Tagging Improvements As Easy As 1-2-3 with Cellebrite Inspector 2018 R4
This year BlackBag (a Cellebrite company) has been releasing new features and user-suggested improvements at a rapid pace. From our industry-leading APFS support to simplified reporting, we’ve been busy providing you a tool that meets today’s needs.
Our latest release, Cellebrite Inspector 2018 R4, includes several updates to support devices released this fall as well as the new picture and video formats examiners are encountering more frequently. Based on user feedback, we’ve also included significant improvements to a user’s ability to tag files that we will cover in more detail below.
Starting with Cellebrite Inspector 2018 R4 we now support the following new device and artifacts
- Apple’s latest picture and video formats (HEIC/HEVC) support
- iPhone XS, XR, and iPad Pro device support
- Parsing “Recent Items” on macOS 10.13
Starting with this release, Cellebrite Inspector is now distributed exclusively as a 64-bit application. Using a 64-bit application on a 64-bit system will result in improved performance as Cellebrite Inspector can take advantage of additional memory usage.
As examiners work their case, they have asked for more flexibility in what items to include in the report and an easier way to see items tagged for reporting. We’ve added three major improvements to Cellebrite Inspector to help make this process easier.
In most views in Cellebrite Inspector, examiners will have a new column that will show if a file or item has been marked by any of the current case tags. This column allows examiners to see at a glance if a file is included in the report. The Tag column and the Evidence reference number are both fixed to the left-hand side of the table.
The Tag Column is always displayed in the far left of the table.
Viewing Tags for an Item
In any view, the examiner can sort by the tag column to group the tagged items at the top of the view. In addition to displaying that an item has been tagged, examiners can also see which tags have been applied; including if a file is marked with multiple tags.
Sorting the Tag Column will group tagged items together.
Removing a Tag
Whether an examiner inadvertently tagged a file or the file is unable to be included in the report, users can choose to now remove one or more tag groups using the right-click contextual menu. To clear all applied tags select All Evidence Tags from the Remove options.
Examiners can right-click and select to Remove Tags from a file. If multiple tags are applied they can clear each one or all.
Learn more about Cellebrite Inspector here.