There are multiple different options in Cellebrite Physical Analyzer for conducting keyword searches.  

  1. Search bar – Type a word and the tool will go through the data and search for it.

  2. Advanced Search – Filter by “Any of these terms,” “All of these terms,” or “None of these terms.”

  3. Hex Search – Search within a plist, database, or file of interest. The magnifying glass allows you to type keywords and search with various filters. You can choose to search across the entire extraction or within certain databases, plist files, text files, or other files.

  4. File Dump Search – search the entire file dump by clicking on the DAR file and completing the search. This is similar to the Hex search.
Share this post