Upcoming Cellebrite UFED v7.45 release Note:

It’s been over a year since we first introduced the comprehensive implementation of a checkm8
based extraction breakthrough in Cellebrite UFED. This easy-to-use, all-in-one capability helps
examiners collect full File-System data from various iOS devices from iPhone 5 to the iPhone X.
To date, the Cellebrite checkm8 extraction implementation has utilized a file-archive format
called DAR (Disk Archive http://dar.linux.free.fr), which is a container that holds the extracted
files with all the media and database assets, structured and organized. While this format has
been effective, we have continued to search for ways that allow the collection process to be
faster, more robust, and more stable. To this end, we are happy to introduce a new, simpler
collection archive format known as CLBX.
The upcoming release of Cellebrite UFED v7.45 will enable our users to enjoy the benefits of
CLBX. This synergizes with Cellebrite Physical Analyzer, which also supports the decoding of the
CLBX file format. Together with our new extraction logic, the CLBX format brings:
1. Speed – Our new collection method has proven to be much faster, with testing already
showing twice the improvement of the previous DAR-based collection.
2. Robustness – CLBX allows the collection process to be more robust and stable. With
the new CLBX format, system freezes or failures in the middle of the data collection process
are specifically handled and logged as part of the extraction metadata itself.
3. Easier Inspection – One of our design goals for the new format was to enable easier
manual inspection and interoperability with other examination tools. At its essence, CLBX
is an uncompressed ZIP archive with simple extensions to store extended metadata and
attributes of the extracted files, which are often critical parts of digital forensic
examinations.
4. Extensibility – The new format was designed with extensibility in mind to allow better
future support for enhanced capabilities.

For the technical specifications, visit the following Github account:

https://github.com/cellebrite-srl/clbx

UFED 4PC 7.45 released.

Volatility 3 Cheatsheet

https://blog.onfvp.com/post/volatility-cheatsheet/
#Memory_Forensics

How To Decrypt BitLocker Volumes With Passware

Read the article from forensicfocus

https://www.forensicfocus.com/articles/how-to-decrypt-bitlocker-volumes-with-passware/
#Memory_Forensics

Magnet Axiom 5.1 released just now.

You can download the setup from here:

https://prod-releases.magnetforensics.com/axiom/5.1.0.24999/installer/AXIOMv510.24999setup.zip

To get the crack, contact @UnBin4A

Magnet 5.1

M1ssing Register Access Controls Leak EL0 State

https://m1racles.com/

Cracking FileVault 2 (HFS+ or APFS)

https://tinyapps.org/docs/cracking-filevault.html

Magnet Axiom (or Magnet Cyber)

Recovery images for Samsung devices
Compatible devices list:
Direct Link

Download recovery images – Part 1:
Direct Link

Download recovery images – Part 2:
Direct Link

To get the crack of latest version, Contact Telegram: @UnBin4A

#Magnet
#Axiom
#Cyber

Magnet Axiom (or Magnet Cyber)

Recovery images for Motorola devices
Download recovery images:
Download from here

To get the crack of latest version, Contact Telegram: @UnBin4A

#Magnet
#Axiom
#Cyber

Magnet Axiom (or Magnet Cyber)

Download mode for MTK chipsets
View compatible devices:
Direct Link

Download drivers:
Download from here


Download mode for LG devices
Download drivers:
Direct Link


EDL Mode for Qualcomm Chipsets
Download EDL programmers:
Direct Link

Download EDL drivers:
Direct Link


To get the crack of latest version, Contact Telegram: @UnBin4A

#Magnet
#Axiom
#Cyber

Nokia Lumia Windows Phone Extractions Using UFED 4PC

https://github.com/elceef/bitlocker

Bitlocker plugin for Volatility.

Course name: Computer forensics investigation

Link:
https://mega.nz/folder/LvQyGJwI#gy00PDSQUHvaEmLX6dqdqw

Cellebrite released a minor version for UFED 4PC

Logging in the Cloud From Zero (Incident Response)

#Cloud
#Forensics

Oxygen Forensic 13.6 released.
Here is release note

https://www.youtube.com/watch?v=G7WKqn1suqc

What is new in Oxygen 13.6

Crack is available.

To get the crack of latest version, Contact Telegram: @UnBin4A

Qualcomm Generic and Qualcomm Decrypting - How to Detect Supported Device Modes DFU/FTM/EDL/ADB

Question
To use the Qualcomm Generic or Qualcomm Decrypting methods, your device must be able to enter 1 of 3 modes: DFU, FTM, or EDL. Next 4 posts explains how to detect which mode your phone enters.

Ref: Cellebrite

#UFED_4PC