How to Share, Review and Interpret Your Digital Evidence Discoveries with Cellebrite Reader
Cellebrite Reader enables investigators and prosecutors to tackle several of the issues surrounding modern-day mobile device forensics. Reader accomplishes this by helping investigators, not normally involved in digital forensics, to actively participate in the search for digital evidence files.
A major issue surrounding mobile device forensics is a phenomenon called, “data flood”. Data flood characterizes the flood of digital data that examiners often have to wade through on a regular basis. One contributing factor to this flood of data is the number of mobile devices involved in investigations.
Another major factor causing data flood is the rate at which memory size is increasing. Today, we are seeing memory sizes in mobile devices comparable to those found in laptop and desktop computers. Combine that with multiple devices in an investigation, and a digital forensics examiner can quickly become overwhelmed.
This brings us to the dreaded backlog scenario.
Ask any digital forensics investigator in the world and they might tell you that every day they have more work than they can possibly get done in 24 hours.
Reader equips multiple investigators to participate in the forensics process and streamline the workflow, which will lead to less backlog and quicker turnaround time for everyone involved. When preparing evidence for a report or a court presentation, certain items may be more useful or relevant than others, so Reader also allows you to generate customizable reports.
To help improve your investigation skills in just 45 minutes, we created the webinar – Cellebrite Reader Best Practices – to show you a brief demonstration of the key benefits you can gain by using Cellebrite Reader. Even if you have never used it before, this is a great starting point for you as we’ll discuss real-world examples from detectives and prosecutors who utilize the Reader in their day-to-day investigations.
Justin Cole – Manager of Contractors for Special Projects
A forensic trainer with Cellebrite, Justin brings years of hands-on practical experience with digital forensics to the Academy, including mobile device, computer and point-of-sale network intrusions. He is responsible for course content delivery around the world to state and local law enforcement officers.
Justin takes pride in ensuring that course deliveries are of the highest professional caliber and relate to investigators in real and practical ways. Additionally, Justin assists the Cellebrite Training Team in developing new course content and performing research for emerging devices, technology and techniques.
He is a member of the International Association of Computer Investigative Specialists (IACIS) and a Certified Forensic Computer Examiner (CFCE).
Cellebrite Reader Walkthrough:
First, Justin will show you how to download the Reader for free, if you don’t already have it. Then, you’ll see how to load a report you receive from your forensics examiner as well as several ways to open this type of report inside the software.
It’s important here to note that Cellebrite Reader enables you to open files created by the Cellebrite Physical Analyzer (PA) software. PA offers market-leading access to digital devices and unsurpassed capabilities to extract and decode every ounce of data. PA is often times used by the forensic analyst to create Reader reports for investigators and prosecutors. You will learn how to perform searches, conduct analysis and generate your own customizable reports.
Once inside the interface, Justin will walk through real data examples to give you an in-depth look at how to navigate and understand the main extraction summary screen, which we call the data pane or the data area.
Justin will demonstrate:
- How to open items from the project tree and look at them in table-view
- How to perform a project search to search across all artifacts
- How to do a table search inside of each categories’ table
- How to tag and generate reports
See what Cellebrite Reader users are saying:
“I was able to leverage the Cellebrite Reader to bring in other detectives to review photo and video evidence to streamline intelligence gathering and reporting.” Ed Michael – Detective, Digital Forensics Examiner, Orlando Police Department
Detective Michael played a crucial role in the recovery and analysis of data following the infamous Pulse Nightclub shooting in 2016. He faced a multitude of witnesses’ phones to process following the tragedy.
Additionally, he reported a case involving human trafficking and an overdose of MDMA, where he supplied the lead investigator with 16 Cellebrite Reader reports for different mobile devices involved in the case. The investigator’s knowledge of the case allowed him to find evidence in the Reader reports which led to “five arrests including 2nd-degree murder.”
“We would not have been able to review the cases with the detail needed in such a timely manner without the help of Cellebrite Reader and the other investigator.” Ed Michael – Detective, Digital Forensics Examiner, Orlando Police Department