Settings: Avoid Leaving Valuable Information Behind – Cellebrite Physical Analyzer
It is very important to review and check the setting section within Cellebrite Physical Analyzer.
For example, if you are not getting additional deleted information from SQLite, it is likely that under the general settings, the “Use deep carving for SQLite” box has not been checked. Here, you have many other options as well such as enabling AppGenie on all app categories or recovering data from archive files.
Every time you update, it is essential to go through and recheck the settings.
Under “Data Files” you have the option to choose what shows up in plist, archives, documents, and uncategorized. The automatic setting is to tag all untagged files as uncategorized, but you have the option to change that by unchecking those settings.
You have control over the settings in Physical Analyzer and they should be altered for personal preference and reviewed after every update.