Different Methods for Creating Reports in Cellebrite Reader
In this episode, I focus on the various options to create reports in Cellebrite Reader.
As a reminder, Reader is a review solution. So, this should not be the primary solution that you are conducting your investigation from. Forensic examinations require deep-dive analysis where you follow the data source, look at the Hex, or run the App Genie to do additional data carving.
Generating a report
Let’s perform step one. Within Cellebrite Physical Analyzer, click on ‘report’ and then, ‘generate report.’ You will be able to see where you can browse to save your report and be given the opportunity to name the file.
For this example, I’m going to use the format UFDR (for Cellebrite Reader or Cellebrite Pathfinder) and then fill in all case information in the available fields as needed.
After I select ‘Next,’ I will see the ‘New – Enhanced report time range picker.’ (In the latest version of Cellebrite Physical Analyzer, you can now generate reports that only display data from a specific time range.)
When you have consent or legal authority to a specific time range, you will be able to filter the time window by dates. At this point, you can select or deselect all data types you want to include such as Activity Sensor Data, Call Logs, or Searched Items. You will be able to also calculate hash values to better determine what you want in your report.
Make sure to select the checkbox, ‘Include Cellebrite Reader,’ if this is the solution you will be sharing the report from.
Listen to the full episode to learn more.