Auto-Open Extractions in UFED
In this episode, I want to focus on some settings in UFED that came up during a recent conference I attended.
Once we have UFED open, the first thing we’re going to do is go up to the hamburger bars in the top menu and click on settings.
There will be multiple tabs you can access across the top, but the one I want to focus on is the General tab. Scroll down, you will see an option to “Automatically open extractions with Physical Analyzer”.
If you are conducting extractions with UFED in your lab and see the prompt “Automatically open extractions with Physical Analyzer”, check the box and this will automatically happen.
Now, you have to choose which extractions you want, any additional artifacts you want to carve, and be prepared with a keyword list for notes or anything else.
Another setting that may be helpful to you is “Save extractions to”. If you want to change where your extractions are automatically saved every time, you can simply press browse and browse out to a different location.
It’s always a good idea to go through the settings and ensure you understand everything being offered to you so that you are not surprised when you hear something that could be making your extractions even easier for you in the long run.