen investigative cases by employing industry best-practices, improve operational policies and procedures, and deliver independent evidence verification for stronger cases.

Our experts

Advanced Unlocking and Extraction Services case study

A convicted stalker continued to terrorize his ex-girlfriend despite police intervention. The latest confrontation resulted in a sexual assault. Knowing the suspect’s iPhone 6S likely contained incriminating evidence, investigators secured a warrant to seize and review the device but were unable to unlock it. They called in an expert from Cellebrite Advanced Services who using advanced unlocking and extraction techniques was able to access and preserve deleted messages and pictures as well as location data that corroborated the victim’s statements and destroyed the suspect’s alibi. As a result, the stalker was arrested and convicted of the crime.

Advanced Services

Technical ServicesOur Technical Services deliver a set of unique, exclusive and powerful technical expertise, designed to enhance existing mobile forensic tools and agency skillsets. We work with you to recover valuable evidence from heavily damaged devices, challenging applications and unknown data formats. Performed on premises or at a certified Cellebrite lab, Technical Services are structured to help successfully navigate jurisdictional constraints and procedures, and to meet the most difficult and pressing forensic demands, such as:

• Examining the most fragile mobile devices – crushed, broken, locked, burnt orwater-damaged

• Parsing tough and unknown application data formats

• Extracting and recovering live and deleted data from the widest range of device types and operating systems

Accessing the intelligence of multiple devices from a single case

Investigators recovered more than 20 mobile devices from an arson scene – some burnt, some locked and some unknown models. Lacking the tools and knowledge to address data acquisition from devices in this condition, police feared potential evidence would be unrecoverable. By leveraging onsite Cellebrite’s Advanced Services, texts, videos and emails were extracted from each device. This verified the identities of drug ring suspects who had started the fire to destroy evidence. Arrests were made.

Advanced Extraction ServicesEven if an unlocked device is recovered or a consent search is granted, being able to perform a complete physical extraction, or full file system extraction of the latest Apple iOS and Google Android devices may not be possible through conventional means. Today’s flagship devices commonly employ full disk encryption and have a complicated and highly intertwined relationship between the secure processor and flash memory. Traditional JTAG and chip-off/ISP extraction methods are becoming increasingly obsolete even on lower end handsets.

Cellebrite Advanced Extraction Services dramatically increase law enforcement’s ability to access critical digital evidence on the latest devices and solve cases faster. Available to law enforcement agencies globally for lawfully authorized examinations, this exclusive service offers the world’s first and only decrypted physical extraction capability possible for leading Apple iOS and Google Android devices.

These new capabilities enable forensic practitioners to retrieve the full file system to recover downloaded emails, third-party application data, geolocation data and system logs, without needing to jailbreak or root the device which eliminates any risk in compromising data integrity and the forensic soundness of the process.

Devices supported for Advanced Unlocking and Extraction Services

• Latest Apple iOS devices and operating systems, including iPhone, iPad, iPadmini, iPad Pro and iPod touch, running iOS 5 to iOS 11

• Latest Google Android devices, including Samsung Galaxy and Galaxy Notedevices, and other popular models from Alcatel, Google Nexus, HTC, Huawei, LG, Motorola, ZTE, and more.

Contact Cellebrite for specific requests at https://www.cellebrite.com/en/unlock-sales-inquiry/

Advanced Services

Digital intelligence for a safer world

© 2018 Cellebrite. All rights reserved. v20180802

Extend your team with our expertiseOvercome challenging mobile device locks and encryption. Collect and recover complex live and deleted device data. Augment agency skill sets with industry leading expertise and best-practice methodologies. Cellebrite’s Advanced Services allow you to accomplish all this and more. As an extension of your team, we’ll help take your digital forensics capabilities to an entirely new level whenever and wherever required – either on premise or in-lab at a Cellebrite site. Our flexible, scalable Unlocking, Technical and Advisory Services will address your toughest challenges and help you unlock the intelligence of digital forensic data to accelerate investigations and deliver evidence you can stand behind.

Advisory ServicesOur Advisory Services are delivered globally by a team of highly experienced and certified professionals with deep law enforcement backgrounds. Dedicated to help you solve complex operational, technical or procedural challenges, our consultants employ the latest thinking and cutting-edge techniques to expand and maximize the impact of mobile forensic data agency-wide. Customized to meet your specific needs, Advisory Services can support:

• Evidentiary preparation for complex cases and critical investigations whenextra assurance or precautions are required

• Independent case review or testimony if additional opinion is needed

• Expert insights to assess and implement forensic best practice procedures,along with the appropriate roadmap to accelerate the deployment of digital forensics enterprise-wide

Exclusive industry expertise, reliable investigative outcomes

In a high profile murder case, the lead prosecutor mandated a flawless, court-worthy report. The numbers and types of devices found at the crime scene overwhelmed local examiners. The local lab reached out to Cellebrite’s Advanced Services for assistance to supplement its capabilities. Our highly experienced professionals performed the evidential prep work, as well as advised and reviewed extraction procedures conducted to date. Our independent opinion report was submitted to court, verifying evidential integrity.

Digital data plays an increasingly important role in investigations and operations of all kinds. Making data accessible, collaborative and actionable is what Cellebrite does best. As the global leader in digital intelligence, and with more than 60,000 licenses deployed in 150 countries, we provide law enforcement, military and intelligence, and enterprise customers with the most complete, industry-proven range of solutions for digital forensics and digital analytics solutions in the field, in the lab and

everywhere in between. By enabling access, sharing and analysis of digital data from mobile devices, social media, cloud, computer and other sources, Cellebrite products, solutions, services and training help customers build the strongest cases quickly, even in the most complex situations. As a result, Cellebrite is the preferred one-stop shop for digital intelligence solutions that make a safer world more possible every day.To learn more, visit www.cellebrite.com