- BLACKBAG FORENSICS COMPARED TO OXYGEN FORENSICS DRIVERS
- BLACKBAG FORENSICS COMPARED TO OXYGEN FORENSICS ANDROID
- BLACKBAG FORENSICS COMPARED TO OXYGEN FORENSICS SOFTWARE
Eventually after being in business for about year we went ahead and purchased a Cellebrite UFED Touch Ultimate.Īt the present time mobile devices are about 75% of our firms business and about 90% of our firm's charitable work (we provide a lot of free forensic work for law enforcement on child exploitation cases which is what most of us did previously). We tried Sustein's Secureview, Paraben's Device Seizure, Oxygen, and Lantern. When we opened up our own shop we spent a lot of time looking at options other than Cellebrite because of the expense (both the 10K initial purchase and the 3K maintenance per year). I will go ahead and throw my opinion out there.įirst of all my firm is all retired law enforcement and so we were trained on Cellebrite from early on. There are some that just "present" you the data and others that make further investigation alot easier.
BLACKBAG FORENSICS COMPARED TO OXYGEN FORENSICS SOFTWARE
IMHO when comparing these tools it is also very important to look at what you can do AFTER the software has finished decoding. There is no way to guide it to that new folder…and so on. are missing because the filepaths changed after the last app-update. Sometimes you find out that emails/chats etc. Or you want to browse through the file system and look for additional android-email-apps/backups etc.Looking at files in hex ? - good luck with that again - you`ll end up using external hex-viewer which is a cumbersome workflow. wal files ? did it carve in unallocated space ? Good luck analyzing that. Now you and want to check which databases the tool looked at and which are missing ? Did it look at.
BLACKBAG FORENSICS COMPARED TO OXYGEN FORENSICS ANDROID
Lets say you've got an android device "decoded" with XRY - it tells you that there are 4 emails on the device. Especially when working with smart devices (android, iOs etc.)īy all means these tools, despite beeing really good, are not "fire and forget". Of course, dual-tooling seems a nice and handy thing but… to be honest…knowing the limitations of these tools (and i mean all of them) you cannot "seriously validate" your data just by using multiple tools. I am not saying that it is perfect and it does have some problems, but I have found it the best when compared with the others out there. Maybe that is why the win so many awards. On one recent occasion, they even sent me the latest software version (they were still testing it) just so that I could examine the phone, but only on the basis that it was still being tested. I have on a number of occasions been confronted with a phone that is/was not supported and they bend over backwards to help.
BLACKBAG FORENSICS COMPARED TO OXYGEN FORENSICS DRIVERS
It to is very good, but not as good as the UFED Touch.ĬelleBrite are always on top of the new drivers for the phones and are always updating the firmware. I have also been testing IEF from Magnet Forensics. There has been the odd occasion when it has not found something but most of the time it has. I will normally do a comparison examination using one of the others and 9 times out of 10 the UFED come up trumps. I also have licensed copies of the other three you mentioned and overall, none of the others come near the UFED Touch. I have been using the CelleBrite UFED Ultimate Touch for several years now and cannot speak highly enough about it.