Home
Table of Contents
Contents
1. m __ gt sano sanos 6 Je w ae eia 2 o o ow GW820 Expo wo ol Lond T T a T a T T T a KX1 KX5 KYOCERA 99 sano w ae 2 22 s a vocem sem vena 140 CellDEK User Manual KE820 22 850 2a KE970 510 600 KG200 KG300 KG320 KG800 n KG920 ala kw KP170 Ls keso a Mel a Lo __ ue ie a a i6 la ic mo CellDEK User Manual SUPPORTED HANDSETS
2. pp m SUPPORTED HANDSETS GSM Jan 09 02 lt lt 07 5 1 07 5 2 07 GS Oct 07 5 08 GSM 1 08 GSM 1 Apr 09 Oct 07 G 02 3 1 07 06 ep lt z Q lt 07 GSM 2 Oct 07 Jul 08 5 2 07 GSM 2 Oct 07 02 02 gt 08 SUPPORTED HANDSETS 331 NOKIA 2650 332 NOKIA 2652 333 NOKIA 2680 334 NOKIA 2 60 5 5 5 3210 3220 ES 2 NOKIA 3230 343 3250 3555 NOKIA 5000 5070 NOKIA 5100 NOKIA 5110 oO CO cO EEpp PPP ele lee _ CellDEK User Manual 148 B S e S fe s efe ele elo ofe efe ele eloo Blea
3. hw6510 hw6515 h6515a h6710 h6715 hw6900 hw6910 hw6920 hw6925 h6940 hw6945 h6965 hx2000 hx2090 nx2110 hx2190 hx2400 hx2410 hx2415 hx2490 hx2495 hx2700 hx2750 hx2790 Vox Voyager Wallaby Wizard XV6900 JAM Black JAMA JAMA101 JAMA 201 JAQ 4 2 EDVO PDAL PDA N Phone Edition HP iPAQ HP iPAQ HP iPAQ HP iPAQ HP iPAQ HP iPAQ HP iPAQ HTC HTC HTC HTC HTC HTC HTC HTC HTC HTC HTC HTC HTC HTC HTC HTC HTC HTC HTC HTC HTC HTC HTC HTC HTC HTC HTC HTC HTC HTC KROME KROME rx3710 rx3715 rx4240 rx5700 rx5900 rz1700 rz1715 Advantage X7500 Advantage X7501 Advantage A7510 Alphine Amadeus Apache Aria Artemis Athena Atlas Blue Angel Breeze Canary Cavalier Charmer Dash 3G Dream EIf EVO View 4G Tablet Excalibur Falcon Faraday Feeler Flyer tablet Galaxy Gene Harrier HD2 Herald Hermes Mega 900 Navigator F1 CellDEK amp User Manual HTC HTC HTC HTC HTC HTC HTC HTC HTC HTC HTC MITAC MITAC 173 P4450 P4500 P6300 P6500 Pand
4. GSM 27 1 08 27 or 08 27 08 27 or 08 GSM 27 pr 08 27 27 09 27 09 m _ sepio n asm o sepo GSM 27 ct 06 m aw 27 Aes GSM ct 06 oco GSM 27 10 27 09 N 7 pr 09 pr 08 an 07 07 e Kie Xe Ke Ke Ke ke Ne Ke Xe Xie Ke Ke Ke Xe ke l ep 10 0 o o o o o o o O lt 27 08 lt gt 27 lt gt pr 08 O lt gt ct 07 pr 06 ay 11 CDM ec 10 lt gt gt gt Pp mmm HHI III HHI HHI HHI HHI HHI HHI HHI HHI HHI HHI III HHI HHI HHI HHI HHI HHI HHI HHI HHI III 5 EN lt pr 06 100012 apros
5. TOUCH CRUISE 2a e am e mc sensation Amaze 4G e e 84 HUAWEI U8150 HUAWEI M735 mE HUAWEI 08800 xw __ _ 22 91 IMATE PDA2K vocem 8 kocem ko KYOCERA 98 KYOCERA efe fefefe fe fe le es fools de CellDEK User Manual 139 exe x e Ke Ke Ke Kje SUPPORTED HANDSETS fo i lt gt gt gt gt ep lt 9 Jul 08 02 lt ul 09 ec 10 O ie 3 02 lt ct 08 ep 10 ct 09 an 10 an 08 C E gt c
6. emm m E Pp Pere eee m m m m Br m m m fm m SUPPORTED HANDSETS lt O ie 3 02 02 lt Ce lt O ie 3 02 lt O ie 3 i 02 lt 2 0 0 0 JO 02 02 02 02 1D 0 0 1M 100 02 02 02 02 02 02 02 lt o o o o 2 o o o o V o 9 9 lt 6 6 IO 1 1 Oct 08 ct 09 ep 10 ec 10 ay 11 Dec 2011 Dec 2011 ct 07 ul 06 ul 06 ul 06 ul 06 an 10 an 09 an 09 pr 08 ul 07 an 09 an 08 gt gt lt gt lt I lt gt lt gt 5 F uolo o o 7 T n N N 07 08 08 07 08 ul 07 pr 07 SUPPORTED HANDSETS ssa saw _ SAGEM myV 65 B f lleje tle fte fte efe E
7. 18 E EE 19 Pe LA E CE IEG ME E LM E ue 19 E EEE EVE EEE 20 CHECKING POR DNEBC TION ae LS AM 20 WINDOWS MALICIOUS SOFTWARE REMOVAL TOOL SCREEN 5 6 21 CEBBDER OPERATION 1 atti 22 TOUCH SCREEN daa 23 Colibraeo the Ju Wl eei 23 Calibr tine ihe Panasonic DUE 24 IDENTIFYING TARGET DEVICE 25 ATTACHING A CEPEPUDASBR PHONE dala ted ______ _____ __ 25 GENERIC EXTRACTION MODUIE l L I vic 29 ATTACHING APIA u 30 S uu u usa gt 32 34 Dual SIME Exiracted DIGIC cs
8. gt gt gt gt gt gt gt gt gt gt gt gt gt gt gt gt gt gt gt gt gt gt gt gt gt gt gt gt gt gt gt gt gt gt gt gt gt gt gt gt 02 lt 9 MTM safe se ees eslee foe Ble fp fle E E Ej e e Je fe fe op CellDEK User Manual 161 SUPPORTED HANDSETS B fl e ele E fe fp E E fe E E e e Je efft e fe fe fe ef E 5 5 a samsuna samsuna 2a samsuna saH x47s Samsuna samsuna samsuna 2a SAMSUNG __ 7 22 SAMSUNG samsuna SAMSUNG scHxe4o SAMSUNG __ 6 SAMSUNG __ a a a 2a esu 14 pecos a esu 20 oct 08 08 07 149 0 0 o o o o o 4
9. esu 24 pecos 2 _ faf o __ 24 apros faf o apros af o pecos asm o esu o gt o neos gt esu vecos 24 apros e 24 gt o vanor gt vecos gt 25 _ oro gt o gt ___ gt 5 o afal o oro o apros gt o apros __ santo faf o suos o sanos com 25 apros 53 gt 53 53 53 53 felem owo 53 6 Q MOTOROLA olm MOTOROLA C332 gt gt gt gt gt gt gt SUPPORTED HANDSETS lato ___ santo ulo
10. ct 07 or 09 ul 09 Co 6 2011 CDM 26 2011 6 2011 CDM 26 201 1 ul 06 ul 06 o o o Q o o o o o o IS o 0 0 2 2 o o 0 19 lt 5 06 02 lt ul 06 O ie P ul 08 ep lt ul 06 O 02 P ul 06 02 lt ul 07 an 09 CDM an 09 CDM CDM ul 06 Jan 09 3 3 SUPPORTED HANDSETS 3 Jan 09 CDMA alaf asm 19 senor mn GSM ala esu 1 senor afol o sumo _ _ ss 5 m GSM afal so sonor lel ___ aros e to vanor esu senor afal io apros afal esu so sonor esu 26 sanio 0910 I 25 sv gt esu 26 26 2011 m 53 53 53 53 53 53 53 53 2 53 53 53 com m
11. Ie KIe XIe SUPPORTED HANDSETS COD O IO JO JO IO JO C 9 JOU JO JO 09 lt lt gt gt gt gt gt gt gt lt gt O lt gt O lt gt o lo o o WW 2 gt gt gt lt gt O i 3 lt gt O JO JO U 0 9 JU lt lt lt gt gt gt gt lt gt o lo lo 12 o lt Iz lt lt lt O 0 lt mje m m CO N J O CO CO CO CO CO W CO 2 Jul 09 or 06 or 06 ct 06 ct 06 pr 06 or 06 or 08 or 08 or 08 or 08 or 08 ay 11 ul 06 ul 06 ul 08 ec 10 ul 09 ul 09 ec 10 pr 08
12. se sew m2 5 sz sew mxe 8 ise samsuna 8 ise samsuna 8 iso samsuna mmo 8 is samsuna 8 ise samsuna 8 is samsuna 8 samsuna cees 8 iss samsuna Eno ise samsuna Emo 8 is samsuna 8 ise samsuna 8 ise samsuna 8 iso samsuna 8 sn samsuna ise samsuna 8 samsuna 3 samsuna sovoo samsuna 8 sze samsuna samsuna sasso iss samsuna sem 3 s samsuna sem 8 iso samsuna 8 i samsuna 5 ise samsuna 5 samsuna 9 BO BS Bo 2012 012 80 28 CellDEK User Manual C O Ie le ozfererleno r tk sano ne a com sanos com sanos com zo suo
13. e cEEEEEEFEEEEEEFEFEEEEEEFEEEEEEE exe x e Ke Ke Ke Kje e Kie Xe Ke Ke xke ke Xe Xie Ke Ke Xe ke SUPPORTED HANDSETS gt E lo Sis 2 gt gt 02 lt O lt gt O lt gt O i 3 02 lt O i 3 149 0 0 100 CO 0 o o o 0 o lt gt 02 lt O ie 1 02 lt o o o o o 19 o IS 2 jo o 0 jz 0 5 24 24 24 24 4 24 24 4 24 24 24 24 24 24 05 0 06 ct 06 0 06 05 06 ul 07 ct 06 gt pr 06
14. D e O JO CD 2 gt gt gt 12 6 ul 08 G lt 05 02 P 06 C 7 05 semens ED cm 8 semens ja CellDEK amp User Manual 163 e 17 ct 06 Ir bebe be beep eb eet eee EEUU i PE gt psa E pea GS 6 06 SUPPORTED HANDSETS E 799 SIEMENS C60 Apr 06 imo siemens __ rare i siemens asm 16 semens 16 vecos semens cre esm 16 suos semens 8 asm 16 apro siemens cers S _ 16 apro semens 8 _ 16 apro lv semens cms 8 apros me semens ces 8 16 bec so _ 5 osm 16 suos io siemens Decos semens ws JO E 333333222223229 120 10222223 32222 SN F P F PF FF FF PF P 1s J J U SIEMENS S 2 SIEM
15. LOBSTER LA SUPPORTED HANDSETS gt M M M La 2 5 08 LL 02 lt ul 09 07 gt _ 192 LG VX8000 gt 6 Jul 06 x DK x 196 LG VX8500 a 277 CDMA 27 08 EX E Q ES Dec 10 202 LG VX9200 CDMA 26 A Dec 10 204 LG VX9700 z m CDMA 26 gt 207 LG P509 La GSM 26 2011 208 LG KS20 GSM 27 2011 Dec 209 LG VS750 26 2011 Dec 210 LG UX310 26 2011 2 211 LG MT375 CDMA 26 2011 Dec 212 LG VN530 26 2011 7 LG Q LG C729 LG 216 168 __ 19 12 Q 5 515 2 Apt Q LG 219 gt 220 gt 221 MIO gt 222 E 26 May 11 222 MOTOROLA 10 DROID CellDEK User Manual eee Pah ae lt 13 ay 11 26 143
16. jon jesemezsm or Peeper p e pppp ppppphppp p 25 GSM 6 25 Z OU GSM 6 O O o o o o o 02 lt 2 O 5 GS G GSM 9 8 I GS lt GSM CDMA 26 0 10 2 2 2 2 2 lt lt lt lt lt N A O 02 lt GSM N O i 3 07 07 09 08 06 ct 07 ul 07 ul 08 gt or 06 Oct 07 or 07 pr 07 pr 07 Oct 07 Jan 08 Oct 07 Jan 08 ct 08 ct 08 ul 07 ec 05 Oct 07 ul 08 c se 8 354 NOKIA 2200 355 5210 5220 5230 k NOKIA 5300 5310 5320 ES NOKIA 5500 5610 5700 5800 365 367 368 369 i amp NOKIA 6010 NOKIA 6020 Se m 6030 6060 370 6061 6070
17. 19 D IM 1 RE o extracted COs Seti g I d n Figure 63 Time Date Stamps Not Extracted MMS Messages MMS messages are basically SMS text messages with attachments CellDEK automatically captures all MMS messages along with their attachments Subject FA Tut m Atta 7 Crate 10004224242 09001001 8000100 Fi Embedded 11143545262 21220070901 d 1000424558242400001001 5001002 PL Copied Embedded Fie 0145 102122007001 x Height 5 53 to Connex Embedded Fies MMS Sound clip wwe 1012007010 100048 0 42100001001 50010052 P Copied to Embedded FiesiMMS 101012007010 3gp ORT 0001001 50010020 Pi Copied Embedded MNCS tot Figure 64 Captured MMS Messages In the example above 4 MMS messages have been captured The first message displayed contains 5 attachments with the following extensions smil This file is extracted from the handset and indicates how the media is grouped together on the handset CellDEK User Manual 90 CellDEK User Manual ANALYZING CAPTURED DATA jpg An image file wav An audio file A video file
18. CAPTURING DATA Network Isolation NIC Cards and SIM Card ID Cloning CellDEK has the ability to isolate many handsets from the mobile network by using a Network Isolation Card NIC NIC cards are placed in the SIM card slot of the handset There are three categories of support for this feature Handsets that support this feature are displayed with a blue NIC icon e Handsets that do not support this feature are displayed with a blue NIC icon crossed with a red line e Handsets that are untested for this feature are displayed with no NIC icon Select Phone Model Page 6 of 12 Figure 45 Connectivity Option Screen CellDEK amp User Manual 55 CAPTURING DATA CellDEK User Manual card is included with each CellDEK Additional Network Isolation Cards can be purchased from your CellDEK supplier Any CellDEK unit running software ver 1 7 0 0 or later is able to support Network Isolation Cards NIC These cards replace the handsets SIM card and isolate the handset from its network while allowing a normal examination to take place CellDEK ver 1 20 0 and higher include the following features e Create from Existing SIM e Manually enter NIC data e Create Test NIC An explanation and summary for each method is included in the step by step instructions below SIM Card ID Cloning Step by step To perform SIM Card ID cloning tap Read New Device from the
19. Extant JPEG Normal readable JPEG files Deleted JPEG Embedded JPEG JPEG files embedded in emails or other files 4 Any found JPEG files will be displayed by CellDEK in the Extended Data screen 5 image file can be copied to a thumb drive and investigated further with hex editing or forensic software NOTE CellDEK cannot distinguish between Extant deleted or embedded JPEG files The image file should be further investigated to determine the status of any found files and whether similar files exist in other formats Attaching a GPS Device 1 Begin by tapping the Read New Device button on the Main Application Screen The Device Type Selection screen will appear GPS Device Select Device Type SIM Card Create NIC Flash Memory Figure 31 Device Type Selection Tap the GPS Device button The next screen prompts the user to choose the type of GPS 38 CellDEK User Manual CAPTURING DATA Garmin nuvi 250w Garmin nuvi 300 Garmin nuvi 760 314 Travel Companion Mass Storage Device Card Navigon 2210 Select Model of GPS device Navigon 7210 Navman 550 3D Nawman 570 Navman 570 30 NOrive 300 TomTom GO 720 TomTom Ore Windows PDA select gt Figure 32 Select GPS TomTom GO 720 is to be selected choose TomTom GO 720 After capture you will get an opportun
20. T MOTOROLA a4 gt gt gt MOTOROLA o m MOTOROLA MOTOROLA 220 MOTOROLA MOTOROLA MOTOROLA 200 m Q9h QA1 252 MOTOROLA 1280 144 CellDEK User Manual 253 MOTOROLA 1300 w _ a _ 257 woronoa _ _ _ ves _ woo _ ves _ wormoa vw woro 287 vao _ v io vi vam 22 vox _ _ wo _ w _ _ w _ 2r ws _ _ woronoa _ CellDEK User Manual e
21. 72 OTHER DATA EXTRACTION NOTES 73 DATA CAPTURED FROM ANDROID GOOGLE 13 SUDDOTE TOF ANGTOIG ROON O See 73 Anard FICS Of miyu over heck _ 75 GapiureJromsipple F NONE 75 FE TONG DI CHON ATV RT 76 PRONE TUES Of mO lu a 76 Data Capture rom cost teas co tas e epa tot dex Capture from Symbian 24 amp 3 Edition OS 77 AAT VOTE 78 Data Capture from Sony Ertcsson PHROROS eo Rito 79 Unlocking Sony E SETE uy tain 60 kDa ______________ Y 62 Time Date Stamps from Motorola Phones 83 Null Response from Siemens handsets isi eee 83 CellDEK User Manual VI TABLE OF CONTENTS SALES AE u a iu pA E ayau 82 Customized Blackberry aet e tne esu eun ee nas Eva 94 Various WInMODIIe Devices 86 D 03 4218402 ORA
22. 86 A ANALYZING CAPTURE DA 87 DISPLAYING EXTRACTED DATA 87 VIEWING STANDARD ME 88 TOS 90 EMAU 91 V TE WANG EXTENDED 92 DISPLAYING PREVIOUS EXTRACTIONS u uu uu um y uade 94 THE AUDII TRATL 95 TIP REPORT Z a mu u 96 SEARCHING REPORTS iL uu uuu 96 CW 97 Additional Report Searching 222 0 0 0 000000000000 00004 98 CELLDEK REPORT BUILDER 99 CELLDEK REPORT BUILDER 07 007 0 700 100 CELLDEK REPORT BUILDERUINSTALLA 100 PRINTING ARE POR 22 uu uu u 102 102 S
23. i ec 10 19 O 0 JO 0 10 o 0 o 0 02 lt 4 05 14 ul 06 4 ec 05 4 an 08 0 0 o o o o ul 06 ep lt ul 07 ct 07 02 lt 4 ec 05 05 m Ie Ke 2 07 06 0 0 10 o jo o o ul 07 WM lt an 09 e Ke O ie 3 2 06 02 lt 2 22 06 22 07 22 ul 07 0 0 JO o MO IW W OD lt lt N DS m A a a 2 i mo c lp o 9 ul 08 02 lt N or 07 seleele selfe b hf f fele e fe fe E e E E f e Je fe fpl ke
24. 07 02 lt 06 HI 06 ul 07 07 He samsuna 3 ul 08 0 0 0 0 0 10 o o o o 0 0 H N 2 ct 06 ep lt 2 N 2 ul 08 761 samsuna scHzso senzsio SAMSUNG 765 4 09 2 ul 06 ul 08 H N N o o 2 o 2 2 CO cO 765 samsuna seus Pu SAMSUNG SPH A580 SAMSUNG SPH A600 CellDEK amp User Manual ul 09 lt gt an 07 epee epee ep eee ep Ie nor G c c Ele 6 5 5 F 18 gt 3 ul 07 O gt 768 SAMSUNG SPH A620 13 06 swor mo samsuna seo __ apros samsuna m swor samsuna seo mic __ apros seo mi
25. DCELLDEK CellDEK User s Manual Version 1 22 0 1 Date 04 24 12 CellDEKO User l TABLE OF CONTENTS Limitation of Liability and Warranty Information Logicube Disclaimer LOGICUBE IS NOT LIABLE FOR ANY INCIDENTAL OR CONSEQUENTIAL DAMAGES INCLUDING BUT NOT LIMITED TO PROPERTY DAMAGE LOSS OF TIME OR DATA FROM USE OF A LOGICUBE PRODUCT OR ANY OTHER DAMAGES RESULTING FROM PRODUCT MALFUNCTION OR FAILURE OF INCLUDING WITHOUT LIMITATION THOSE RESULTING FROM 1 RELIANCE ON THE MATERIALS PRESENTED 2 COSTS OF REPLACEMENT GOODS 3 LOSS OF USE DATA OR PROFITS 4 DELAYS OR BUSINESS INTERRUPTIONS 5 AND ANY THEORY OF LIABILITY ARISING OUT OF OR IN CONNECTION WITH THE USE OR PERFORMANCE OR FROM DELAYS IN SERVICING OR INABILITY TO RENDER SERVICE ON ANY LOGICUBE PRODUCT LOGICUBE MAKES EVERY EFFORT TO ENSURE PROPER OPERATION OF ALL PRODUCTS HOWEVER THE CUSTOMER IS RESPONSIBLE TO VERIFY THAT THE OUTPUT OF LOGICUBE PRODUCT MEETS THE CUSTOMER S QUALITY REQUIREMENT THE CUSTOMER FURTHER ACKNOWLEDGES THAT IMPROPER OPERATION OF LOGICUBE PRODUCT AND OR SOFTWARE OR HARDWARE PROBLEMS CAN CAUSE LOSS OF DATA DEFECTIVE FORMATTING OR DATA LOADING LOGICUBE WILL MAKE EFFORTS TO SOLVE OR REPAIR ANY PROBLEMS IDENTIFIED BY CUSTOMER EITHER UNDER WARRANTY OR ON A TIME AND MATERIALS BASIS IMPORTANT NOTICE PLEASE READ CAREFULLY USE OF THE CELLDEK OR CELLDEK TEK DEVICE TO GAIN UNAUTHORIZ
26. apros SUPPORTED HANDSETS P P fo fal os sv L as e e sanos sanos apros coma 27 oss gt lt gt lt P gt lt gt lt P P PA PA P P gt lt P PA P 6 apros gt apros s e 27 gt com 26 septo pM P P P P _ 5 com 06 53 5 suo 55200 T ae a fea PN be ae we ae PEN 22 w ue a Jeo oco a oco s varo m uxsoo m vaso vaso m vision vew veo m 142 CellDEK User Manual LG670 e AX145 e tc w 6 e 700
27. samsuna 5 samsuna samsuna samsuna samsuna somasi 5 samsuna seram 5 samsuna 5 samsuna 5 i samsuna 5 samsuna serm 5 samsuna es samsuna seem eos samsuna serm 5 ios samsuna 5 eor samsuna 3 samsuna samsuna Hoo samsuna m samsuna 5 samsuna samo 3 samsuna samsuna samo 5 ms samsuna sons 5 Hos samsuna 5 CellDEK User Manual ee ee 190 10 100 ep 02 02 02 Ce lt m m m m m m m lo o o o o o 210 o
28. Figure 60a If yes the user is instructed to restart the handset and it before the unlock code screen appears 80 CellDEK User Manual CAPTURING DATA Connecting a handset locked Sony Ericsson Instructions 1 Disconnect phone from Cell 2 Power phone off 3 Power phone back on 4 Quickly reconnect phone to before the Phone lock code screen appear After the phone hat booted up the enter Phone lock screen will appear Once hat click OK to continue Figure 60b Tap OK to unlock the handset NOTE Depending on the code that has been set CellDEK may take some time to unlock the handset Below is a guide as to how long unlocking may take To attempt to unlock All 4 digit codes up to 4 mins All 5 digit codes up to 40 mins All 6 digit codes up to 7 hours All 7 digit codes up to 3 days All 8 digit codes up to 30 days The Activity log shows the progress of the unlocking process Thursday Apri 18 2008 14 54 15 connect to phone to phone og pin we 4 Gg pins AXemping 0 unlock phone usang pin wt 5 das Trying dafauk prs to uc phone uses wih digi dafauk pest to phone usaq pin with 7 agits Trying prs uoc phone pen with dg Gafaut pes
29. NO cO cO CO CO 4 06 02 lt 4 ec 05 or 07 or 07 x 10 0 10 o o o o ul 06 02 lt an 10 723 samsuna 11 02 lt ul 08 ma samsuna samsuna samsuna samsuna ct 08 ep 10 22 07 0 0 100 o o o o SAMSUNG SGH T539 SAMSUNG SGH T609 08 e Kie Xe Ke Ke xke 02 lt 07 P samsuna sortes m samsuna 8 samsuna scuro 8 P P P i 3 ct 08 02 lt an 07 pr 08 SAMSUNG SGH T739 SAMSUNG SGH T749 ct 08 ec 10 0 0 o o o 0 SAMSUNG SGH T809 SAMSUNG SGH T819 SAMSUNG SGH T919 1 2 ul 06 02 lt ct 08 ul 09 m
30. Setting Up CellDEK Battery Status CAPTURING DATA Before CellDEK is powered up for the very first time it needs to have the battery charged Attach the AC cable into the AC socket and connect the other end to an AC wall outlet Make sure that the CellDEK case is closed Allow CellDEK to charge for 24 hours prior to use The CellDEK main application screen displays the battery life of the unit When the battery has depleted to around 596 CellDEK will alert the user to carry out a recharge When the battery level drops below this state CellDEK will shut down and will not restart correctly until the unit is charged Figure 3 below shows that the CellDEK battery is about 60 charged Cell Technical Support Line 818 700 8488 CellDEK User Manual Figure 3 Battery Recharge State Charging CellDEK Z CellDEK may be charged with the included AC power supply The power supply can be plugged into 110 or 230 VAC power Normal charge time 8 Hours A full charge will give 3 hours of usage NOTE The CellDEK lid should always remain closed when the unit is charging or not in use Powering Up CellDEK CellDEK is designed to boot quickly and with minimal fuss The procedure is as follows 1 The power switch only moves vertically and is located next to this symbol CAPTURING DATA Figure 4 Power symbol 2 Slide the switch in an upwards direction and let it go C
31. ares 54 NETWORK ISOLATION NIC CARDS AND SIM CARD ID CLONING 55 SIMECARD ID CLONING enda Ea Quo abe Le 56 EXTRACTION WITHOUT SIM CARD 62 CAPTURING NOKIA HANDSETS u Suk u Nee NER a SY 63 NORIA A 42 C ABER TINSTAELA 63 iod Wu pri cn 63 Nokia SQ u 64 67 CASE 67 CUTIE IN ODES E c TE 68 DATA ENTRACTION 69 SEARCHING TOR DRIVER 69 STANDARD DATA EXTRACTION aeiia 69 PRIOR ass 69 EXTENDED DATA EXTRACTION 70 SUPPORT FOR INON LATIN LANGUAGES Sad 72 Special Note for Motorola and Sony
32. on your Phone Pod touch compotue or Apple TV To get started installing Tunes cick 05 21 gt Figure 86b 9 The next screen may or may not appear If it does tap accept the terms then NEXT License Agrerment Peace ios cene bul ENGLISH APPLE INC SOFTWARE LICENSE AGREEMENT FOR ITUNES PLEASE READ THIS SOFTWARE LICENSE AGREEMENT LICENSE CAREFULLY BEFORE USING THE APPLE SOFTWARE BY USING THE APPLE SOFTWARE YOU ARE AGREEING TO BE POUND THE TERMS OF THIS LICENSE YOU DO NOT AGREE TO THE TERMS OF THIS LICENSE DO NOT USE THE SOFTWARE W YOU COT js pet comet the baras the terrm in the horse agreement t we J o Figure 86c 10 On the next screen uncheck all three of the options then tap INSTALL 115 OTHER FEATURES 11 Inst Options Select loker where iTunes wd be and choose nd options add Tunes shortcut to desktop Une Tunas as the def mlt For files update iTunes and other Apple software Def aut Tunes language Engish Untied States Destination Folde am Tunes Figure 86d On the next screen it will mention that AutoRun is turned off Tap NO You do not want iTunes to turn AutoRun on iTunes AutoRun is turned
33. Figure 77c CellDEK Report Builder continued Select I Agree to accept the license agreement and tap Next W Cell TK Report Pease ka Hes ene aes Pese pou he bale ees 7 Agee they Devine drk Cerca VOPR AGRETNEWNT FOR FORENSIC SCENCE SERVICE LTD PRODUCTS OTCE PLEASE 1 Y REFORE BISTALL MM THE FT WATE PRODUCT trare t Sonore Prwdut wel ore novas POREUSC SCRE SERVICE LTD ord he Fed Leer 0 the lation installing Goventeading of ative wine uni hes compages uw which chides Sofware M the associated medi printed materi and online OR w Di Agee ema ax Figure 77d CellDEK Report Builder continued 101 ANALYZING CAPTURED DATA Printing Reports When the installation is complete tap Close to close the installer CellDFK Report Builder har Those to Worden LI Lo check arp ks the Fierce Gom Figure 77e CeIIDEK Report Builder continued CellDEK is able to use Windows compatible USB printer to generate hardcopies of reports print images and other ta
34. NOKIA 6210 won wo a 395 NOKIA 6234 396 6260 397 sos 5267 399 6270 409 6280 4o 6282 102 103 6290 6300 405 NOKIA 6301 6310 _ _ e S _ _ 1 CellDEK User Manual B 50 6 Q 2 e Kle Ke kde K IPERERERERRERRER C phi ER e ke ke Ke Ke Ke kie 554 53 x 53 x 53 GSM GSM GS re E es sa S o S o o o o o 9 MD 0 lt 02 lt CDM GS GS CO 0 o o o 0 02 lt 7 P adi S608 Je 2 7 12 12 12 2 12 12 12 12 Oct 07 jos Jan 07 Oct 07 Oct 06 Dec 05 ul 07 Jul 09 Oct 07 ec 05 ul 07 pr 06 ct 06 ul 07 an 07 1 08 08 ul 06 pr 06 ul 07 ul 07 0 ul 07 an 09 Apr 06 407
35. lt i P 02 lt O ie P lt O i P 02 lt e 2 0 1D 0 ID ID o o o o o o o o 0 0 0 0 02 02 02 02 02 02 02 WM 02 02 02 02 02 WM 02 ep 02 02 4 4 8 N 8 8 18 06 ct 09 ec 05 ct 08 an 09 or 09 an 09 10 05 05 ct 06 an 09 ec 05 an 07 an 08 ul 07 ul 07 ec 05 06 06 ul 08 ul 08 ec 05 ec 05 an 08 ul 06 ul 07 an 08 an 09 SUPPORTED HANDSETS Mim __ osm 2 vecos 9 2 GSM 18 Jan 09 uy __ fal osm TES pe HH 144444443 P1i P800 P900i P990i 5302 5312 55001 57001 5710 1230 1290 1300 1310 1610 630 1650 168 zi zi zi zi zi zi zi zi zi zi zi zi zi zi zi zi gt gt Plz Alz Siz Liz al gt Gl Sl Sl gt gt 9 gt
36. Activate device s Bluetooth visibility and click Discover devices to begin Remove device Figure 42 Discover Device List Screen Once the target device has Bluetooth enabled tap the Discover Devices button A Bluetooth Activity screen will appear as CellDEK searches for Bluetooth devices After 20 30 seconds CellDEK will display a list of found devices Select the name of the target device and tap the Select button NOTE the target device does not appear the list tap the Discover Devices button again It may take more than one attempt to access the device Once connected the Target device will prompt the user to allow connection When requested enter the 4 digit code as 1234 on the target device Once the pairing process is complete data extraction will commence automatically NOTE The target device screen must be monitored during this stage of the process 52 CAPTURING DATA Some target devices require confirmation at various stages to continue extracting After data extraction a reminder will appear for the user to remove the CellDEK from the Device s Bluetooth History list Custom Extraction Pressing the Custom Extraction instead of the Run Extraction button allows the user to decide what data is downloaded from a handset This is handy when the user only needs the call log from a handset for example Custom Extraction Extract Contacts
37. m Figure 90 Drive Selection Screen Once a drive is selected CellDEK will continue with the extraction process as normal CellDEK will store the extraction files in the following directory TDRIVE CellDEK Datafiles CellDEK is capable of detecting encrypted thumb drive software which it will execute allowing you to enter the encryption password Once the password is entered correctly the drive will appear in the list above To view previous extractions which were stored directly on a USB thumb drive enable Capture to external storage in Extraction Settings and then select View previous extractions You will be asked to choose where the extraction files are stored which drive they are on Once you have done this CellDEK will list the previous extractions stored on the thumb drive for you to choose from Information Button Tapping this button will bring up a screen that shows Logicube Technical Support contact information CellDEK User Manual 124 OTHER FEATURES Monier 1071521951 ge Software Release 125 r Lyell Lo Angeles Corpa ete edquarter 1973 Piste Chats worth Insert Custom CA 91231 Logo Here ias 494 2822 wende U 1 19101 700 3404 U 5 1836 702 2496 Figure 91 Information Screen It also allows the user to insert his or her company logo into the printed reports 1 Onthe user s PC rena
38. Ke ke Ce lt 22 0 C1 SUPPORTED HANDSETS 646 SAMSUNG SGH D980 samsuna somers samsuna scuemo es samsuna 8 eso samsuna es samsuna somesas 5 i samsuna 8 samsuna esa samsuna scuexo 8 ess samsuna ese samsuna someso 8 esz samsuna 8 ess samsuna esa samsuna sonses eo samsuna 5 e samsuna soneris samsuna somero es samsuna somero 8 samsuna 8 ees samsuna somero 8 ee samsuna ez samsuna samsuna sorses samsuna 8 samsuna 8 samsuna sorses erz samsuna songo samsuna 8 eza samsuna 8 SAMSUNG vs samsuna son reso 02 lt Apr 09 exe x WM lt 4 pr 06 O ie 3 08 02 lt N pr 07 ct 06 ct 06 ec 05 0 O 0 o o 0 07 02 lt 2 N or 07 ec 05 22 22 0 4 ul 07 or 06
39. oo Figure 841 of Files Complete CellDEK User Manual 112 OTHER FEATURES Tap Finish to complete the process Upgrade Software As new cell phones PDA s and other devices are developed the application software will need to be updated from time to time 1 Insert the USB storage device into the USB port of CellDEK 2 From the Main Application Screen tap the Upgrade Software button 3 software update files will automatically download from the USB storage device and install themselves on CellDEK 4 Once the new software is loaded shut down CellDEK and restart it again Errors During Software Update The CellDEK will display a warning if the software update process has failed The most common problem is incorrectly mapped drive letters This problem can be fixed by remapping the drive letters 1 Tap the System Setup button and then tap the Advanced button 2 When prompted enter 99999 for the PIN number 3 he Advanced Settings Window appears Use the Keyboard button to manually enter drive letters or tap the Map Drives button to have CellDEK map them automatically Advanced Settings A Comet tor fam port t bed port USB Thumb ive USS Media drive 1 t USB Media drive 2 USB Media drive 3 USB Media drive 4 Figure 85 Advanced Settings CellDEK User Manual 113 OTHER FEATURES CellDEK
40. 10 O 0 0 0 O 0 00 o 0 o o o W 0 2 190 0 0 0 10 ep 02 02 02 02 02 lt Jul 07 Jul 08 Jul 08 Jan 09 ul 08 ct 07 09 09 08 ul 08 0 09 09 0 an 07 an 09 0 ul 07 ct 08 an 09 0 ul 09 an 09 08 08 Cc ul 08 an 10 ct 08 an 09 ct 08 08 SUPPORTED HANDSETS 707 SAMSUNG SGH P207 samsuna sompso m samsuna seus 8 samsuna 9 samsuna senes samsuna 8 ma samsuna someras ma samsuna senem samsuna sompeso 8 me samsuna samsuna 8 sawsune samsuna sensi 8 m samsuna S samsuna 72 724 725 726 GSM 13 Oct 06 WM lt 2 or 06 G 02 P 2 or 07 02 lt 4 05 05 08 05 0 100 0 o o 0 ul 06 02 lt 3 ct 06 G ie 3 ep lt
41. OPERATIVE PROVISIONS 1 1 1 DEFINITIONS AND INTERPRETATION In this Agreement including the Schedule hereto the following words shall have the following meanings Agreement means this agreement including its Schedule Business Day means any day other than Saturdays Sundays or public holidays in England Commencement Date means the date of the Contract Contract means the contract between the Parties for the purchase of the Goods in which the Software is embedded Customer means a third party who 15 licensed by the Licensor to use the Software when it is installed into the Goods End User License means the paper license provided with the CellDEK device for software within the embedded PC Executable Code means the fully compiled version of a software programme that can be executed by a computer and used by a Customer without further compilation Force Majeure means the following a Acts of God b outbreak of hostilities riot civil disturbance acts of terrorism act of any government or authority including refusal revocation of any licence or consent d fire explosion flood fog or bad weather e power failure failure of telecommunication lines failure or breakdown of plant machinery or vehicles f default of suppliers or sub contractors CellDEK User Manual 184 1 2 ub 0 Sor TWARE LICENSE 9 t
42. r AW Once the correct target device has been chosen the next screen will show the different connection options that are available The three different methods of connection are Cable Infrared or Bluetooth The Connectivity Option screen also shows the type of data that can be extracted from the target device This information is shown as a series of icons that are listed at the end of this chapter Any data types that cannot be extracted have a red X through the icon The Connectivity option Screen will also alert the user if the target device supports memory cards NOTE The Connectivity Option screen will show items that can be downloaded from the SIM card if the chosen handset is a GSM phone Handset support C gt G gt EFFE eo gt Sen card support i Supports SIMicss extractions Bluetooth Supports removable memory Key 2 port on off cards back IR pot D on off CellDEK User Manual Run Extraction Custom Extraction Figure 36 Connectivity Option Screen Helper Icons The Connectivity Option Screen also has three Helper Icons that indicate the location of the handset s On Off switch Cable Port and IR Port if available 48 CellDEK User Manual Cable Connection 1 Figure 37 Data Cable Connected to Device CAPTURING DATA Select Cable fro
43. so 521 NOKIA NOKIA N95 8GB CellDEK User Manual gjo rle gjo ajo mo mo xo mo m alo ss 3 lt gt ofeefee safe E S B S G S 8 6 G16 G G sele elo efo ofeefee Seele 523 mH N97 mini 6350 NOKIA X2 01 ORANGE SPV C500 S H ORANGE SPV C550 Pg E ORANGE SPV C600 5 525 NOKIA 526 NOKIA 527 NOKIA 528 s Iv _ pam mes PAM meos PAM nez _ PAM treo Pro _panrech peo 19 L ss SAGEM my401C SAGEM my401V e e a 546 SAGEM my401X 5 47 SAGEM my4110 SAGEM my411Cv Es 549 SAGEM my411X 550 SAGEM my501C 5 s51 SAGEM 511 e 552 SAGEM my600v 553 SAGEM my700X CellDEK User Manual 155
44. CellDEK User Manual set Q gt lt PA P P gt lt P P P P ezjezjezjemjemjemememezlem en p ppp pppnonpnpnsgpryp SUPPORTED HANDSETS o 5 O Ce ep 02 02 02 02 07 GSM 26 Oct 08 6 Sep 10 or 07 6 an 08 an 09 07 6 08 Co lt ul 07 S 26 ul 09 25 5 5 Oct 07 05 06 O 02 02 x O 02 07 25 2 VOP A GSM Oct 07 25 C NOK GSM 2 Apr 08 iP 3 06 WM lt 07 12 ul 07 12 pr 08 ec 05 ec 05 ct 06 0 0 0 0 0 o o 0 0 z ep lt 12 pr 06 SUPPORTED HANDSETS 380 NOKIA 6120 NOKIA 6125 NOKIA 6130 NOKIA ma NOKIA 6136 NOKIA NP NEN 50 Es NOKIA 6170 Z 388 NOKIA 6200 C
45. If you know the manufacturer it is recommended you click back select that manufacturer from the list and choose a similar looking device If you continue CellDEK will perform an extraction on the device using generic commands This feature is designed to enable you to attempt extractions on unvalidated and unrecognised handsets As the phone has not been identified successful data extraction can not be guaranteed Figure 19 Generic Extraction Module NOTE Users should be aware that data extracted with the Generic Extraction Module is NOT CellDEK amp User Manual 29 CAPTURING DATA validated It is recommended that any data extracted using this method is visually verified by the User to ensure that no data is missed or misrepresented Attaching a PDA 1 Begin by tapping the Read New Device button on the Main Application Screen The Device Type Selection screen will appear O52 Device Cell Phone Flash Memory Create NIC Figure 20 Device Type Selection Tap the Cell Phone button The list of handsets and Operating Systems will appear Select the proper Operating System Android Blackberry Palm OS or Windows Mobile Figure 21 Select PDA Type CellDEK User Manual 30 CellDEK User Manual CAPTURING DATA Palm based PDA s are supported by software version 1 9 0 0 and higher with the following caveats Extraction of SMS messages is
46. Navigate to the location where the extracted data files are stored CellDEK amp User Manual 43 CAPTURING DATA 2 resource Embedded Files i Hecent Report Images acuments Size 0 bytes User Fil E Folders Converted Desktop Documents Computer Network File name Flaces Files of type Gps loc mps Figure 33c In the Files of type drop down box select Gps gpx loc mps and then select the GPSData file and tap open Alternatively you can drag the GPSData gpx file into Google Earth The GPS Data Import window appears allowing you to choose what types of data you want to import Google Earth GPS Data Import Import waypoints Tracks Routes Create clickable image track and route points Created icons For tracks and routes show direction Draw lines For tracks and routes Adjust altitudes to ground height Figure 33d To display all GPS fixes along a saved track log make sure you check the Create clickable image for track and route points CellDEK User Manual 44 CAPTURING DATA Google Earth GPS Data Import Import Waypoints Tracks Routes Create clickable image For track and route points Created icons For tracks and routes show direction Draw lines For tracks and routes Adjust altitudes to ground height Figure 33e The data is then displayed on
47. an weso avanteo 5 _ 5 morons _ 5 xe woronoa 8 vororora zw 8 woo _ 5 xe z _ 5 mo morons __ 9 messo S xmo 7 313 NDRIVE 5300 07 10 08 10 ul 08 26 09 c gt CD gt c gt lt c gt lt gt c c O le 10 vormoa S GS 26 2011 2 o S o o o le 6 6 o O 90 195 o 0 S S I lt x 26 2011 er e ke KeK egjez loz e kie Ke Ke Ke erja jor e kie xe x ex Shh 3233523255 lt 09 CellDEK User Manual 314 8081 1600 2100 2285 7 lam 32 NOKIA NOKIA 3 NOKIA CellDEK amp User Manual
48. e The next digits represent the mobile station identification number Normally there will be 10 digits but would be fewer in the case of a 3 digit MNC or if national regulations indicate that the total length of the IMSI should be less than 15 digits NIC SIM ID Card ICCID and IMSI values can be checked by performing a SIM Card Extraction of NIC 1 From the NIC Operation screen tap Manually enter NIC data 2 Use the virtual keyboard or an attached USB keyboard and enter the ICCID and IMSI values When finished tap OK CellDEK amp User Manual 59 CAPTURING DATA CellDEK User Manual Manually enter NIC data in order to preserve all handset data the and IMS values must both match the values of the last inserted in target handset 9000000000000000000 Valid Length Enter 000000000000000 length Tick for usm GSM only 3 Place the NIC SIM ID Card into the adapter and insert the adapter into the reader Tap OK Put NIC card into adapter and insert into reader Then click OK 4 CellIDEK will now create the NIC SIM ID Card When this process finishes the screen below will appear Tap OK Successfully created NIC This NIC has been designed for network isolation purposes only It is not an exact copy of the original SIM and only stores a subset of SIM data 5 will prompt whether a phone is compatible with Network
49. file acquisition generates SIMDAT Ej create Network isolation Card after SIM extracbon 2 apture to external storage local storage ALL Androtd device must be rooted If the device is not rooted only the following file locations will be extracted sdcard 74 CAPTURING DATA If the device is rooted and the checkbox for Extract ALL Android files is not checked only the following file locations will be extracted sdcard data data data misc Android files of Interest The Android extraction can extract system files Some of these files may contain useful information These files are described below data data com google android location files cache wifi Contains cached WIFI details data data com android providers userdictionary databases user_dict db Containing cached user entered text data data com google android gm databases gmail db data data com google android gm databases mailstore db Contains Google email account and mailstore databases data data com google android talk shared_prefs BuddyList xml Contains Google Talk contact details data data com android providers calendar databases calendar db Contains Google calendar details data data com yahoo mobile client android mail databases mail db Contains Yahoo email details NOTE Device must be rooted to acquire some of these files Data Capture from Apple iPhone Support for MMS was
50. h6320 h5325 h6340 h6365 h6500 SUPPORTED HANDSETS HP iPAQ HP iPAQ HP iPAQ HP iPAQ HP iPAQ HP iPAQ HP iPAQ HP iPAQ HP iPAQ HP iPAQ HP iPAQ HP iPAQ HP iPAQ HP iPAQ HP iPAQ HP iPAQ HP iPAQ HP iPAQ CellDEK User Manual P610 P700 700 1470 1500 V900 X500 X500 X600 X610 X650 X800 NEON A308 10 110 410 420 600 710 718 720 61087 550 100 hx2795 1 4 700 1 4 705 hx4710 K3 Obsidian rw6815 rw6818 rw6828 rx1700 rx1950 rx1955 rx3100 rx3110 rx3115 rx3400 rx3415 rx3417 3700 HP iPAQ HP iPAQ HP iPAQ HP iPAQ HP iPAQ HP iPAQ HP iPAQ HP iPAQ HP iPAQ HP iPAQ HP iPAQ HP iPAQ HP iPAQ HP iPAQ HP iPAQ HP iPAQ HP iPAQ HP iPAQ HP iPAQ HP iPAQ HP iPAQ HP iPAQ HP iPAQ HP iPAQ HTC HTC HTC HTC HTC HTC HTC HTC HTC HTC HTC HTC HTC HTC HTC HTC HTC HTC 114 214 500 510 512 610c 614 614 9120 Glisten h1900 h1910 h1915 h1920 h1930 h1935 h1937 h1940 h1945 h2200 h2210 h2215 h3630 h3670 Himalaya Hurricane Imagio Inspire 4G Libra Love Magician MAX 4G Monet MTeoR Nike Oxygen Ozone P3350 P3400 P3600 P4000 P4350 HP iPAQ HP iPAQ HP iPAQ HP iPAQ HP iPAQ HP iPAQ HP iPAQ HP iPAQ HP iPAQ HP iPAQ HP iPAQ HP iPAQ HP iPAQ HP iPAQ HP iPAQ HP iPAQ HP iPAQ HP iPAQ HP iPAQ HP iPAQ HP iPAQ HP iPAQ HP iPAQ HP iPAQ HTC
51. txt The text of the message Any supported media types i e jpg can be viewed in CellDEK just like their extended data counterparts Refer to the Viewing Extended Data section on the next page Email Messages CellDEK is also able to capture Email messages from most Windows Mobile devices These are handled the same way as MMS messages Xm com 11322 3540 03 2001 Suber CEDER Emad Atte 4 Copied Embedded Test Anko 1 ame Pile Hash 7ed25798a2De1 de e 7415122453933 Tet Viteo tma 170102 Embedded Fies EMAIL Valeo 1 094 File Hash N ee 160 243526 ide 61 121 Embedded Filed EMAIL l TestUserFie woc tet File Hash lacdedfhed 5 Sac 5943 33 Tet mage aps Copied Cell DE Emtedded Fies EMAIL Test Image 1 pg dd anf File Hash CT eccos4670c0739133c20c 50 Camera Make Camera Model Dase Tens 20261032 114246 Wrth x Height 2048 x 1536 Figure 65 Captured Email Messages 91 ANALYZING CAPTURED DATA Viewing Extended Data d F 4 M lt Standard Audio Video Other Data User Files Downloaded Number of entries 6 SEL Meee pete Created 09 32 01 05 Jan 2009 Copied to User Filesv 1 05 09 0932 109 P
52. 2 mv OUS 06 02 GS 02 lt Y Y 6 6 12 6 12 GSM 5 GS 26 Q Q S o o o o 0 e 2 0 10 02 02 02 02 lt lt o o o n n n a fojo fo WM lt lt gt Jan 07 C Apr 07 07 ct 09 ct 09 ct 09 an 10 an 10 an 08 09 08 08 07 ct 08 an 10 ct 09 ec 05 ct 09 ct 09 09 06 463 NOKIA 6030b otro Navigator He sme 8 wo ee S noka semecemc noka noka 5 an wo em 8 ems ems ems 5 noa wa 7 3 noka sosie 8 Le s noka noka 3 noa S Les noka emocese 5 Lus noka 5 noka sos noka 100 supernova 5 zm 8 NOKIA 73
53. 6360 5 8 5 wo so _ 5 417 NOKIA 6800 a a a 7110 NOKIA 7500 NOKIA 7510 2a 2a e E E E E E E E E Ej ptejte fft ef CellDEK User Manual 151 e sele ele els e 9 6 B S G S 9 8 9 6 selee leelo ofe efe ele els c eGo selesele els olo e legle gorjo sje e me nle meme jor SUPPORTED HANDSETS CDMA 149 0 10 o o o o o i 3 02 lt jo fo fo m fo fe fo fe fe fe fe fe fo fe fo fe fo fe fo fe fp fo Oy be Te Pe oe IDM 0 0 JO 02 02 02 02 WM 02 1111111111 GS 0 0 0 o 0 o o o o CoD lt GS GS GS GS 25 C D NOK 7 6 2 2 O 2 2
54. Android OS versions 1 6 2 3 are supported Gives access to the whole file system After rooting data data and data misc folders of Android device internal memory are available for analysis Without root permissions these folders are inaccessible 10096 successful rooting is not guaranteed 73 CAPTURING DATA CellDEK User Manual Ad hoc rooting will provide the following features Allows user to access the whole device file system Deleted data in database tables deleted contacts messages etc Pre installed and custom applications with user data Yahoo Mail and Google Mail application data Google Maps Google Talk and Google Calendar application data Dropbox application data Ad hoc device rooting is not required for the data extraction of Call Logs Phonebook and Messages When performing an Android extraction CellDEK will ask if you want to temporarily the Android device If successful the device will remain rooted until turned off In the Extraction Settings there is a new option called Extract ALL Android Files device must be rooted When checked and the Android device is rooted ALL file locations will be extracted Please note this may take a long time to complete the extraction Extraction Settings Files p Automatically extract ALL files Skip messages during extraction Extraction may cause Unread status to be changed Do extended
55. Extract Call Registers Extract Messages Extract Organisers Extract Files Figure 43 Custom Extraction Screen Tap the radio buttons to download or skip different data types Press OK when finished Any data not read will appear in the capture report as User chose not to extract pe NOTE Extract Files refers to all image movie sound and other files found in the Extended Data portion of a capture SIM Cards and Flash Memory Card Connection CellDEK amp User Manual SIM Cards and Flash Memory Cards require no special Connection procedures Once the card is connected data will begin to extract as outlined in Chapter 3 Capturing Data 53 APTURING DATA 10012 Main Connectivity Icons The Connectivity Option Screen uses distinct icons to show what data can be pulled from supported phones with different connection options ICON DESCRIPTION ICON DESCRIPTION Sent SMS Message Saved SMS Message Calendar Entries B i Image Files OQ Video Files NOTE Presence of this symbol next to the icon denotes that the data is extracted with relevant timestamps Multimedia Message SMS messages that can include attachments Other Files Table 1 Connectivity Icon Table Other connectivity Icons The Connectivity Option Screen also tells whether a handset supports extraction through a NIC card or if the handset can be accessed without its SIM card CellDEK User Manual 54
56. HARDWARE LICENSE US Government Use Use duplication or disclosure of the Fujitsu Software by U S Government is subject to the Restricted Rights as the term is defined in te Department of Defense Supplement of the Federal Acquisition Regulations DFARS in paragraph 252 227 7 013 c 1 ii if to the DOD or if the Fujitsu Software is supplied to any unit or agency of the U S Government other than DOD the Government s rights in Fujitsu Software shall be as defined in subparagraphs 1 or c 2 of FAR 52 227 19 Commercial Computer software Restricted Rights or FAR 52 227 14 Rights in General Data Alternative as applicable Contractor Fujitsu Computer Systems Corporation 1250 East Arques Avenue Sunnyvale California Consent to Use of Date You agree that Fujitsu and its affiliates may collect and use technical information gathered in any manner as part of the product support services provided to you if any related to the software provided by Fujitsu Fujitsu may use this information solely to improve our products or to provide customized services or technologies to you Fujitsu may disclose this information to others but not in a form that personally identifies you except to our agents to support this agreement Internet Based Services Components The software provided by Fujitsu contains components that enable and facilitate the use of certain Internet based services You acknowledg
57. Standby Mode Shutdown System Figure 97 Shutdown Screen Additionally closing the lid of CellDEK while it is powered will send the embedded PC into Standby Mode When the lid is opened again the embedded PC will come back up out of standby mode NOTE Once the lid is closed DO NOT re open the lid until CellDEK emits USB tones Otherwise CellDEK will hang If this happens shut down the unit and wait 30 60 seconds before powering it back up 130 6 Glossary and Troubleshooting Guide Supported Manufacturers CellDEK is able to directly support many different wireless devices Many of these major brands are supported now or will be in the near future Nokia Motorola Sony Ericsson Samsung Siemens Audiovox Kyocera Palm LG Sanyo Blackberry Windows Apple iPhone HP iPAQ Satellite Navigation Device TomTom Satellite Navigation Devices Garmin Satellite Navigation Devices Glossary SIM Subscriber Identity Module Essentially a small computer on a card that sits within the mobile phone and controls various functions of call making It also has enough memory to hold information such as ADN and SMS ADN Abbreviated Dialing Numbers more commonly known as the phonebook or contacts SMS Short Message Service SMS is a form of textual conversation permitted by a network carrier The service allows a user to send and receive textual messages dire
58. refers to any of several protocols used in so called second generation 2G and third generation wireless communications As the term implies CDMA form of multiplexing which allows numerous signals to occupy a single transmission channel optimizing the use of available bandwidth The technology is used in ultra high frequency UHF cellular telephone systems in the 800 MHz and 1 9 GHz bands TDMA Time Division Multiple Access is a technology used in digital cellular telephone communication that divides each cellular channel into three time slots in order to increase the amount of data that can be carried Cluster The smallest block of memory in a drive that can be written to individually by the file system Allocation table Table that keeps track of the contents of each cluster on the drive The allocation table is used to combine clusters in the correct order to construct the files in the file system CellDEK User Manual 132 GLOSSARY TROUBLESHOOTING GUIDE Allocated space Any cluster that is being used to store a file and has a written entry in the allocation table Unallocated Space Any clusters that have an empty entry in the allocation table i e are not assigned to any file and are marked as being available for over writing by the file system Extant File A files that is still active in the file system and has appropriate entries in the allocation table to be reconstructed Contiguous
59. 0 08 or 08 ec 05 ec 05 pr 06 ay 11 an 10 pr 06 pr 08 ul 06 ct 09 an 08 ul 08 ec 05 ul 07 pr 06 ul 07 ec 05 05 ul 07 SUPPORTED HANDSETS s le fe e fl fe le fff le fef le f le fe fe f ee ef f e e efe fE woronoa 8 woronoa 8 woronoa 8 2z ws 8 8 m worooa _ 5 5 esu 2 aros esu 24 pecos 24 apros a esu 2 pecos esu 24 pecos 2 24 apros 4 BS BIS mo morons vw _ 5 im woo _ 5 me MOTOROLA vaso Barrage morons vw 8 worono vso 8 ims woronoa 8 z worono 8 wornoa 8 e woronoa veo 9 ime _ 5 o 8 woronoa wso _ 5 ay 11 QM I0 0 ep lt 08 lt gt an 10 02 lt 24 ul 08 WM P NO 4 05 lt gt 11 08 09 08 10 11
60. Call Logs w timestamp Location History Waypoints pws Dd 610 GARMIN 250W IPAQ HP 314 NAVIGON 7210 7 NAVMAN 550 3D NAVMAN S703D NDRIVE 5300 20 720 Tomom ow a TOMTOM _ ak _ GPS Device Expected Support Destinations Location History 2 cms _ sau B Incoming SMS 9 2 Outgoing SMS PPP PP P PPP p Home _ ee The following GPS Devices have not been verified CellDEK however their appearance or technology indicates that data extraction will be possible is recommended that all data is treated as a minimum extraction as there may be additional data sets available that require further examination CellDEK amp User Manual 179 SUPPORTED HANDSETS Data can be extracted from these handsets normal by selecting either Mas
61. The latest release of iTunes at the time of this writing is version 10 0 x Further changes have been made by Apple in this version which affects the CellDEK apple device connection When extracting an iPhone on a CellDEK or CellDEK TEK running version 1 16 or below in conjunction with iTunes 9 1 1 the error message couldn t find backup files will be displayed shortly after connection Future releases from Apple Every effort has been made to ensure that the CellDEK software is compatible with the latest iPhone version although it may be necessary to install future updates of the iTunes software on CellDEK to enable the support of any future iPhone OS releases If the user feels it absolutely necessary to install the latest version of iTunes on CellDEK and problems are encountered with the CellDEK functionality the software should be uninstalled and the supported version can be reinstalled IMPORTANT NOTE When uninstalling iTunes the Apple Mobile Device Support driver must also be uninstalled separately Apple iPhone Pop Up Window When attaching an iPhone to the CellDEK an Apple iPhone pop up window may appear The pop up window asks you to select the program to launch for 118 OTHER FEATURES this action Follow the steps below to remove this window permanently Apple iPhone Camera connected Select the program to launch for this action Microsoft Scanner and Camera Wizard Download pictures from a
62. User Manual NOTE Drive letters should only be altered if CellDEK fails to update or backup operations cannot be performed Contact Logicube Technical Support if assistance is required with this process iTunes Information and Updates Your CellDEK came shipped with the supported version of iTunes for the version of CellDEK software loaded Do not install versions of iTunes that are not supported by the CellDEK software release The CellDEK software release notes will mention which version of iTunes must be installed if a newer version is required If it is necessary to update iTunes follow these instructions IMPORTANT NOTES Before proceeding with updating iTunes please make sure that the AC adapter is connected to the CellDEK Please follow the directions below completely In order for CellDEK to work properly with iTunes there are screens during the installation that require certain options set differently from the default options 1 Download the supported release of iTunes this may not be the current release from Apple If a new version of iTunes is required the supported version of iTunes will be mentioned in the software release notes 2 Rename the file to Update exe and copy the files to a USB thumb drive The files must be in a folder called CellDEK Update case sensitive without the quotes on the root of the USB thumb drive 3 From the CellDEK Main Application Screen tap the Upgrade Sof
63. VERIFIED CELLDEK SUPPORI 178 ADDITIONAL CABLE SUPPORT FOR PDAS 180 S INDE 182 9 CELEDEK SOFTWARE LICENSE usa 184 CELLDEK SOFTWARE LICENSE nanas 184 CELLDEK SOFTWARE LICENSE 09 192 GNU GENERAL PUBLIC LICENSE E 198 HARDWARE LICENSES Pepe eee eee Pra qe e apres asa dead 204 TECHNICAL SUPPORT INFORMATION 209 CellDEK User Manual VIII ee 1 Introduction to CelIDEK Introduction Congratulations on your purchase of CelIDEK This unit will provide many years of dependable service if used properly It is designed to be utilized by the expert and novice alike CellDEK stands for Cellular Data Extraction Kit It is designed to carry out data extractions from cell phones Satellite Navigation Devices PDA s SIM cards and flash based media Data can be extracted from phones and using three connection methods data cables infrared ports or Bluetooth radio frequency communications The target devices may connect to by one two or all three of these methods CellDEK User Manual 9 INTRO
64. com p 5 pu Pi A Py Fi P ry m F p r P z 2 a Umum 0 o PE Ce lt 10 ul 09 09 09 09 6 10 0 0 0 0 o o o o o 0 09 02 lt 10 ul 09 ul 09 09 09 10 0 0 0 0 10 2 o o o 0 o 09 op lt an 10 10 09 09 09 ul 09 e ID IO 0 JO ep 02 02 02 02 lt lt ID o o o o o o o o 10 o 10 o 09 02 lt O 5 cO cO 6 ct 09 584 SAMSUNG 58300 samsuna eow samsuna sce 3 eo samsuna eo samsuna somus SAMSUNG SGH A687 SAMSUNG SGH A707 efe fe fe e e e e le le te fe fe fe fe e e e EDP EE CellDEK User Manual 157 lenlon eate aap
65. conditions of this Agreement the aggrieved party shall notify the other party The offending party shall thereafter have 30 days to correct the identified deficiency In the event such deficiency is not rectified to the satisfaction of the aggrieved party then the aggrieved party shall be entitled to declare this Agreement null void and of no further force and effect and all CellDEK User Manual 194 ub 0 Sor TARE LICENSE rights hereunder including the License granted hereunder shall be cancelled In the event of the expiration or termination hereof for any reason a You shall continue to observe the limitations and restrictions set forth in Sections 3 b and c 4 5 7 and 11 hereof and b immediately return or destroy the Software and all copies thereof as directed by Licensor or its authorized reseller and if requested by Licensor or its authorized reseller certify in writing as to the destruction or return of the Software and all copies thereof 7 Confidentiality You acknowledge and understand that the Software involves highly confidential and trade secret information that belongs to Licensor Confidential Information The Confidential Information shall be maintained in absolute confidence by You not be used other than for the purposes hereof and not be disclosed by You except as may be permitted under this Agreement to anyone without the prior written permission of Licensor All Confidential Informatio
66. integrity of the free software distribution system which is implemented by public license practices Many people have made generous contributions to the wide range of software distributed through that system in reliance on consistent application of that system it is up to the author donor to decide if he or she is willing to distribute software through any other system and a licensee cannot impose that choice This section is intended to make thoroughly clear what is believed to be a consequence of the rest of this License 8 If the distribution and or use of the Program is restricted in certain countries either by patents or by copyrighted interfaces the original copyright holder who places the Program under this License may add an explicit geographical distribution limitation excluding those countries so that distribution is permitted only in or among countries not thus excluded In such case this License incorporates the limitation as if written in the body of this License 9 The Free Software Foundation may publish revised and or new versions of the General Public License from time to time Such new versions will be similar in spirit to the present version but may differ in detail to address new problems or concerns Each version is given a distinguishing version number If the Program specifies a version number of this License which applies to it and any later version you have the option of following the terms and conditions
67. o sanos gt asm o o o s o ocos a o ocos a o a o es s D gt S 2s cmos 53 2 gt gt e e P e e e e lt P e P gt lt gt lt e 2 e Q e D 2 e e Q D e e e e e e e e e e e D 2 138 T a T a Lond T T a T T T BLACKBERRY 9800 BLACKBERRY 9650 DELL 51 9780 BLACKBERRY me olo wee wxusow m emo Pao mw CellDEK amp User Manual HIC HIC HIC HIC HIC HIC HIC HIC HIC HIC HIC HIC HIC moss o a4 5710 68 5740 70 5743 5 5800 vFAS 5 E se _
68. os een ae 916 ERICSSON W995 Me x 1 917 ERICSSON X1 CellDEK amp User Manual 167 5 ERICSSON W850i efe fe fe e Eeee e Kle Kle Kle Kle Kle c lt i P 02 lt 02 lt ep 02 lt 2 2 2 1D 1D 0 ID ID o o o o o o o o 0 0 0 0 02 02 02 02 02 02 02 WM 02 02 02 02 02 WM 02 ep 02 0 o 0 8 8 8 ul 07 ul 06 ct 09 ct 08 ul 08 ct 09 ct 09 ec 10 ec 05 ct 07 an 09 ul 07 an 08 pr 09 ct 06 ct 08 ec 05 ul 06 ct 06 pr 07 ul 08 pr 06 an 08 an 09 an 09 an 09 ct 09 an 09 S jo 5 5 IS IS gt gt P jo gt F IS 5 Flo jo jo o fe SUPPORTED HANDSETS May 11 26 2 apros asm s a
69. private var mobile Applications com yahoo messenger Documents db Contains a list of Yahoo Instant Messenger files CellDEK User Manual Note The content of these files has not been verified Data Capture from Symbian OS now has the capacity to extract information from mobile handsets that use the Symbian operating system Series 60 Nokia Symbian OS V 8 1 Extracted data includes Contact Details Call Logs SMS messages Calendar Tasks and Files This data capture is possible with the following caveats No SIM data is extracted from Symbian handsets Nicknames are not extracted Cannot extract any SMS messages stored in My Folders directory or other user created folders To extract data it is necessary for CellDEK to write temporary dat files to the target phone These files are removed at the end of capture Capture from Symbian 2 amp 3 Edition OS CellDEK now has the capacity to extract information from mobile handsets that use the Symbian UIQ 2 and 3 Edition OS Extracted data includes Contact Details Messages Calendar Tasks and Files Data capture requires a handset Agent and the use of a CellDEK UIQ memory card This is a specially prepared card by CellDEK to temporarily store and transfer data WARNING Do not create the UIQ memory card from the card used inside the handset Always use a separate blank formatted card that is not write protected Use these memory cards
70. ul 09 an 10 10 ul 09 an 10 ec 05 pr 08 ec 10 an 08 SUPPORTED HANDSETS cD 615 SAMSUNG SGH A717 samsuna samsuna samsuna 8 eo samsuna 5 samsuna somme 5 622 samsuna 8 samsuna 5 samsuna somme 5 ies samsuna sonco e samsuna samsuna 5 samsuna seucxo 5 e2 samsuna co samsuna sono samsuna 5 ea samsuna 8 samsuna samsuna samsuna samsuna 5 eaz samsuna samsuna ea samsuna 5 eo samsuna samsuna samsuna 5 samsuna 5 samsuna samsuna CellDEK amp User Manual GSM 22 Jan 08 M SM 11 08 29 lt ct 08 ul 09 ec 10 E i 08 i ul 09 ec 10
71. 0 0 0 0 0 o 0 o 0 W 0 WM lt O CO CO CO cO ec 05 4 ct 06 O P ec 05 02 lt 05 08 05 06 0 0 100 o o o o ec 05 02 lt 2 erla i 3 22 ct 07 02 lt 22 O 3 ds amp 06 c ul 07 22 an 07 2 08 0 0 o o o 0 9 ct 08 02 lt an 08 an 09 8 02 lt 29 eee for safe slo els ooo safe 9 0 sele eloelo see fo fe lezle gjore Bl e e fle E E Ej f e fe CellDEK User Manual 159 SUPPORTED HANDSETS samsuna SAMSUNG SGH F330 samsuna 5 samsuna scum 5 samsuna
72. 3GS and iPod Touch IMPORTANT NOTE iTunes must be installed on the CellDEK before it can support Apple devices it needs to be installed follow the Enabling Apple Device Support procedure in the Upgrade Software chapter See the Upgrade Software section in Chapter 5 for more information on iPhone and iTunes 1 Begin by tapping the Read New Device button on the Main Application Screen The Device Type Selection screen will appear CellDEK User Manual 46 CellDEK User Manual CAPTURING DATA Select Device SIM Card Create Figure 35 Device Type Selection Tap the Cell Phone button then select Apple from the list of handset manufacturers CellDEK will illuminate the correct data cable with a green light A prompt will appear on the screen asking the user to attach the cable to the Phone Cable Jack NOTE DO NOT attach the Apple device until prompted by CellDEK Remove the cable from the rack and insert it into the Phone Cable Jack The cable s LED will turn red Tap OK on the screen The cable s LED will turn green and a new prompt will appear Attach the target cell phone at this time Tap the OK button once the phone is connected 47 CAPTURING DATA Connection Options 2 5 Fal sc route to D Nigana to B SIM Send loxation 5 Vem i t web en w
73. 5 07 MB NOKIA N95 NO SIM 5 08 8 Wi case Ret NOKIA 6630 BT 11 22 MB NOKIA 6630 NIC 1 21 8 10 NOKIA 6630 NO SIM 11 22 07 sx sx NOKIA 28654 IR 720 KB NOKIA 28654 CABLE 720 NOKIA 6265 IR 733 Jwe NOKIA 62651 CABLE 733 SONYERICSSON W910i BT 855 SONYERICSSON T650 BT 1 63 SONYERICSSON 530 BT 575 KB 5310 RT 577 WR Free Space p cancel Figure 84d Select Files to Burn A dialog then appears allowing you to name the disk then tap next CD Writing Wizard Welcome to the CD Writing A Wizard Tha you wita record z See t a the you 92 ma 4 To nama pe m benz artir gt he CD vd reece es sreacy on the f they howe seve Oose wraad afer Ses neve Deer protien Figure 84e Name the Disk If no disk is inserted in the drive a dialog will appear telling you to insert a disk into the writable CD drive The burn process will then start When the files have been copied the following dialog will appear EJ D Wizard Completing the CD Waiting 4 Wizard w e a e Ses te z ere eee m Aero Ge eoe amp 5 22
74. 844 ERICSSON K530i SONY 845 ERICSSON K550i 856 58 J3 E J F E D E E Lond E e 1 o e D XIe Ke Ke x e Kie Kje Kjel emex a CO o o 11 ERCSSON _ ERICSSON K550im EmCSSON ERICSSON K600i EmCSSON Keos ERICSSON K608i 9 8 9 6 8 0 sale aloe 9 6 e D SONY ERICSSON K630i ERICSSON K660i SONY lt SONY 3 SONY a 3 SONY a 3 SONY a P ew e Kie Kie Kie Me X QD QD B QD QD QD B B B 6 e 85 ERICSSON K850i a 2 8 ERICSSON M600 CellDEK User Manual 165 e Kle Kle Kle Kle Kie LU SUPPORTED HANDSETS
75. Aino SONY 884 ERICSSON SONY 881 ERICSSON U100i Yari 166 CellDEK User Manual pute ERICSSON ely 889 ERICSSON W200i w 890 ERICSSON W300 E EP se Z 891 ERICSSON W302 etn 892 ERICSSON W350 D m etn 893 ERICSSON W380i EP a 894 ERICSSON W395 a 895 ERICSSON W508 ww 2 896 ERICSSON W518A E J F E SUPPORTED HANDSETS etn 897 ERICSSON W550 oe etn 898 ERICSSON W580i al etn 899 ERICSSON W595 sa wa ERICSSON W610i w 901 ERICSSON W660i be epu m E 902 ERICSSON W705 en 903 ERICSSON W710i en w 904 ERICSSON W760 en w 905 ERICSSON W800 M ve 2 ERICSSON W810I Ps I 908 D e D e D LL Xe x e 2 9 8 9 6 8 0 9 6 9 6 6 9 6 6 8 6 e D FEEEEEEEEEE P gt w ERICSSON W880 ERICSSON W890 x en 910 ERICSSON W900 m en 911 ERICSSON W902 ME 912 ERICSSON W910i en w 913 ERICSSON W950 x 914 ERICSSON W960 en 915 ERICSSON W980
76. Button Read New Device 25 30 32 36 38 46 Button Standard Data 94 Button Text Messages 88 Button Video 94 Card Compact Flash CF 14 37 Card Flash Memory 9 11 12 14 36 37 40 53 63 64 66 78 109 Card Memory Stick 14 37 77 78 Card SIM 9 11 12 14 32 33 34 48 53 54 55 56 62 64 72 77 123 131 132 134 Card Smart Disk SD 14 37 78 Card Smart Media SM 14 Card xD 14 Charging Battery 15 Control Panel 33 36 51 102 129 Data Extended 38 53 70 87 89 91 92 95 102 103 122 Data Standard 69 70 88 94 103 Disclaimer Liability Limitation II Emitter Infrared 14 51 129 External Monitor Jack 14 Files Audio 54 70 91 92 94 Files Image 37 38 54 70 71 91 92 127 CellDEK User Manual 182 8 Index Files Other 38 53 54 70 71 92 94 122 Files Video 54 70 91 92 94 Forensic MD5 Logicube 15 Garmin 40 131 Generic Extraction Module 29 Global Positioning System GPS 38 39 40 GNU 242 249 250 252 253 Hardware License 255 59 Hardware Licenses 255 Hash MDS 11 87 126 127 Indicator Light 33 47 49 134 Infrared IR 9 11 14 25 29 31 48 50 51 129 133 136 219 iPhone Apple 75 76 iPhone Apple 42 46 131 iPod Apple 46 iTunes Apple 46 116 JPEG Deleted 38 JPEG Embedded 38 JPEG Extant 38 Kyocera 131 LG 131 Login Operator 16 Metadata 126 127 MMS
77. Clause 10 4 PROPERTY AND CONFIDENTIALITY IN THE LICENSED SOFTWARE MATERIALS 4 1 The Licensed Software Materials contain Confidential Information as defined in Clause 9 1 below of the Licensor and all Intellectual Property Rights in the Licensed Software Materials are the exclusive property of or are licensed to the Licensor 4 2 You shall not 4 2 1 save as provided in Clause 5 below copy the whole or any part of the Licensed Software Materials 4 2 2 save as required to be permitted by law modify merge or combine the whole or any part of the Licensed Software Materials with any other software or documentation 4 2 3 remove or tamper with any proprietary notice contained in the Licensed Software Materials 4 2 4 assign license transfer sell lease rent charge or otherwise deal in or encumber the Licensed Software Materials nor use on behalf of or make available the same to any third party or 4 2 5 save as required to be permitted by law reverse compile the whole or any part of the Licensed Software Materials from object code into source code 4 3 You shall 4 3 1 keep confidential the Licensed Software Materials and limit access to the same to those of its employees agents and sub contractors who either have a need to know or who are engaged in the Use of the ooftware including where appropriate the Software Documentation 4 3 2 reproduce on any copy of the Software or Licensed Software Materials the Licensor s copyright and
78. ERICSSON SONY ERICSSON SONY ERICSSON SONY ERICSSON SONY ERICSSON SONY ERICSSON SONY ERICSSON SONY ERICSSON SONY ERICSSON SONY ERICSSON SONY 759 Exhibit 4 SGH T959 SGH Z600 W ZERO3 62 C6620 L56 S56 S66 5 45 SX45i 5 56 5 66 650 C901 GreenHeart G900 J300a J300c K300a K300c K310a K310c K500c K506c K510a 510 K610im K700c CellDEK User Manual SONY ERICSSON SONY ERICSSON SONY ERICSSON SONY ERICSSON SONY ERICSSON SONY ERICSSON SONY ERICSSON SONY ERICSSON SONY ERICSSON SONY ERICSSON SONY ERICSSON SONY ERICSSON SONY ERICSSON SONY ERICSSON SONY ERICSSON SONY ERICSSON SONY ERICSSON SONY ERICSSON SPRINT SPRINT SPRINT SPRINT SPRINT SPRINT TDS TDS TDS TDS 177 W800c W810c W830 W880c W888c W900c Xperia X10 Xperia X10 mini Xperia X8 Z502a Z520c 2525 2525 Z530c Z550a Z550c 7 10 2712 6600 6601 6700 6800 6600 800 8001 Nomad 800LC Nomad SUPPORTED HANDSETS T MOBILE T MOBILE T MOBILE T MOBILE T MOBILE T MOBILE T MOBILE T MOBILE T MOBILE T MOBILE TOSHIBA TOSHIBA UBIQUIO UBIQUIO VELOCITY MOBILE VELOCITY MOBILE VERIZON WIRELESS VERIZON WIRELESS VERIZON WIRELESS VODAFONE VODAFONE VODAFONE VODAFONE VODAFONE VODAFONE VODAFONE VODAFONE VODAFONE MDA Vario slide myTo
79. File on dence 000002 20 03 2007 05 48 45 Figure 68 Resize Image Screen 93 ANALYZING CAPTURED DATA Videos This button displays all video files that were downloaded during data capture It also displays a list of the video files that were not downloaded Downloaded videos can be viewed by tapping the file name Audio This button displays all audio files that were downloaded during data capture It also displays a list of the audio files that were not downloaded Like video tapping the file name can play audio files 5 Pevca A m lefe Omer Deis Hir bier Pathi Sive 17852 Low wee 29 qp t1 Pret ew Detats Figure 69 Play Video Audio Screen Other This button displays all other files that were downloaded during data capture The files are organized by type i e dat exe txt etc It also displays a list of the other files that were not downloaded Standard Data This button opens the Standard Data View Screen Displaying Previous Extractions CellDEK User Manual Previously extracted data files can be viewed by selecting View Previous Extractions from the main CellDEK window Previous extractions are organized by date Additionally the user can search fora particular extraction by one of these choices e Case Reference Number e Exhibit ID
80. SIM and only stores a subset of SIM data 5 CellDEK will prompt whether a phone is compatible with Network Isolation Cards Selecting No will finish the process and bring the user back to the CellDEK main screen Selecting YES to the screen below will prompt the user to identify the phone to be used with the NIC SIM ID Card After selecting the phone one of the following two screens will appear Tap OK to finish he process go back to the CellDEK main screen This phone has been tested and is supported by the NIC card This phone does NOT support cards Inserting this NIC into target handset may cause data to be lost or changed 58 CAPTURING DATA e Manually enter NIC data CellDEK will create a NIC SIM ID Card by writing valid ICCID and IMSI values entered by the user This method is useful when the original SIM card is not available To find out the correct ICCID or IMSI numbers please contact the handset s network provider Valid ICCID numbers are 19 or 20 digits long and include the following e first 2 digits represent the Major industry identifier 89 for telecommunications e 1 3 digit Country Code e 1 4digit Issuer ID e Variable length individual Account ID Valid IMSI numbers are 15 digits long and include the following e The first 3 digits represent the Mobile Country Code he next2 or 3 digits represent the Mobile Network Code MNC
81. Samsung 117 14 37 30 Samsung 355 Case Ref 14 49 47 Samsung 306 ID ILI m 13 51 28 Samsung 102 KB 13 59 17 5 g 101 KB iccio um 08 35 30 LG 992 15 43 37 5 352 15 44 51 5 352 15 45 38 5 352 15 46 19 GPS 352 t nn GARMIN 117 1 w Free Space cancel Figure 83 Previous Extraction List NOTE The Free Space bar underneath the file list shows the amount of free space available on the USB Flash Drive where the files are to be backed up 14 Whether the user is downloading all files or one at a time CellDEK will ask to move or copy the selected files Please insert USB Mowe or copy files Figure 84 Move or Copy Files CellDEK User Manual 109 15 If Move is pressed every selected file will be moved to the USB storage device The file will then disappear from the list Repeat this step for every file that needs to be copied 16 If the Erase software is loaded on the CellDEK the data will be completely erased from the unit s hard drive as it is moved to the USB device NOTE For more details about Erase please refer to the Security Erase section later in this chapter NOTE Keeping many previous extractions on the CellDEK will cause a delay during the
82. addresses and or coordinates which a user has chosen to store on the device They can contain Home and Work locations 6 Recent Destinations These are a list of previous destinations the owner has selected to navigate to 7 Route Waypoint Data These are a list of addresses and or coordinates which form set locations along a route that the user has created 8 History This is a list of addresses and or coordinates that the owner has previously searched for or viewed This list may also contain Favourite and Route Waypoint Locations This list differs from Recent Destinations in that the owner may not have selected to navigate to the location NOTE The presence of any of the above data ona device does not indicate that the owner has been to that location Only that the owner chose to view and or save that location on the device will also extract Telecommunications data from some Sat Nav GPS Devices The following Telecommunications data can be extracted e Contact information Telephone numbers called via the GPS Device e Telephone numbers of calls received via the GPS Device e SMS sent and received via the GPS device This information is extracted from the data files created by the above software only Mobile communication devices may have a separate store for this information 41 CAPTURING DATA NOTE It is recommended that a separate PDA extraction be performed on all W
83. aspx To check the system for infection Download your chosen malware removal tool onto the root directory of a USB key and select check now The tool will be copied to memory Choose update to upgrade the malware removal tool to the latest version Update Check Now Figure 9 Virus Check Screen CellDEK amp User Manual 20 CAPTURING DATA A suitable free tool produced by Microsoft is listed below This tool checks for specific prevalent malicious software and helps remove any infection found This tool can be downloaded directly from the Microsoft website and is updated with the latest virus definitions on the second Tuesday of each month http www microsoft com security malwareremove default aspx Please note that this tool may not remove all known viruses Other antivirus software may be required to remove specific viruses or malware not covered by this tool Instructions on how to install antivirus programs through the Windows interface within CellDEK can be found in the CellDEK Users Guide Note The Microsoft Windows Malicious Software Removal Tool is a single exe file that is used to locate and remove an infection only It will not install on the CellDEK system and will not actively protect the CellDEK from further infection IMPORTANT Other virus checking tools that have not been tested by the CellDEK team are available Please proceed with caution when using untested software If the syst
84. associated media jprinted materials and online OR electronic documentation Software Product you agree to bound by the terms of this EULA If you do not agree to the terms of this EULA do not install download or otherwise use the Software Product but return the Software Product to 150 long as You shall be in compliance with the terms of the EULA You shall for the Term as defined in Section 8 below have a limited non exclusive and non transferable licence Licence use the Software Product solely for Your internal use and in accordance with such site and or specified user limitations if any as specified in the quote or invoice relating to the Software Product provided by You Your Software Product distributor All rights not expressly granted to You under this EULA are retained FSS 2 Intellectual Property Rights acknowledge that no title or ownership in the Software Product is transferred to ou and that you have no rights in or to the Software Product other than the right to use it in accordance with the terms of EULA Title to any and all applicable intellectual property rights the Software Product shall remain with FSS 3 Licence Restrictions You shall be entitled to make copy of the Software Product for back up and archival purposes View CellDEK License Yes I accept the terms in the license agreement View GNU General Public License CO No I do not accept the terms
85. being loaded The capture session will continue once the drivers are loaded Note Allow sufficient time for the driver to load Standard Data Extraction Abort Capture CellDEK User Manual Once a target device has been identified and connected the CellDEK software will prompt the user to continue Doing so starts the extraction process for standard Standard data includes such information as Contacts Call Logs SMS Text Messages and Organizer data As the data is being extracted CellDEK will show the progress in the Activity Log on the screen Fux Fomai response Opening 212 phone book Seeding RC phane book omahinna Completed succeestulh Wednesday Aon Ta 2006 142124 XN cB ode Opaning prone ool Tosin entries TBE Iz 20 of Z0 POT rey responga rin Dok mau esia a phone book size amp to 1 of 1000 Figure 57 Activity Log The capture process can always be aborted by tapping the Abort button during the capture operation This button is located underneath the Activity Log If the button is pressed a prompt will appear 69 CAPTURING DATA Do you wish to abandon extraction totally or skip the current request Cancel Figure 58 Abort Capture Prompt This prompt will allow the user to skip the current capture operation i e downloadi
86. boot process It is recommended to back up old extractions from time to time Extraction File Backup to CD To be able to backup extracted report files to a writeable CD a writeable CD drive is required Connect the writeable CD drive to the CellDEK through the USB port before selecting the manage files option oelect manage files and choose Backup files then Copy files and One by one To ensure data is not lost during the burning process CellDEK will not allow files to be moved onto a CD drive If move is selected then a message is displayed and the copy option is selected as the default CellDEK amp User Manual 110 OTHER FEATURES _ nea tor ass sa Delete files back All Tiles fachup wt Mes oF m xd Es Figure 84b Move or Copy Files A message box will appear requesting the user to select either burning files to the CD or a removable USB pen drive CellDEK has detected a writer Which media do you want to backup to Burn to CD Copy to flash Figure 84c Burn Files to CD You will then be prompted to select the files to copy The free space indicator will show available disk space Once all required files are selected tap ok the requested files are then queued for writing to the CD CellDEK User Manual 111 OTHER FEATURES Select files to backup 0 Mes selected 07 12 05 NOKIA N95 CABLE 5 07 MB View NOKIA N35 MIC
87. camera or scann Always use this program for this action Fig 86h Apple iPhone pop up window Apple iPhone pop up window removal instructions 1 Reboot the CellDEK and log on to Windows The End User License Agreement EULA should appear Do not click the OK button and do not close the window 2 Double tap the Hide Start Bar icon on the desktop The Windows Start button should appear on the bottom left of the screen the Start button then tap My Computer The My Computer window should appear 4 Attach the iPhone to Cable 31 and attach Cable 31 to CellDEK s Phone Connector socket After a few seconds an icon should appear under Scanners and Cameras Tap the new icon to highlight select it CellDEK amp User Manual 119 OTHER FEATURES Fig 861 Scanners and Cameras 5 With the iPhone highlighted tap File in the menu system then tap Properties Fig 86 Properties menu 6 The Properties window should appear Tap the Events tab Make sure that Select an event is set to Camera connected and the Action is set CellDEK amp User Manual 120 OTHER FEATURES to Take no action Tap OK to close the window and save the changes General Events Calor Management Choose event below then select the action to take when that 5 event occurs Select an evert ei Camera connected O Stan this program Jis Prompt for which program to run Save all pict
88. can be viewed typing 06 on the keypad PIN Personal Identification Number The SIM card has been locked against unauthorized access using the PIN number When PIN security is activated the correct PIN number must be entered in order to use any of the features of the handset make calls access ADN etc The only calls that can be made without a PIN are calls to the emergency services PUK Personnel Unblocking Key If the PIN is unknown the PUK is used to unblock the SIM card and enable a new PIN code to be entered MSISDN Mobile Station ISDN Number This number is the standard international number used to identify a given subscriber However the number stored in the MSISDN location on a SIM Card can be changed without affecting the actual telephone number Therefore the MSISDN number downloaded from the SIM card can only be used as an indicator IMSI International Mobile Subscriber Identity This is a unique number allocated to each mobile phone subscriber stored electronically within the SIM Card It is used by the network to look up the telephone number associated to the SIM Card GSM Global System for Mobile Communications a digital mobile telephone system that is widely used in Europe and other parts of the world GSM uses a variation of time division multiple access and 15 the most widely used of the three digital wireless telephone technologies TDMA GSM and CDMA CDMA Code Division Multiple Access
89. connect Hide Password Figure 39 Hide Password Turned NOTE The password or the PIN of the Blackberry device will need to be entered CellDEK cannot unlock the device without it Infrared IR Connection Cell Phones and PDA s 7 Figure 40 PDA Connected Infrared CellDEK User Manual 50 CellDEK User Manual CAPTURING DATA Many Cell Phones and PDA s have a built in infrared IR port which can be used to transfer data from the target device 1 Select Infrared from the Connectivity Option Screen and tap the Run Extraction button 2 prompt will appear on the screen asking the user to set the target device to infrared If the device is a recognized cell phone CellDEK will display instructions to set it to infrared mode Activate handsets reception and place in the IR well Menu gt Connectivity Tab gt Infrared Port Figure 41 Instructions for Infrared Mode NOTE Most Windows based PDA s are set to IR mode by going to Start Active Sync Tools Infrared IR Connection 3 Once the device is in infrared mode place it next to the Infrared emitter on the control panel Make sure that the 5 IR port is facing the emitter 4 After 5 20 seconds CellDEK will emit a tone to indicate that the IR connection has been made Bluetooth Connection Cell Phones Many Cell Phones have Bluetooth capability which can be
90. contact information and allows direct PIN to PIN emailing and messaging CellDEK extracts each contact PIN number from the phonebook as well as the PIN numbers associated with messages sent from other Blackberry users 82 CellDEK User Manual CAPTURING DATA Time Date Stamps from Motorola Phones Users should note that Motorola timestamps date stamps are not reported due to current limitations in how file modified and file created timestamps are reported in the Motorola OS This will be remedied in a future software update Null Response from Siemens handsets Occasionally Siemens handsets have been known to return a NULL response when asked for data of a particular type i e SMS messages If this happens the following error message will appear under the relevant data type Handset has been known to occasionally return a null response Please refer to handset and retry extraction Users should check the affected field s on the handset and retry the extraction SMS Attached Content SMS Messages can contain extra content other than standard text CellDEK now notifies the user when any extra content appears within an SMS Message NOTE This feature is currently only supported for SMS extracted through handsets supporting AT commands Reporting of attached content functionality is not supported for Blackberry Symbian or WinMobile handsets Notifications appear within the body part of the mes
91. either of that version or of any later version published by the Free Software Foundation If the Program does not specify a version number of this License you may choose any version ever published by the Free Software Foundation 10 If you wish to incorporate parts of the Program into other free programs whose distribution conditions are different write to the author to ask for permission For software which is copyrighted by the Free Software Foundation write to the Free Software Foundation we sometimes make exceptions for this Our decision will be guided by the two goals of preserving the free status of all derivatives of our free software and of promoting the sharing and reuse of software generally NO WARRANTY 11 BECAUSE THE PROGRAM IS LICENSED FREE OF CHARGE THERE IS NO WARRANTY FOR THE PROGRAM TO THE EXTENT PERMITTED BY APPLICABLE LAW EXCEPT WHEN OTHERWISE STATED IN WRITING THE COPYRIGHT HOLDERS AND OR OTHER PARTIES PROVIDE THE PROGRAM AS IS WITHOUT WARRANTY OF ANY KIND EITHER EXPRESSED OR IMPLIED INCLUDING BUT NOT LIMITED TO THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE THE ENTIRE RISK AS TO THE QUALITY AND PERFORMANCE OF THE PROGRAM IS WITH YOU SHOULD THE PROGRAM PROVE DEFECTIVE YOU ASSUME THE COST OF ALL NECESSARY SERVICING REPAIR OR CORRECTION 12 IN NO EVENT UNLESS REQUIRED BY APPLICABLE LAW OR AGREED TO IN WRITING WILL ANY COPYRIGHT HOLDER OR ANY OTHER PARTY WHO MA
92. i 3 09 02 lt ec 05 O Cp 3 6 26 08 ct 08 EPP EP PPP gt 02 lt SUPPORTED HANDSETS T NOKIA 8600 Luna D 8910 _ S lae Em S noka 005022 498 e 499 E61 nokia s so S a 502 NOKIA a lu JP a __ 5 a ms _ 5 e ___ a y wo e ___ 5 a 5 ___ na 5 a 50 h a 511 NOKIA 512 NOKIA a a a a T a a a a a e a 2 ono ecos L esu 12 o o aros esu sano esu 12 07 __ esm 2 07 esu 12 apor 26 osos asm 26 esu 12 esu 2 asm 12 anor B m we 5 ws 5 s NOKIA
93. in the license agreement View GNU Lesser General Public License OK Figure 6 End User License Agreement CellDEK amp User Manual 17 APTURING DATA Wikis 10012 6 CellDEK will boot to the Main Application Menu Logie Cell read new altos device view previous extractions New Features included in CellDEK version 1 20 Support for Android 2 2 Contacts Support for iPhone Skype data Additonal NIC support Create NIC without the original SIM card Improved device selechon menu support increased to 1992 handsets For more information refer to the release notes by clicking in the top night of your screen New Features included in CellDEK version 1 19 Support for iPhones running version 4 0 Latest iTunes install required Figure 7 CellDEK Main Application Screen Virus Protection To enhance the security of the data held on CellDEK it is recommended that the user installs virus protection software on the unit The user may install virus protection of their choice through the Windows interface Installation To gain access to the windows desktop from the main CellDEK application press the following where applicable CellDEK amp User Manual 18 CAPTURING DATA Insert a USB keyboard and press the return key or On older models Open the storage compartment and press the target bull s eye button located in the top left ha
94. in your Fujitsu computer system package Limitation of Liability INNO EVENT WILL FUJITSU OR ITS SUPPLIERS OR LICENSORS BE LIABLE FOR ANY SPECIAL CONSEUENTIAL INCIDENTAL OR INDIRECT DAMAGES INCLUDING WITHOUT LIMITATIONS LOSS OF PROFIT ARISING OUT OF YOUR USE OR INABILITY TO USE THE FUJITSU SOFTWARE OR PRINTED INFORMATION CONTAINED HEREIN WHETHER OR NOT FUJITSU HAS BEEN ADVISED OF THE POSSIBILITY OF SUCH LOSS HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY THIS EXCLUSION INCLUDES ANY LIABILITY THAT MAY ARISE OUT OF THIRD PARTY CLAIMS AGAINST YOU IN NO EVENT WILL THE TOTAL AGGREGATE LIABILITY OF FUJITSU OR ITS SUPPLIERS OR LICENSORS ARISING OUT OF OR RELATED TO THIS LICENSE AGREEMENT EXCEED THE AMOUNT PAID BY YOU FOR THE FUJITSU COMPUTER SYSTEM THESE LIMITATIONS SHALL APPLY NOTWITHSTANDING ANY FAILURE OF ESSENTIAL PURPOSE OF ANY LIMITED REMEDY Export Law Assurances You agree that the Fujitsu Software and other technical information both printed and verbal received from Fujitsu will not be exported outside of the United States except as permitted by the laws and regulations of the United States If you rightfully obtain the Fujitsu ooftware and Fujitsu technical information outside of the United States you agree not to re export the Fujitsu Software and information except as permitted by the laws and regulations of the United States and the jurisdiction in which you obtained the Fujitsu Software CellDEK amp User Manual 207
95. keyboard and it will bring you back to the Mouse Properties window Tap OK to close the Mouse Properties window and close the Control Panel window Tap OK on the End User License Agreement to load the CellDEK software Identifying a Target Device Target devices can be difficult to identify Many show the manufacturer s name or logo but not the model name or number This information is usually displayed behind the battery of the target device To view the label the target device would be powered down and the battery removed On power up a PIN or PUK number may be required to unlock the target device This number can be obtained from the device s network service provider by authorized law enforcement personnel Identification of the target device is required to determine which connection methods are available e g cable infrared or Bluetooth and for data cables the specific cable connector Attaching a Cellular Phone Begin by tapping the Read New Device button on the Main Application Screen The Device Type Selection screen will appear Cell Phone GPS Device Select Device Type SIM Card Create NIC Flash Memory Figure 13 Device Type Selection Tap the Cell Phone button The next screen prompts the user to choose the manufacturer If the manufacturer is unknown the search 15 carried out on all manufacturers For a given manufacturer CellDEK helps to identify the target cellular phone as foll
96. machine readable source code which must be distributed under the terms of Sections 1 and 2 above on a medium customarily used for software interchange or b Accompany it with a written offer valid for at least three years to give any third party for a charge no more than your cost of physically performing source distribution a complete machine readable copy of the corresponding source code to be distributed under the terms of Sections 1 and 2 above on a medium customarily used for software interchange or C Accompany it with the information you received as to the offer to distribute corresponding source code This alternative is allowed only for noncommercial distribution and only if you received the program in object code or executable form with such an offer in accord with Subsection b above The source code for a work means the preferred form of the work for making modifications to it For an executable work complete source code means all the source code for all modules it contains plus any associated interface definition files plus the scripts used to control compilation and installation of the executable However as a special exception the source code distributed need not include anything that is normally distributed in either source or binary form with the major components compiler kernel and so on of the operating system on which the executable runs unless that component itself accompanies the executabl
97. named executable and its action 9 The drives encryption software will then be run and a keyboard will appear automatically for password entry 107 OTHER FEATURES EnCrypt PLIUS is now Accessible Figure 81h NOTE The encryption software on your Thumb drive may appear different to the example shown above The following makes of encrypted drives have been tested Transcend Kingston 10 the dialog screen shown in to continue to the file selection screen Files can then be selected Moved or Copied to the thumb drive as normal Enter the password then click ok once thumb drive is unlocked Figure 82 CellDEK User Manual 108 OTHER FEATURES 11 If the Erase software is loaded on the CellDEK the data will be completely erased from the unit s hard drive when Delete files is chosen NOTE For more details about Erase please refer to the Security Erase section later in this chapter 12 If the All files button is tapped all of the stored data from capture sessions can be moved or copied to a USB storage device or deleted The activity log will show files copied 13 If the One by One button is tapped a list of all previous capture sessions will appear The list looks similar to Figure 83 below Select files to backup 218 files selected 14 32 54 mung 245 KB a 14 34 39 Samsung 295 View detail 14 36 04
98. o o 8 o WM Ce O 0 2 WM e pr 06 pr 06 Ke Ke Xe Ke Ne Ke Ke Yke Xe ke Ke Kie Ke Ke Ke l eala Jonie eme Kye K 0556 HMHH m m m m m 02 lt CellDEK User Manual N ola o umor alaj umor alaf o oco olaf oro olaj o so asm a Pet e Pd P e gt 4 e D e e P e P e 6 Q D SUPPORTED HANDSETS euceemv gt szog suceemv evo a BLACKBERRY 8707v a P gt lt Q e 2 LU oso gt o oro gt o oro o sm as GSM om sor lato auos o ocos
99. once the capture session has been backed up to a USB storage device They cannot be accessed from within CellDEK Please refer to Chapter 5 Other Features for more information on backing up files NOTE Logicube Technical Support may ask the user to send a copy of log dat for troubleshooting purposes 95 ANALYZING CAPTURED DATA The Report The Extraction Report is generated as both a csv and an xml file This allows the report to be imported into many different database utilities such as Microsoft Excel Access Lotus Notes etc NOTE The csv data file only contains data for Device Info Call Logs Contacts and Messages For backing up extraction data and reports to a PC please refer to the Managing Files section of Chapter 5 Enter a stang ano ihm select a key word from the fea list to in report PCT AT es on ut SIM Card Dialled Calls Numer of entries C Handset Dialled Calls Newer of entium J Mome lime Date 03 0542754009 13297 79 2007 u um F Figure 71 Report Preview Searching Reports CellDEK is able to perform a simple word search on any capture report Follow these steps to run a word search 1 When the Report preview appears tap the Keyboard button to bring up the alphanumeric keyboard 2 the desire
100. performs a single pass over the data and writes a pattern of random characters over it Gutmann Erase copies an alternating random pattern 35 times over the data This verifies that all magnetic traces of the data is gone US DoD 5220 22 M Erase copies an alternating random pattern 7 times over the data This level of erase conforms to DoD Department of Defense specifications Security Erase CellDEK utilizes a third party utility called Eraser by Heidi Computers Ltd This utility is installed separately from the CellDEK software and is available as a part of software update 1 8 1 0 CellDEK automatically detects Erase when it is installed on the unit and activated in the Security oettings Menu Advanced Settings Button Auxiliary Power Port Shutting Down CellDEK CellDEK amp User Manual This button is covered earlier in this chapter under Errors During Software Update CellDEK has an extra 12VDC power port that is located next to the IR Emitter on the control panel This port can be used to power such devices as a light source or external jammer From the Main Application Screen tap the Aux Power button to turn the port on or off The button will display the on off status CellDEK The system can be shut down directly from the Main Application Screen Tap the Shut Down button and confirm the action CellDEK will automatically power itself down 129 OTHER FEATURES CellDEK User Manual
101. sub contractors that the Licensed Software Materials constitute Confidential Information as defined below of the Licensor and that all Intellectual Property Rights therein are the property of or are licensed to the Licensor and the You shall take all such steps as shall be necessary to ensure compliance by its employees agents and sub contractors with the provisions of this Clause 4 5 COPYING THE LICENSED SOFTWARE MATERIALS 5 1 You shall be entitled to make one back up copy of the Software Any such copy shall in all respects be subject to the terms and conditions of this Agreement and shall be deemed to form part of the Software 5 2 You shall not be entitled to copy in whole or in part the software Documentation 6 WARRANTY 6 1 Subject to the exceptions set out in Clause 6 3 below and the limitations upon its liability in Clause 7 below the Licensor warrants that 6 1 1 it has the right power and authority to license the Licensed Software Materials upon the terms and conditions of this Agreement and 6 1 2 the Software will for a period of twelve 12 months from the date it is delivered to You conform to the Software Specifications 6 2 You shall give notice to the Licensor as soon as it is reasonably able upon becoming aware of a breach of warranty If no such notice is given within 30 days of You becoming aware of a breach of warranty the Licensor shall not be liable for such breach of warranty 6 3 The Licensor shall have no liabil
102. terms and conditions for copying distribution and modification follow GNU GENERAL PUBLIC LICENSE TERMS AND CONDITIONS FOR COPYING DISTRIBUTION AND MODIFICATION 0 This License applies to any program or other work which contains a notice placed by the copyright holder saying it may be distributed under the terms of this General Public License The Program below refers to any such program or work and a work based on the Program means either the Program or any derivative work under copyright law that is to say a work containing the Program or a portion of it either verbatim or with modifications and or translated into another language Hereinafter translation is included without limitation in the term modification Each licensee is addressed as you Activities other than copying distribution and modification are not covered by this License they are outside its scope The act of running the Program is not restricted and the output from the Program is covered only if its contents constitute a work based on the Program independent of having been made by running the Program Whether that is true depends on what the Program does 1 You may copy and distribute verbatim copies of the Program s source code as you receive it in any medium provided that you conspicuously and appropriately publish on each copy an appropriate copyright notice and disclaimer of warranty keep intact all the notices that refer to this License and
103. to phone with 4 Trying combewters Allami eg shone wee per wm 6 dom Trying dates n me form day mont yeer Found P code 150577 Thursdey Apti 16 2009 3150032 code has deen entered hme for m Figure 60 81 CAPTURING DATA CellDEK User Manual NOTE The unlocking process be cancelled at any time However data extraction cannot be performed on a locked handset If the process 15 cancelled without finding the unlock code it will need to be started again to unlock the handset Once the handset has been unlocked data extraction will be performed automatically The unlock code is displayed in the Device Information section of the report r E Contacts Messages Other Data Device Information Handset Info lt Sony Eriksson Woa 3 12994 j Case Pres rint d Details Report P v Figure 60d NOTE CellDEK only unlocks the handset it DOES NOT remove the handset lock If the handset is restarted after the extraction the code will need to be re entered NOTE CellDEK cannot unlock handsets that do NOT contain a SIM card Blackberry PIN Numbers Each Blackberry device is assigned a unique personal identification number PIN which allows identification of each device The PIN number of other Blackberry users is stored in the devices phonebook with their
104. to a capture USB PORT This USB port is used to connect an external USB drive for data backup purposes When used to extract data from a USB drive the port becomes write protected INFRARED IR EMITTER During an infrared capture the wireless device s IR port is pointed toward this emitter EXTERNAL MONITOR JACK An external PC monitor can be plugged into this port DC POWER PORT This is a 12VDC power socket that can be used to power external devices like a jammer light source etc FLASH MEMORY CARD SLOTS These ports work for CF SD SM and Memory Stick cards Additional Flash memory cards of different tyoes can be attached via an adapter The slots are write protected NOTE Other flash based media cards i e transflash cards can be read in an adapter that connects to one of the existing card reader slots Such adapters are available in any electronic store SIM CARD ADAPTER SLOT This port allows users to capture data directly off the SIM or USIM card A SIM card adapter is provided for this purpose PHONE CABLE JACK When CellDEK illuminates the correct adapter it gets plugged into this slot STORAGE AREA This compartment can be used to hold extra items adapters cables etc It also contains a bag with additional adapters that extend the functionality of certain cables and the DKU Nokia cable NOTE The CellDEK case lid should always remain closed when the unit is charging or not in use
105. to skip unread SMS messages during extraction During a capture session the following prompt will appear 122 CellDEK User Manual OTHER FEATURES CellDEK has been configured to skip messages will automatically skip message extraction in du Dant Skip Figure 89 Skip Unread SMS Prompt The prompt gives the user 15 seconds to skip or download unread SMS messages none of the buttons are pressed then the messages are skipped Do Full SIM card extraction This feature will pull all available data off of the SIM card Create Network Isolation Card after SIM Capture Checking this box will allow selective SIM data to be copied post SIM extraction to a target Network Isolation Card NIC The newly created NIC installed in the handset and contains enough information to appear to be the original SIM card but it will not have the necessary information to allow the handset to connect to the network This effectively provides Network Isolation for the phone For additional information please refer to the supplied NIC v3 0 User Notes Capture to external storage CellDEK 1 18 0 0 and newer versions support capturing data directly to a USB thumb drive When this selection is checked and you perform a new extraction by tapping Read New Device you will be asked to choose where the extraction files should be stored 123 OTHER FEATURES Select drive EVIDENCE 14 9 GB 14 6 GB free
106. trade mark notices 4 3 3 maintain an up to date record of the number of copies of the Licensed Software Materials and their location and upon request forthwith produce such record to the Licensor 4 3 4 only use the Software in accordance with the number of copies licensed to You and as set out in the Schedule 4 3 5 without prejudice to the foregoing take all such other steps as shall from time to time be necessary to protect the Confidential Information as defined in Clause 9 1 below and Intellectual Property Rights of the Licensor in the Licensed Software Materials 4 3 6 in its Use of the Licensed Software Materials comply with all CellDEK amp User Manual 186 cuoeesormwancucewse present and future statutes laws ordinances regulations and or guidelines of any applicable jurisdiction or agency 4 3 7 ensure that its personnel are at all times educated and trained in the proper Use and operation of the Licensed Software Materials 4 3 8 ensure that the Licensed Software Materials are used in accordance with any and all applicable Software Documentations and 4 3 9 indemnify and hold harmless the Licensor from and against all claims damages losses judgments fees expenses and costs including legal costs arising out of or resulting from Your acts negligence or failure to comply with this Clause 4 or any other provision of this Agreement 4 4 You shall inform all relevant employees agents and
107. 0 5250 6012 6102 6121 6126 6205 6350 6560 6590 6681 6682 6710 Navigator 6750 7205 7250 8801 8890 6236 5 C6 5 52 261 62 E66 E72 E90 8 75 78 81 N92 5 Cosmo Pocket PC XDA Argon O2 O2 O2 O2 O2 O2 O2 O2 O2 O2 O2 O2 O2 O2 O2 O2 O2 O2 O2 O2 O2 O2 O2 O2 O2 O2 OKWAP OKWAP OKWAP OKWAP OKWAP A201 A501 A700 A701 A702 XDA Cosmo XDA Exec XDA Flame XDA Graphite XDA Guide Ignito XDA II XDA ii mini XDA iis XDA mini S XDA NEO XDA Nova XDA Orbit XDA Orbit II SDA Orion XDA Phone XDA Stealth XDA Serra XDA Stellar XDA Terra XDA Trion XDA Zest XDA Zinc Xphone Xphone ii Xphone iim K728 K868 K860 K871 5868 CellDEK User Manual MOTOROLA MOTOROLA MOTOROLA MOTOROLA MOTOROLA ORANGE ORANGE ORANGE ORANGE ORANGE PANASONIC PANASONIC PANTECH PARAGON WIRELESS PHAROS PHAROS POCKET NAVIGATOR POCKET NAVIGATOR POCKET NAVIGATOR POCKET NAVIGATOR POCKET NAVIGATOR PSION TEKLOGIX PSION TEKLOGIX QOOL LABS QOOL LABS 175 Backflip Bravo Charmer Clig 2 Defy SPV M5000 SPV M600 SPV M650 SPV M700 SPV Smartphone G735 GN725 N725 GPS P745 Treo 700w Treo 700wx Treo 750V Treo 755p Treo 800w Tun
108. 10 Supernova NOKIA 7610 Supernova CellDEK User Manual Ble e e E E E E E fe E E E E E E E E E e doe safe sto els e sele ele ejos sele elo efo ofeefee fo fe fo fe fo fe fe fe SUPPORTED HANDSETS 25 C D NOK GSM Jan 10 ct 07 an 09 CDM 12 or 08 CDM 12 an 07 0 i o 0 6 ct 09 6 ct 09 G 02 3 09 02 lt 12 or 06 CDM 12 or 06 CDM 12 or 06 26 ct 09 12 CDM 2 08 6 ct 09 07 08 GS 08 GS 6 an 09 6 an 09 O 0 100 o o 0 0 Op 10 02 lt 05 Ce lt N N N N N N N N N N N N N N N Oo 10 02 lt ct 09 O i 3 09 02 10
109. 15 hx2490 hx2495 hx2700 Series hx2750 hx2790 hx2795 hx4700 hx4705 hx4710 rx1700 Series rx1950 rx1955 rx3100 rx3110 rx3115 rx3400 rx3415 rx3417 rx3700 rx3710 rx3715 rz1700 rz1710 rz1715 MOTOROLA C250 T MOBILE iPAQ h6315 PDA Cable Tip 8 CellDEK amp User Manual 180 AT amp T 5 56 5 66 AUDIOVOX 5050 6601 6600 CINGULAR 5 66 HTC Blue Angel Canary Falcon Harrier Himalaya Tanager Voyager Wallaby PDA2k PPC Phone Smartphone 1 Smartphone 2 O2 XDA lli XDA Ils XDA PPC Phone XPhone ORANGE SPV E100 SPV E200 SPV M1000 SPV M2000 SPV Smartphone QTEK 1010 2020 7070 8060 8080 9090 SIEMENS SX56 SX66 SPRINT 6601 XV6600 T MOBILE MDA MDA II MDA III PPC Edition VERIZON XV6600 PDA Cable Tip 11 DELL Axim X30 Axim X3i Axim Pocket DJ 20GB Pocket DJ 30GB PDA Cable Tip 13 DELL Axim X50v Axim X50 Axim X51v Axim X51 CellDEK User Manual 181 Alphanumeric Keypad 67 68 96 Android Google 73 Android ad hoc Rooting rooting Android phones VI 73 Apple 40 46 47 131 Audiovox 131 Audit Trail 10 95 96 Battery 12 13 15 25 33 64 65 66 132 133 Blackberry 31 49 50 131 Bluetooth 9 11 25 29 31 48 51 52 53 133 136 219 Button Audio 94 Button Call Log 88 Button Contacts 88 Button Extended Data 89 Button Images 92 Button OK 98 103 125 Button Organizer 89 Button Other 94
110. 2 02 or 07 WM lt ul 06 ul 07 08 ul 07 an 07 ul 07 BLACKBERRY 8120 _ _ exo a 09 i 122022220222 an 09 IM 0 0 0 0 0 100 2 jo jo o o o o 0 ul 08 ep lt lt gt an 09 O 02 lt 10 BLACKBERRY 8520 g BLACKBERRY 8800 T BLACKBERRY 8800 T O Op P an 10 02 lt ct 08 19 20 5 6 BLACKBERRY 8820 E BLACKBERRY 8830 0 2 3 4 5 6 pr 08 ct 08 g BLACKBERRY 8900 BLACKBERRY 9000 2 2 2 2 2 3 3 3 3 3 3 3 ul 09 an 09 omo 0 _ macer a s euceemv rion BLACKBERRY 7100 BLACKBERRY 7100x n ul 09 E Ble e e lff e e fe ul 09 10 06 2 o o lo o o
111. 2 02 2 0212 012 012 012 012 212 212 HE HEA HEA 0912 012 Z HILO 919 S18 915 SIS 915 919 912 SIS SIE 919 912 S18 SIS SIG S LLI LLI LLI LLI LLI LLI LLI LLI LLI LLI LLI LLI LLI LLI LLI LLI LLI LO N N N N N d d ja a spa FRRRRRRRRRRR A A 1681 SONY ERICSSON SONY 876 ERICSSON 1700 877 SONY ERICSSON feo enicsson 5 ur 879 ERICSSON 1715 ericsson mew 880 ERICSSON 506 s ew Dee P 2 osm gt we santo Ls tc asm as Matt e elec m vwo e m m gt gt gt gt gt a4 U5i Vivaz ao en 883 ERICSSON Uli Satio ow em 885 ERICSSON V600i s em 886 ERICSSON V630i quU 88 ERICSSON V640i SONY 882 ERICSSON U10i
112. 5 C 2 O 7 6 12 12 12 26 07 or 07 an 08 or 06 or 07 an 08 ul 09 an 07 an 07 ep 10 ct 07 ul 07 ec 05 ec 10 07 J D ct 06 an 09 ec 05 pr 06 ec 05 ec 05 pr 06 pr 06 07 08 ul 09 SUPPORTED HANDSETS NOKIA 7600 437 NOKIA 7610 7900 8210 8310 8800 8850 E NOKIA 8910 m NOKIA 11101 NOKIA 2323 Classic NOKIA 3510 3600 Slide NOKIA 3720 Classic NOKIA 5130 Xpress Music NOKIA 5140 NOKIA 5530 Xpress Music 5630 2a NOKIA 5 30 Xpress Music NOKIA 60151 CellDEK User Manual S Ej j E E e e pep s efe ele elo ofo ofe ele ele efo o sele ele els ofe efe ele elo efo ofo e selesele els olo e 2 12 GSM 12 25 SM SM G 3 Oi gt O
113. 74 Text File of Search Words 33 Save the file as CellDEK report search txt and copy it to a USB storage device 34 On the CellDEK bring up Preview Report and tap the Load button 35 A prompt will appear asking for a USB Storage Device Please insert USB with text file CellDEK Report Search txt Please note that CellDEK search file will be overwntten Figure 75 Attach USB Device Prompt 36 Attach the USB Storage Device and tap the OK button CellDEK will automatically download the text file The new search words will appear at the top of the screen Additional Report Searching Functionality To highlight UNICODE trigger words containing foreign characters a CellDEK Report Searct txt file needs to be created The file can be created using notepad and should include the trigger word followed by an arrow character gt followed by the translation e g Couteau gt Knife Each entry should be stated on a new line and the file needs to be saved as Unicode format When the report is searched for the trigger words any hits will be highlighted and the translation will appear next to the word in square brackets CellDEK User Manual 98 ANALYZING CAPTURED DATA select bey wont from the list to fnd in raport Enter search string and or 4 2 Handset Contacte Number of eetres 3 lS
114. 8110 M700 P100 P800W 5300 01000 PDA PDA IV 600 600e DX900 E500 E900 G500 G500 M500 M550 M600 M600 M700 M800 M810 N100 P100 P100w P120 P300 P600 P603 SIEMENS FUJITSU SIEMENS FUJITSU SIEMENS FUJITSU SIEMENS FUJITSU SIEMENS FUJITSU SIEMENS FUJITSU SIEMENS FUJITSU SIEMENS FUJITSU SIEMENS FUJITSU SIEMENS FUJITSU SIEMENS GARMIN ASUS GIGABYTE GIGABYTE GIGABYTE GIGABYTE GIGABYTE GIGABYTE GIGABYTE GIGABYTE GIGABYTE GIGABYTE GIGABYTE GIGABYTE GIGABYTE GIGABYTE GIGABYTE GIGABYTE GIGABYTE GIGABYTE 171 N520 N520c N520e N520p N560 N560c N560e T810 T830 V70 Garminfone g Smart g Smart g Smart i g Smart 120 128 1300 1350 5800 5802 5804 5808 5820 700 g Smart MW 702 g Smart MW998 g Smart q60 g Smart 1200 g Smart t600 SUPPORTED HANDSETS HP iPAQ HP iPAQ HP iPAQ HP iPAQ HP iPAQ HP iPAQ HP iPAQ HP iPAQ HP iPAQ HP iPAQ HP iPAQ HP iPAQ HP iPAQ HP iPAQ HP iPAQ HP iPAQ HP iPAQ HP iPAQ HP iPAQ HP iPAQ HP iPAQ HP iPAQ HP iPAQ HP iPAQ HP iPAQ HP iPAQ HP iPAQ HP iPAQ HP iPAQ 13835 13850 13870 13875 13900 13950 13955 13970 13975 14140 14150 14155 14350 14355 h5100 h5150 h5155 h5400 h5450 h5455 h5500 h5555 h6310 h6315
115. A De 7 27 II IPA EA I 127 SC CUTE ETON OH 129 ADV AINE DD d EUM E GS 129 AUXIETARY POWER POR gt 129 SHUTTING DOWN C E ILDER u iu u u 129 STANDBY 130 CellDEK User Manual VII TABLE OF CONTENTS 6 GLOSSARY AND TROUBLESHOOTING GUIDE 131 aa 131 GLOSSARY Z uuu ua u oi ma 131 TROUBLESHOOTING GUIDE OV M II sa dei as 133 ERROR MESSAGES iniit DIE av PEE a SEE 134 7 SUPPORTED HANDSET 22505 au NUR 136 HANDSETS TESTED CELLDEK AND THE RESULTS VERIFIED 136 HANDSETS EXPECTED SUPPORT 169 HANDSETS u E 178 GPS DEVICE
116. CH i830 ORANGE SPV E100 QTEK 8310 SAMSUNG SCH M400 ORANGE SPV E200 QTEK 8500 SAMSUNG SGH A257 ORANGE SPV E600 QTEK 8600 SAMSUNG SGH A877 ORANGE SPV E610 QTEK 9000 SAMSUNG SGH A887 ORANGE SPV E650 QTEK 9090 SAMSUNG SGH D300 SGH D730 Symbi ORANGE SPV F600 QTEK 9100 SAMSUNG an ORANGE SPV M1000 QTEK 9600 SAMSUNG SGH E808 ORANGE SPV M2000 QTEK 2020 SAMSUNG SGH i250 ORANGE SPV M2500 QTEK G100 SAMSUNG SGH i300x SGH i400 Symbia ORANGE SPV M3000 QTEK 100 SAMSUNG n SGH i450 Symbia ORANGE SPV M3100 QTEK 5110 SAMSUNG n ORANGE SPV M500 QTEK S200 SAMSUNG SGH i718 SONY SAMSUNG SGH i750 ERICSSON T226 T MOBILE MDA SONY MDA SAMSUNG SGH i760 ERICSSON T237 T MOBILE Compact SONY MDA SAMSUNG JSGH i770 ERICSSON T290a T MOBILE Compact II SONY MDA SAMSUNG SGH i897 ERICSSON 1616 T MOBILE Compact III SONY SAMSUNG SGH i917 ERICSSON 1637 T MOBILE MDA 9000 Galaxy SONY SAMSUNG 4G ERICSSON W300c T MOBILE 19100 Galaxy S SONY SAMSUNG 2 ERICSSON W550c T MOBILE MDA Mail SGH SONY SAMSUNG L870 Symbian ERICSSON W600 T MOBILE MDA Pro SONY MDA Pocket SAMSUNG SGH P730 ERICSSON W600c T MOBILE PC SONY SAMSUNG SGH T929 ERICSSON W710c T MOBILE MDA Touch SGH T589 SONY SAMSUNG Gravity Smart ERICSSON W715a T MOBILE MDA Vario CellDEK User Manual 176 SAMSUNG SAMSUNG SAMSUNG SHARP SIEMENS SIEMENS SIEMENS SIEMENS SIEMENS SIEMENS SIEMENS SIEMENS SIEMENS SOCKET MOBILE SONY ERICSSON SONY ERICSSON SONY ERICSSON SONY
117. DPPORTEE INTER S ehe u re 103 Sc OLFHER _ __ 104 MAIN APPLICATION SCREEN 252595 s 104 NIANAGE u u u ii 104 PExXtFacuon File Backup do QE au 110 UPGRADE SOE PW Ale ui De Used 113 ERRORS DURING SOFIWARE UPDATE 113 Hnes and 114 iPhone Support User Application NOES ETNE 147 u uD 118 APPLE IPHONE POP UP WINDOW 8 000000 0000 119 vb Mod M 121 EXTRACTION BUTTON _ ___ ___ 122 INEORMATION BUTEGON Z u Sed 124 VIRUS tese Lc 125 EARO A OME ERA E 125 On Screen Report 126 SOIN Mou une epee c
118. DUCTION CellDEK User Manual CellDEK software also helps with easy identification of the target device and informs the user of available connection methods The user can select the preferred connection method Historically data cable connection has been time consuming as it can be difficult to locate and identify the correct data cable for the target device CellDEK eliminates this by using a set of intelligent data cable connectors Once the target device has been identified CellDEK automatically selects the correct data cable connecter from the connector rack This is a fast and reliable data cable connector selection process Recommended use of CellDEK CellDEK is a forensically sound mobile phone and PDA data extraction tool able to obtain real time intelligence from a mobile handset at a scene It is designed to extract as much information as possible in a forensic manner and disclose any other information which might be present but has not been extracted It is aimed at getting information immediately from the mobile handset to help move forward an investigation CellDEK has been designed with a full audit trail allowing users to demonstrate when actions were taken The examination is write protected to ensure that information cannot be written to the handset or media card has been tested on a large range of handsets and its capabilities are displayed during the data extraction process The tests ha
119. E LAW EXCEPT WHEN OTHERWISE STATED IN WRITING THE COPYRIGHT HOLDERS AND OR OTHER PARTIES PROVIDE THE LIBRARY AS IS WITHOUT WARRANTY OF ANY KIND EITHER EXPRESSED OR IMPLIED INCLUDING BUT NOT LIMITED TO THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE THE ENTIRE RISK AS TO THE QUALITY AND PERFORMANCE OF THE LIBRARY IS WITH YOU SHOULD THE LIBRARY PROVE DEFECTIVE YOU ASSUME THE COST OF ALL NECESSARY SERVICING REPAIR OR CORRECTION 16 IN NO EVENT UNLESS REQUIRED BY APPLICABLE LAW OR AGREED TO IN WRITING WILL ANY COPYRIGHT HOLDER OR ANY OTHER PARTY WHO MAY MODIFY AND OR REDISTRIBUTE THE LIBRARY AS PERMITTED ABOVE BE LIABLE TO YOU FOR DAMAGES INCLUDING ANY GENERAL SPECIAL INCIDENTAL OR CONSEQUENTIAL DAMAGES ARISING OUT OF THE USE OR INABILITY TO USE THE LIBRARY INCLUDING BUT NOT LIMITED TO LOSS OF DATA OR DATA BEING RENDERED INACCURATE OR LOSSES SUSTAINED BY YOU OR THIRD PARTIES OR A CellDEK amp User Manual 203 CELLDEK HARDWARE LICENSE FAILURE OF THE LIBRARY TO OPERATE WITH ANY OTHER SOFTWARE EVEN IF SUCH HOLDER OR OTHER PARTY HAS BEEN ADVISED OF THE POSSIBILITY OF SUCH DAMAGES END OF TERMS AND CONDITIONS CellDEK Hardware Licenses Panasonic Toughbook License THE SOFTWARE PROGRAM S PROGRAMS FURNISHED WITH THIS PANASONIC PRODUCT PRODUCT ARE LICENSED ONLY TO THE END USER YOU AND MAY BE USED BY YOU ONLY IN ACCORDANCE WITH THE LICENSE TERMS DESCRIBED BELOW YOU
120. ED AS SUCH You hereby waive any governmental immunity if applicable to any and all causes of action arising hereunder or related hereto All notices required to be given hereunder shall be in writing Notices shall be considered delivered and effective upon receipt when sent by registered or certified mail postage pre paid return receipt requested addressed to the parties as set forth above or by telecopy with proof of transmission Either party upon written notice to the other many change the address to which future notices shall be sent b It is expressly declared that this Agreement and the relationship between the parties hereby established do not constitute a partnership joint venture or agency arrangement between them All amounts payable hereunder are exclusive of all freight insurance and all federal state local municipal or other excise sales use property or similar taxes duties import charges and fees now in force or enacted in the future and all such amounts shall be paid by You unless You provides a certificate of exemption or similar document exempting a payment from an applicable tax c If You attempt to use copy disclose or transfer any portion of the Software any modification thereof or Confidential Information in a manner contrary to the terms of this Agreement or in derogation of 5 rights whether those rights are explicitly stated determined by law or otherwise Licensor shall have the ri
121. ED ACCESS TO A COMPUTER TELEPHONE OR PDA MAY VIOLATE VARIOUS UNITED STATES FEDERAL AND STATE CRIMINAL STATUTES AND OR UK STATUTES INCLUDING WITHOUT LIMITATION THE COMPUTER FRAUD AND ABUSE ACT PUB L NO 98 473 98 STAT 2190 18 U S C 88 1029 ET SEG AND VARIOUS UK STATUES SUCH AS THE COMPUTER MISUSE ACT 1980 COMMUNICATION CT 2003 AND THE REGULATION OF INVESTIGATORY POWERS ACT 2000 BY OPENING OF THE ATTACHED PACKAGE CUSTOMER ACREES THAT CellDEK amp User Manual TABLE OF CONTENTS THE DEVICE WILL ONLY BE USED IN A LAWFUL MANNER B CUSTOMER WILL INDEMNIFY AND HOLD HARMLESS SELLER FROM ALL FEES EXPENSES LOSSES LIABILITIES AND DAMAGES INCLUDING WITHOUT LIMITATION LEGAL FEES RESULTING FROM A BREACH OR VIOLATION OF THE FOREGOING Warranty LOGICUBE PROVIDES A BASIC ONE YEAR PARTS AND LABOR WARRANTY FOR ALL OF ITS PRODUCTS EXCLUDING CABLES ADAPTERS AND OTHER CONSUMABLE ITEMS A ONE YEAR EXTENDED WARRANTY IS ALSO AVAILABLE FOR AN ADDED COST TELEPHONE AND EMAIL SUPPORT IS AVAILABLE FOR THE LIFE OF THE PRODUCT AS DEFINED BY LOGICUBE MODIFYING OR TAMPERING WITH THE HARDWARE AND OR SOFTWARE OF THE PRODUCT WILL VOID THE WARRANTY For further assistance please contact Logicube Technical Support at 1 818 700 8488 or by email to techsupport logicube com Phone support is available 7AM 5PM weekdays excluding US national holidays Logicube RoHS Compliance Statement LOGICUBE PRODUCTS COMP
122. ENS ME45 SIEMENS 75 PART 0 0 10 o o o o GSM SIEMENS _ E E 815 SIEMENS S55 16 pr 06 T SIEMENS 565 GSM ec 05 ul 06 ec 05 ec 05 ec 05 EN semens 66 5 scis P SONY 824 ERICSSON C510 SONY 825 ERICSSON C702 SONY 826 ERICSSON C901 SONY 827 ERICSSON C902 SONY lt 77 0 100 o o o o 02 lt i 3 ep lt ct 09 HN ct 08 ct 09 m ct 08 se ones i P Ce lt i P 02 lt 22222222 O 02 11 2 2 11 gt ep lt CellDEK User Manual 164 ERICSSON ae a 830 ERICSSON 0750 SONY 831 ERICSSON F305 SONY 832 ERICSSON 5001 SONY 833 ERICSSON G502 SONY 834 ERICSSON G700 SONY 835 ERICSSON G705 SONY 836 ERICSSON G900 SONY 837 ERICSSON J105i SONY 838 ERICSSON 43001 SONY 839 ERICSSON K300i SONY 840 ERICSSON K310i SONY 841 ERICSSON K320i D SONY 842 ERICSSON K500i SONY 843 ERICSSON K510i SONY
123. File A file stored using clusters that are located next to each other in the drive s memory Troubleshooting Guide fails to power up no lights connector rack on power up Dimensions entered do not display correct phone Cell phone not listed or no image can be found Infrared discovery failed Bluetooth extraction failed Connector not lit No cable connection method offered No battery monitor onscreen CellDEK User Manual The CellDEK battery may be flat Try connecting the charger NOTE the embedded PC may still have power when the internal battery does not No light on the connectors indicates a flat internal battery The lights should illuminate when the charger is inserted Re measure and re enter dimensions by adjusting them slightly NOTE The phone may not yet be included in the identification module Phone may not yet be supported by the identification module Select a similar device from the listing and use IR or Bluetooth ONLY Damage to the handset can occur by selecting the wrong cable for a device and is not recommended NOTE The device make and model reported is obtained from the phone not based on the device selected from the identification module Ensure infrared is active on target device and IR window is aligned with the CellDEK s pickup sensor Ensure Bluetooth is active on target device and device is in discoverable mode Also device may be asking for a 4 digi
124. Isolation Cards Selecting No will finish the process and bring the user back to the CellDEK main screen Selecting YES to the screen below will prompt the user to 60 CellDEK User Manual CAPTURING DATA identify the phone to be used with the NIC SIM ID Card After selecting the phone one of the following two screens will appear Tap OK to finish he process and go back to the CellDEK main screen This phone has been tested and is supported by the NIC card This phone does NOT support cards Inserting this NIC into target handset may cause data to be lost or changed e Create a test NIC will attempt to write default ICCID and IMSI onto a NIC SIM ID Card The default values are ICCID 894900050701001429 IMSI 001010123456789 A warning will appear after creating a test NIC A Test NIC can be used to access handset data but should only be used as a last resort Inserting into a handset may cause data to be lost or changed NIC ICCID and IMSI values can be checked by performing a SIM Card Extraction of NIC This method should be used as a last resort if none of the previous methods work It is important to understand that incorrect ICCID or IMSI data may cause data on the handset to be lost or changed 61 CAPTURING DATA 1 From the Operation screen tap Create Test NIC 2 Place the NIC into the adapter and insert the adapter into the reader Tap OK Put
125. LY WITH THE EUROPEAN UNION RESTRICTION OF THE USE OF CERTAIN HAZARDOUS SUBSTANCES IN ELECTRONIC EQUIPMENT ROHS DIRECTIVE 2002 95 THE ROHS DIRECTIVE PROHIBITS THE SALE OF CERTAIN ELECTRONIC EQUIPMENT CONTAINING SOME HAZARDOUS SUBSTANCES SUCH AS MERCURY LEAD CADMIUM HEXAVALENT CHROMIUM AND CERTAIN FLAME RETARDANTS IN THE EUROPEAN UNION THIS DIRECTIVE APPLIES TO ELECTRONIC PRODUCTS PLACED ON THE EU MARKET AFTER JULY 1 2006 CellDEK User Manual TABLE OF CONTENTS Logicube Declaration of Conformity APPROPRIATE EUROPEAN UNION EU HEALTH SAFETY AND ENVIRONMENTAL REQUIREMENTS WHICH ENSURE CONSUMER AND WORKPLACE SAFETY IT IS IN COMPLIENCE WITH ALL REQUIREMENTS AND PROVISIONS OF DIRECTIVE 89 336 EEC AND ALL OTHER RELEVANT DIRECTIVES C C LOGICUBE DECLARES THAT THIS PRODUCT MEETS ALL PLEASE CONTACT LOGICUBE INC FOR A COPY OF THIS DECLARATION End User License Agreement EULA LOGICUBE INC OWNS THE CELLDEK SOFTWARE AND HEREBY GRANTS THE LICENSEE A LIMITED PERPETUAL NON EXCLUSIVE AND NON TRANSFERABLE LICENSE TO USE THE SOFTWARE SOLELY IN THE COURSE OF LAWFULLY OPERATING THE DEVICE WITH WHICH THE SOFTWARE IS INTEGRATED AND FOR NO OTHER PURPOSE A COPY OF THE LICENSE MAY BE VIEWED FROM WITHIN THE CELLDEK APPLICATION AND THE END USER WILL BE PROMPTED TO ACCEPT THE TERMS OF THE LICENSE PRIOR TO INITIAL USE OF THE DEVICE A COPY OF THE LICENSE IS INCLUDED IN THE USERS MANUAL OR YOU MAY CONTACT LOGICUBE INC F
126. Library and distribute that work under terms of your choice provided that the terms permit modification of the work for the customer s own use and reverse engineering for debugging such modifications You must give prominent notice with each copy of the work that the Library is used in it and that the Library and its use are covered by this License You must supply a copy of this License If the work CellDEK User Manual 202 during execution displays copyright notices you must include the copyright notice for the Library among them as well as a reference directing the user to the copy of this License Also you must do one of these things a Accompany the work with the complete corresponding machine readable source code for the Library including whatever changes were used in the work which must be distributed under Sections 1 and 2 above and if the work is an executable linked with the Library with the complete machine readable work that uses the Library as object code and or source code so that the user can modify the Library and then relink to produce a modified executable containing the modified Library It is understood that the user who changes the contents of definitions files in the Library will not necessarily be able to recompile the application to use the modified definitions b Use a suitable shared library mechanism for linking with the Library A suitable mechanism is one that 1 uses at run time a
127. Message 78 89 90 91 132 136 Motorola 72 78 83 131 Network Isolation Card 12 27 54 55 56 123 NIC 123 Nokia 12 14 63 64 72 77 131 136 Nokia CA 42 Cable 12 63 136 Non Latin Language 72 OPERATING SYSTEM OS IV 12 16 77 250 252 253 Palm 31 131 Password 16 31 49 50 PC Examination 11 67 PERSONAL DATA ASSISTANT PDA II 9 10 11 30 31 38 39 50 51 113 219 236 Phone Cable Adapter Storage Rack 14 Phone Cable Jack 14 Phone Cellular 11 12 13 25 Number 25 34 49 50 51 62 113 132 133 134 Port USB 14 63 68 87 102 113 125 Portable Forensic Laboratory I 9 11 12 13 15 Power AC 12 13 15 Power DC 14 Printer USB 87 93 102 103 Reader Flash Memory Card 36 Reader SIM Card 33 Report Builder 99 Ruler 13 29 Samsung 72 131 Sanyo 131 Screen Activity Log 10 69 71 109 Screen Case Details Input Form 67 87 103 Screen Cell Phone Models 27 Screen Cell Phone Selection 26 Screen Connectivity Option 48 49 51 52 54 56 63 Screen Device Type Selection 25 30 32 36 38 46 47 Screen Discover Devices 52 Screen Extended Data View 87 89 92 102 Screen Main Application 15 16 18 22 25 30 32 36 38 46 63 70 95 104 113 114 129 Screen Standard Data View 88 94 Siemens 72 83 131 SIM Card ID Cloning 56 CellDEK User Manual 183 SUPPORTED HANDSETS Skyp
128. NIC card into adapter and insert into reader Then click 3 CellDEK will now create the SIM ID When this process finishes the screen below will appear Tap OK to finish the process Successfully created NIC A Test NIC can be used to access handset data but should only be used as a last resort Inserting into a handset may cause data to be lost or changed OK Extraction without a SIM Card CellDEK can extract data from many handsets with the SIM card removed If a handset s SIM is PIN locked this feature allows an extraction of the handset with the SIM removed If supported this feature is displayed in the Connectivity Screen CellDEK amp User Manual 62 Capturing Nokia Handsets CAPTURING DATA Handset support Result 99 100 Details Full SC plan route to E Navigate to Refine Send location View Save location Help Go to web address a LE a i HE Supports SIMless extractions Supports removable memory cards Key IR 5 port D on off Figure 46 Connectivity Option Screen Certain Nokia Handsets require special adapters in order to extract data This section deals with two major topics Installing the CA 42 Cable and using Nokia Flash adapters to connect to a handset Nokia CA 42 Cable Installation The Nokia CA 42 Cable that is provided with CellDEK is different than the other cables It resides in the storage compartment and not i
129. Number IMEI Number 94 ANALYZING CAPTURED DATA Select a previous extraction View detail Ref Exhibit 0 cancel 08 05 28 11 12 02 Siemens 988 KB 08 06 18 11 33 45 Samsung 1 31 11 34 27 Samsung 166 11 38 00 Samsung 146 11 43 12 Samsung 160 11 46 24 Samsung 146 11 48 15 Samsung 169 12 13 36 Samsung 196 13 24 09 Samsung 192 13 31 34 Samsung 193 14 34 38 Samsung 37 4 14 37 23 Samsung 38 9 14 51 19 Samsung 194 14 64 107 WRI 434 files 177 MB Figure 70 Previous Extraction List 1 From the Main Application Screen tap the View Device History button A list of all previous capture sessions will appear 2 Choose the desired search criteria from the View Detail list on the side of the screen 3 Scroll to the desired capture session and tap it once to select 4 Tapthe Select button The Standard and Extended Data Screens for that capture session will appear The Audit Trail CellDEK amp User Manual The audit trail is a set of two files that are generated along with the capture session Log dat records all commands sent to and received from the target device This includes AT commands Audittrail txt records all data received from the target device All three files are stored and moved with the extracted data They can be accessed
130. OR A COPY THE DEVICE ALSO CONTAINS AN EMBEDDED PC THE END USER SOFTWARE LICENSE AGREEMENT FOR SOFTWARE CONTAINED WITHIN THE EMBEDDED PC 5 PROVIDED AS A PAPER LICENSE ALONG WITH THE CELLDEK DEVICE IN THE ATTACHED PACKAGE BY USING THE SOFTWARE YOU AGREE TO BE BOUND BY THE TERMS OF THE APPLICABLE LICENSE AGREEMENT THIS LICENCE COVERS THE OPERATING SYSTEM THAT SUPPORTS THE CELLDEK DEVICE SOFTWARE AND ANY OTHER SOFTWARE CONTAINED ON THE EMBEDDED LAPTOP PLEASE NOTE THE WARRANTY RESTRICTIONS ON ACCESSING THE EMBEDDED PC A COPY OF THIS LICENSE 15 ALSO AVAILABLE FROM LOGICUBE INC NOTE Opening the CellDEK faceplate to access the embedded PC will void the warranty NOTE Hacking the CellDEK application to access the embedded PC s Operating System will also void the warranty Logicube can reload the CellDEK application for a substantial fee CellDEK amp User Manual IV TABLE OF CONTENTS Table of Contents M n o9 LIMITATION OF LIABILITY AND WARRANTY INFORMATION II EOGICUBE DISCEEAIMER ctas ee ecu eoe l eoe eo c eaa oV eap ru vex II IMPORTANT NOTICE PLEASE READ CAREFULLY II M LOGICUBE ROHS COMPLIANCE STATEMENT cccccccccccccccccccccccccccccccccccccccccc
131. P501 KS20 KT610 KU380 Optimus GT540 P509 Optimus 08100 08150 08180 08210 08290 08300 502 702 600 560 168 169 180 336 338 339 558 728 8380 8390 8870 16885 336BT 338 Plus MITAC MITAC MITAC MITSUBISHI MWG MWG MWG MOTOROLA MOTOROLA MOTOROLA MOTOROLA MOTOROLA MOTOROLA MOTOROLA MOTOROLA MOTOROLA MOTOROLA MOTOROLA MOTOROLA MOTOROLA MOTOROLA MOTOROLA MOTOROLA MOTOROLA MOTOROLA MOTOROLA MOTOROLA MOTOROLA MOTOROLA MOTOROLA MOTOROLA MOTOROLA MOTOROLA MOTOROLA MOTOROLA MOTOROLA MOTOROLA MOTOROLA MOTOROLA MOTOROLA MOTOROLA MOTOROLA MOTOROLA MOTOROLA MOTOROLA MOTOROLA MOTOROLA MOTOROLA 174 P550 OP550m P560 Trium Mondo Atom Life Atom V Zinc A845 A3100 C250 C343a C353 C353t C380 E550 1275 1720 1733 1740 1920 1920 1930 5 MPx100 1720 1150 V120e V120t V120x V186 V191 V330 505 V535 V545 V547 V555 V557 V60 V60c V60g V6Oi V60s V60t V60x V66 Z10 NEONODE NEONODE NEONODE NEXIO NEXIO NOKIA NOKIA NOKIA NOKIA NOKIA NOKIA NOKIA NOKIA NOKIA NOKIA NOKIA NOKIA NOKIA NOKIA NOKIA NOKIA NOKIA NOKIA NOKIA NOKIA NOKIA NOKIA NOKIA NOKIA NOKIA NOKIA NOKIA NOKIA NOKIA NOKIA NOKIA NOKIA NOKIA NOKIA NOKIA NOKIA NOKIA NOKIA NOKIA NOKIA O2 O2 O2 1 2 5160 40 2320 Classic 2605 2705 Shade 3205 3606 3711 503
132. R OF SUBSTITUTE USE OF PERFORMANCE ARISING OUT OF OR RELATED IN ANY WAY TO THE TRANSACTIONS CONTEMPLATED HEREUNDER EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGES UNDER NO CIRCUMSTANCES SHALL LICENSOR S TOTAL LIABILITY OF ALL KINDS ARISING OUT OF OR RELATED TO THIS AGREEMENT INCLUDING BUT NOT LIMITED TO ANY WARRANTY OR SUPPORT RELATED CLAIMS HEREUNDER REGARDLESS OF WHETHER ANY ACTION OR CLAIM IS BASED ON CONTRACT STRICT LIABILITY TORT OR OTHERWISE EXCEED THE TOTAL AMOUNT PAID BY YOU FOR THE DEVICE WITH WHICH THE SOFTWARE IS PROVIDED DETERMINED AS OF THE DATE OF ANY FINAL JUDGMENT IN SUCH ACTION c This limited warranty shall be valid and remain in effect only if i the Software is used CellDEK User Manual 193 SOFTWARE LICENSE and maintained by You directed by applicable documentation ii You promptly notify Licensor in writing of the claim and 15 able to reproduce it iv the Software has not in any way been modified and You have not installed any other hardware or software affecting the Software v the claim is unrelated to the failure by You to follow the most current instructions issued by Licensor or its authorized reseller vi the claim is unrelated to the negligence accident or act of You or any third party vil You provide reasonable access to the Software viii there has been no operation of the Software under conditions more severe than those for which the Software was desi
133. R USE OF THE PROGRAMS SHALL BE CONCLUSIVELY DEEMED TO CONSTITUTE YOUR ACCEPTANCE OF THE TERMS OF THIS LICENSE Matsushita Electric Industrial Co Ltd MEI has developed or otherwise obtained the Programs and hereby licenses their use to you You assume sole responsibility for the selection of the Product including the associated Programs to achieve your intended results and for the installation use and results obtained therefrom LICENSE Panasonic Toughbook License THE SOFTWARE PROGRAM S PROGRAMS FURNISHED WITH THIS PANASONIC PRODUCT PRODUCT ARE LICENSED ONLY TO THE END USER YOU AND MAY BE USED BY YOU ONLY IN ACCORDANCE WITH THE LICENSE TERMS DESCRIBED BELOW YOUR USE OF THE PROGRAMS SHALL BE CONCLUSIVELY DEEMED TO CONSTITUTE YOUR ACCEPTANCE OF THE TERMS OF THIS LICENSE A MEI hereby grants you a personal non transferable and non exclusive right and license to use the Programs in accordance with the terms and conditions stated in this Agreement You acknowledge that you are receiving only a LIMITED LICENSE TO USE the Programs and related documentation and that you shall obtain no title ownership nor any other rights in or to the Programs and related documentation nor in or to the algorithms concepts designs and ideas represented by or incorporated in the Programs and related documentation all of which title ownership and rights shall remain with MEI or its suppliers B You may use the Programs only on the single P
134. SEMBLE REVERSE COMPILE OR MECHANICALLY OR ELECTRONICALLY TRACE THE PROGRAMS OR ANY COPY THEREOF IN WHOLE OR IN PART YOU MAY NOT USE COPY MODIFY ALTER OR TRANSFER THE PROGRAMS OR ANY COPY THEREOF IN WHOLE OR IN PART EXCEPT AS EXPRESSLY PROVIDED IN THE LICENSE IF YOU TRANSFER POSSESSION OF ANY COPY OF ANY PROGRAM TO ANOTHER PARTY EXCEPT AS PERMITTED IN PARAGRAPH E ABOVE YOUR LICENSE IS AUTOMATICALLY TERMINATED TERM This license is effective only for so long as you own or lease the Product unless earlier terminated You may terminate this license at any time by destroying at your expense the Programs and related documentation together with all copies thereof in any form This license will also terminate effective immediately upon occurrence of the conditions therefor set forth elsewhere in this Agreement or if you fail to comply with any term or condition contained herein Upon any such termination you agree to destroy at your expense the Programs and related documentation together with all copies thereof in any form YOU ACKNOWLEDGE THAT YOU HAVE READ THIS AGREEMENT UNDERSTAND IT AND AGREE TO BE BOUND BY ITS TERMS AND CONDITIONS YOU FURTHER AGREE THAT IT 15 THE COMPLETE AND EXCLUSIVE STATEMENT OF THE AGREEMENT BETWEEN US WHICH SUPERSEDES ANY PROPOSAL OR PRIOR AGREEMENT ORAL OR WRITTEN AND ANY OTHER COMMUNICATIONS BETWEEN US RELATING TO THE SUBJECT MATTER OF THIS AGREEMENT About Intel software products The enclos
135. T q rw Data F F prin cere Figure 76 NOTE The reports can NOT be saved with the highlighted trigger words However the report can be printed directly from the CellDEK with the highlighted trigger words and translations CellDEK Report Builder The CellDEK Report Builder is a separate software application that allows users to modify the data within a report The report builder also enables the user to re order the data shown in the final report All user changes are highlighted in the final report to clearly distinguish between extracted and user added data Refer to the embedded help files within the application for more information CellDEK Report Builder has been tested on a Windows XP environment The Report Builder may also run on Windows Vista and Windows 7 but has not been tested on these operating systems CellDEK amp User Manual 99 ANALYZING CAPTURED DATA CellDEK Report Builder Dependencies The following dependencies are required to be installed before installation of the CellDEK Report Builder Microsoft framework 3 5 available from www microsoft com Adobe Reader latest version available from www adobe com CellDEK Report Builder Installation The CellDEK Report Builder is a separate software application intended to run on a PC or Laptop It is not intended to be installed on a CellDEK device To install th
136. The ordinary General Public License therefore permits such linking only if the entire combination fits its criteria of freedom The Lesser General Public License permits more lax criteria for linking other code with the library We call this license the Lesser General Public License because it does Less to protect the user s freedom than the ordinary General Public License It also provides other free software developers Less of an advantage over competing non free programs These disadvantages are the reason we use the ordinary General Public License for many libraries However the Lesser license provides advantages in certain special circumstances For example on rare occasions there may be a special need to encourage the widest possible use of a certain library so that it becomes a de facto standard To achieve this non free programs must be allowed to use the library A more frequent case is that a free library does the same job as widely used non free libraries In this CellDEK User Manual 201 case there is little to gain by limiting the free library to free software only so we use the Lesser General Public License In other cases permission to use a particular library in non free programs enables a greater number of people to use a large body of free software For example permission to use the GNU C Library in non free programs enables many more people to use the whole GNU operating system as well as its variant the GNU L
137. User Manual 11 12 13 Re start system order for settings to take effect Start Shut Down Once re started tap OK on Windows log in Tap OK on the End User License Agreement to load the CellDEK software Calibrating the Panasonic model Note The steps below require a USB keyboard 2 11 12 13 14 24 Turn the CellDEK On the Windows Log On screen tap OK to log on to Windows The End User License Agreement should appear Do not do anything to the License Agreement Do not close it Do not click OK Attach the USB keyboard to the USB port Double tap the Hide StartBar icon f you cannot locate it on the desktop look for a folder called Unused Icons Double tap that folder and see if the Hide StartBar icon is there After double tapping the Hide StartBar the Windows Start button should appear on the bottom left of the screen Tap the Start button Tap Control Panel In the Control Panel double tap Mouse In the Mouse Properties window tap the TouchScreen tab In the Calibration amp Test section tap the Calibration button The screen should go into calibration mode Follow the instructions on the screen touching the red marks There will be 9 of them 3 rows top middle and bottom and 3 columns left middle and right When you are done with the 9 mark the mark will go back to the top left At this point press the Enter key on the
138. Y MODIFY AND OR REDISTRIBUTE THE PROGRAM AS PERMITTED ABOVE BE LIABLE TO YOU FOR DAMAGES INCLUDING ANY GENERAL SPECIAL INCIDENTAL OR CONSEQUENTIAL DAMAGES ARISING CellDEK amp User Manual 200 OUT OF THE USE OR INABILITY USE THE PROGRAM INCLUDING BUT NOT LIMITED TO LOSS OF DATA OR DATA BEING RENDERED INACCURATE OR LOSSES SUSTAINED BY YOU OR THIRD PARTIES OR A FAILURE OF THE PROGRAM TO OPERATE WITH ANY OTHER PROGRAMS EVEN IF SUCH HOLDER OR OTHER PARTY HAS BEEN ADVISED OF THE POSSIBILITY OF SUCH DAMAGES END OF TERMS AND CONDITION GNU LESSER GENERAL PUBLIC LICENSE Version 2 1 February 1999 Copyright C 1991 1999 Free Software Foundation Inc 51 Franklin Street Fifth Floor Boston MA 02110 1301 USA Everyone is permitted to copy and distribute verbatim copies of this license document but changing it is not allowed This is the first released version of the Lesser GPL It also counts as the successor of the GNU Library Public License version 2 hence the version number 2 1 Preamble The licenses for most software are designed to take away your freedom to share and change it By contrast the GNU General Public Licenses are intended to guarantee your freedom to share and change free software to make sure the software is free for all its users This license the Lesser General Public License applies to some specially designated software packages typically libraries of the Free Software Foundati
139. a Polaris Prophet Pure Robbie 5320 5630 5720 5730 Sensation 4G Shadow Hotspot Shift Sirius Sonata Star Trek Surround Tanager Thunderbolt Tilt2 Touch2 Touch 3G Touch Cruise 09 Touch Dual Touch HD Touch Pro Touch Pro 2 Touch Viva Tilt Trinity Typhoon TyTN Universal Volans P3400 P350 SUPPORTED HANDSETS IMATE IMATE IMATE IMATE IMATE IMATE IMATE IMATE IMATE IMATE IMATE IMATE IMATE IMATE IMATE IMATE IMATE INTERMEC INTERMEC INTERMEC INTERMEC INTERMEC INTERMEC INTERMEC INTERMEC INTERMEC i teq i teq i teq IZENMOBILE KINPO KINPO KINPO KINPO KINPO KROME KROME MOTOROLA MOTOROLA Pocket PC omartflip Smartphone Smartphone 2 SP2 SP3 SP4m SP5m SPJAS Ultimate 5150 Ultimate 6150 Ultimate 7150 Ultimate 8150 Ultimate 8502 Ultimate 9150 Ultimate 9502 810 F 730 730B 741B 751B 761B CN2B CN3 CN30 Mercury Bond Laser iDO 5601 IDO 5630 SP70 SP70R SP90 Intellekt iQ200 Intellekt iQ700 Flipout Flipside SUPPORTED HANDSETS KROME LENOVO LENOVO LENOVO LG LG LG LG LG LG LG LG LG LG LG LG LG LG LG LG LG LG LG LG LG LG LG LG LG LG MIO MIO MIO MIO MITAC MITAC MITAC MITAC MITAC MITAC MITAC MITAC MITAC MITAC MITAC MITAC MITAC MITAC CellDEK User Manual Spy ET960 ET980 i921 Incite KB770 KC1 KE990 KF 300 KF310 KF 350 KF 700 KF 750 KF 755 KF 770 KF900 KP 100 K
140. arately Please refer to Capturing a Flash Memory Card earlier in this chapter Symbian Event Logs Symbian S60 2 Edition and 3 Edition handsets have the ability to record events which CellDEK can now extract CellDEK amp User Manual 78 CAPTURING DATA The following information can be extracted e Voice Call events Number Date Time Direction and Duration SMS events 10 Number Date Time Direction Message Fragment and Status e MMS events 10 Name Date Time Direction and Duration These events are normally accessed by the handsets Log Viewer application These events have a validity period set in the Log Viewer settings Once this duration period has expired events will no longer be accessible Points of Interest Timestamps extracted by CellDEK are always reported in Greenwich Mean Time GMT whereas the timestamps shown the handset s Log Viewer application are set to the handset s current time zone e CellDEK is able to extract message fragments for SMS events These are not displayed by the Log Viewer application Only the first 64 characters of a message are reported any messages greater than 64 characters are truncated in the event log including multipart messages where only the first 64 characters of the first message part are reported Incoming MMS messages are shown as 2 separate events 1 incoming SMS event and 1 outgoing MMS event CellDEK extracts both of the
141. ary creates an executable that is a derivative of the Library because it contains portions of the Library rather than a work that uses the library The executable is therefore covered by this License Section 6 states terms for distribution of such executables When a work that uses the Library uses material from a header file that is part of the Library the object code for the work may be a derivative work of the Library even though the source code is not Whether this is true is especially significant if the work can be linked without the Library or if the work is itself a library The threshold for this to be true is not precisely defined by law If such an object file uses only numerical parameters data structure layouts and accessors and small macros and small inline functions ten lines or less in length then the use of the object file is unrestricted regardless of whether it is legally a derivative work Executables containing this object code plus portions of the Library will still fall under Section 6 Otherwise if the work is a derivative of the Library you may distribute the object code for the work under the terms of Section 6 Any executables containing that work also fall under Section 6 whether or not they are linked directly with the Library itself 6 As an exception to the Sections above you may also combine or link a work that uses the Library with the Library to produce a work containing portions of the
142. ary to perform its obligations or exercise its rights under this Agreement 9 2 The receiving Party undertakes not to disclose any Confidential Information of the disclosing Party to any third party other than employees professional advisors and approved sub contractors of the receiving Party ona need to know basis only and to whom disclosure is necessary for the proper performance of their duties under this Agreement 9 3 The foregoing obligations shall not apply to Confidential Information that 9 3 1 was known to the receiving Party prior to receipt from the CellDEK User Manual 188 b Sor TARE LICENSE disclosing Party or 9 3 2 is received from a third party without breach of any other confidentiality arrangements or 9 3 3 is or becomes public knowledge other than by breach of this Clause or is independently developed by or for the receiving Party or 9 3 4 is required to be disclosed by any applicable law or by order of any Court of competent jurisdiction or any government body agency or regulatory body provided that the receiving Party shall use all reasonable endeavours to give the other Party not less than two business days written notice of the disclosure 9 4 The Parties shall ensure that their respective employees agents and sub contractors comply with the provisions of this Clause and are bound by terms and conditions of use and non disclosure at least as onerous as those contained in this Clau
143. ation procedures of Logicube The results below display the data sets that can be extracted from CellDEK for the specific handset There may be additional data sets available from handsets and these will require further examination Key SMS Phone ID w timestamp SMS w timestamp EH 3 Handsets appear with no cable number assigned are supported Infrared Bluetooth methods e Cable Number 999 refers to the external Nokia CA 42 cable ACER beTouch E101 a Jan 10 ACER F900 Jan 10 gg Call Logs o Messages C Ce ACER no0 Jul 06 ACER X960 Oct 09 2 s o ws _ CD o Mobile Standard esse G 09 Apr 08 31 09 CellDEK User Manual 136 SUPPORTED HANDSETS 7 ANDROID G1 iPhone 2 ae prones cO Jul 08 ct 08 ct 09 11 E i 11 BENQ 2 a 2 eo S BENQ a 13 SIEMENS EF81 D BENQ a 14 SIEMENS 568 15 SIEMENS 588 a BLACKBERRY 7230 BLACKBERRY 7250 BLACKBERRY 7290 EN PE 19 _ 20 BLACKBERRY a 2 a PE an 09 ul 06 O 0 1M 1M 02 02 02 02 02 0
144. c apros samsuna 19 m m m m samsuna apros 776 samsuna seamo 1 suos samsuna sexo 18 suos samsuna suos samsuna sema suos samsuna seus o zs m sawsunc semeio mic 22 samsuna 5 samsuna same 5 fal samsuna sce 9 al samsuna see 9 al o o samsuna 9 senmo 2 m c samsuna m samsuna sew 9 m Hm somer 5 samsuna 5 m o sum exes 5 semens so ma semens as 5 semens as Jal o m m e Kle Kie ke Kie Ke ke ue Ke Ke ke Kie Ke ue kK Q ep lt 02 3
145. cccccccccccees LOGICUBE DECLARATION OF CONFORMITY IV END USER LICENSE AGREEMENT EULA IV OR CONTENTS SS V 1 INTRODUCTION IO CELLDELK 9 INTRODUCTION uuu 9 RECOMMENDED USE OF CELLDEK 10 CURRENT SOFTWARE VERSION 2 0 02000000000000000000 10 uM MN M 11 EISING JII I PP C M Ele aun 11 SYSTEM DESCRIPTION IU Erie 11 29 6304 STARTED u u 13 OVERVIEW OE THE CEEEDEK 13 SETTING UP CELLDER 5 ne tiet u i 15 T nce eta ee aa nae na 15 gece EE 15 POWERING WIP CBE K 15 h 18
146. check option has been included within the system setup menu The user can now run a malware removal tool to check for virus infection CellDEK amp User Manual 19 APTURING DATA Wikis Introduction Computer viruses are very common easily spread and can be difficult to remove Viruses can cause damage to computer systems by corrupting files changing information and gathering personal data Generally virus files can only infect a system if the file is executed This briefing note has been produced to help identify infection of your CellDEK unit Checking for Infection The CellDEK software 1 16 and newer enables the user to run a regular virus check on the system within the system setup screen On selection the Virus Check will request for a USB key to be inserted that contains the latest virus removal tool The selected tool will be copied to memory and can be updated at anytime using the update button CellDEK Setup Extraction Information Virus Check E d Figure 8 CellDEK System Setup Screen Virus Check The CellDEK team recommend that the CellDEK system is checked regularly for virus infection Microsoft offer a free malware removal tool which is regularly updated with the latest virus definitions Microsoft malware removal tool updates are available from the following website and new updates are released each month www microsoft com security malwareremove default
147. copy of the library already present on the user s computer system rather than copying library functions into the executable and 2 will operate properly with a modified version of the library if the user installs one as long as the modified version is interface compatible with the version that the work was made with c Accompany the work with a written offer valid for at least three years to give the same user the materials specified in Subsection 6a above for a charge no more than the cost of performing this distribution d If distribution of the work is made by offering access to copy from a designated place offer equivalent access to copy the above specified materials from the same place e Verify that the user has already received a copy of these materials or that you have already sent this user a copy For an executable the required form of the work that uses the Library must include any data and utility programs needed for reproducing the executable from it However as a special exception the materials to be distributed need not include anything that is normally distributed in either source or binary form with the major components compiler kernel and so on of the operating system on which the executable runs unless that component itself accompanies the executable It may happen that this requirement contradicts the license restrictions of other proprietary libraries that do not normally accompany the operating
148. ct to their handsets CellDEK User Manual 131 GLOSSARY AND TROUBLESHOOTING GUIDE The storage capacity depends the handset and SIM date and time of received messages is generated by the network all other date and time stamps are generated from the handset time The maximum character length is 160 per SMS Some handsets allow longer messages to be compiled and therefore are split into relevant parts when sent these messages are known as concatenated Deleted SMS Short Message Service These are text messages that have been deleted from the SIM card by the cellphone user However most mobile phones do not remove the message but mark the message to be overwritten by incoming messages from the network MMS Multimedia Messaging Service A service which allows Multimedia messages to be sent from one mobile to another via one or more call centres or network providers A Multimedia message is stored on the handset and can contain a combination of text video clips images and sound clips ICCID Integrated Circuit Card Identifier The serial number of the SIM card stored electronically within the SIM A similar number or shortened version is often found printed on the SIM card IMEI International Mobile Equipment Identifier This is a unique number given to each handset This is usually printed somewhere on the handset typically in the battery compartment and stored electronically in the phone handset memory It
149. currently not supported Extraction of user files is currently not supported CellDEK is able to collect the following information from Palm devices Contact Details Call Logs if available Calendars Tasks Notes and Palm Database PDB files PDB files are where Palm OS keeps data stored in RAM The data is kept in database format These files can contain user data Windows based PDA s need to have Active Sync enabled before they can be set to Infrared mode Please refer to the Connecting via Infrared section later in this chapter Blackberry devices can only connect via Cable Please refer to the Cable Connection section later in this chapter NOTE Blackberry devices that are password protected will need to be unlocked before data can be extracted Please refer to the Unlocking a Blackberry Device section later in this chapter Most PDA s will need to connect CellDEK via Bluetooth instead of the other way around Please refer to the Connecting via Bluetooth section later in this chapter Additional Cable Support for PDA s A set of 5 new PDA cable tips and a USB cable are available from http www gomadic com celldek html These tips will enable the User to connect to a number of PDAs that are not supported by the current CellDEK cables However it must be noted that although many of these PDAs are already supported by CellDEK via Infrared an extraction using a cable will provide a fast
150. d cl ol E 5 gt 5 js EE qe T N N ofal gt oro ofal ofal suo __ D P 24 T 527 Arr 933 710 725 810 830 78 947 168 CellDEK User Manual Handsets Expected Support SUPPORTED HANDSETS The following handsets have not been verified on CellDEK however their appearance or technology indicates that data extraction will be possible as shown the icons on CellDEK These handsets assigned an amber tick It is recommended that all data is treated as a minimum extraction as there may be additional data sets available that require further examination Data can be extracted from these handsets as normal by selecting the device from the Manufacturers list and extracting over Bluetooth Infrared or Cable as required All Windows Mobile devices can be extracted using the PDA option and selecting Windows All Windows Mobile devices are supported by Infrared and or Cable HANDSETS EXPECTED SUPPORT AIRO ACER ACER ACER ACER ACER ACER ACER ACER ACER ACER ACER ACER ACER ACER ACER ACER ACER ACER A25 beTo
151. d or undergoes or suffers any analogous acts or proceedings under any foreign law 10 1 4 if the other Party shall commit any act of bankruptcy shall have a receiving order made against it shall make or negotiate for any composition or arrangement with or assignment for the benefit of its creditors or if the other party being a body corporate shall present a petition or have a petition presented by a creditor for its winding up or shall enter into any liquidation other than for the purpose of reconstruction or amalgamation shall call any meeting of its creditors shall have a receiver of all or any of its undertakings or assets appointed shall be deemed by virtue of section 123 of the Insolvency Act 1986 to be unable to pay its debts or shall cease to carry on business or 10 1 5 forthwith by either Party upon giving written notice to the other if the other shall cease to carry on its business or substantially the whole of its business 10 2 Any termination of this Agreement however occasioned shall not operate so as to affect any accrued rights or liabilities of either Party 10 3 Within fourteen 14 days of the termination of this Agreement howsoever and by whomsoever occasioned You shall return or destroy as the Licensor shall instruct all copies of the Licensed Software Materials in its possession and a duly authorised officer of You shall CellDEK amp User Manual 189 SOFTWARE LICENSE certify in wr
152. d search word into the search field and tap the Find button 3 Alternately you can choose words from a pre loaded list to search This method allows for more than one word to be searched simultaneously 4 the words in the search list to select them then tap the Find button CellDEK User Manual 96 CellDEK User Manual ANALYZING CAPTURED DATA 5 Whichever method is used CellDEK searches for the word s and displays the number of hits Figure 72 Number of Hits 6 The report reappears with all word hits highlighted in yellow Enter search string and or Load BSelect ali select key word from the to find in report 0207 als m hits j Emai anAdd 1171 Website E Page Bates Call Registers SIM Card Dialled Calls Nornber of entries 0 Handset Dialled Calls Number of entres 2 Name _ Time Date f annus Figure 73 Report with Found Words Highlighted Loading a New Search List The list of search words can be changed by importing a text file made on another computer 1 On another PC open Notepad or a similar text editor 2 Type simple list of words as shown in the next figure below Words are not case sensitive so type in all lower case 97 ANALYZING CAPTURED DATA gt CellDIK Report Search k Ect john smit ym us enalanc Figure
153. d will automatically open The keyboard allows the use of upper lower case letters numerals and other characters however not all characters have been validated The CellDEK will display one of two types of keyboards NOTE The keyboard is also accessible from any screen that displays the button to the left CellDEK User Manual 67 CAPTURING DATA CellDEK User Manual Other Notes Figure 56b Alphanumeric Keyboard NOTE Alternatively a USB Keyboard can be attached to the CellDEK through the USB port 4 Enter the information and tap the Enter key when finished 5 Hepeat steps 2 4 for each line that needs to be filled out 6 Tap the OK button once all of the information is filled out The fields entered will be built into the final report which is generated on completion of the extraction Certain fields will show users a list of previous entries These entries can be dropped into the field without retyping them The Case Details form will remember the last 20 entries for the following fields Case Reference Number CellDEK Operator Investigating Officer Exhibit ID Service Provider The Case Details Form can be opened and edited for previous extractions 68 CAPTURING DATA Data Extraction Searching for Drivers Sometimes CellDEK may need to load new drivers for a handset that has never been attached before A progress bar will appear briefly that indicates drivers are
154. e If distribution of executable or object code is made by offering access to copy from a designated place then offering equivalent access to copy the source code from the same place counts as distribution of the source code even though third parties are not compelled to copy the source along with the object code 4 You may not copy modify sublicense or distribute the Program except as expressly provided under this License Any attempt otherwise to copy modify sublicense or distribute the Program is void and will automatically terminate your rights under this License However parties who have received copies or rights from you under this License will not have their licenses terminated so long as such parties remain in full compliance 5 You are not required to accept this License since you have not signed it However nothing else grants you permission to modify or distribute the Program or its derivative works These actions are prohibited by law if you do not accept this License Therefore by modifying or distributing the Program or any work based on the Program you indicate your acceptance of this License to do so and all its terms and conditions for copying distributing or modifying the Program or works based on it 6 Each time you redistribute the Program or any work based on the Program the recipient automatically receives a license from the original licensor to copy distribute or modify the Program subject to the
155. e 75 SMS Message 11 31 40 54 69 77 78 83 90 122 123 126 127 131 132 136 Software License 235 243 245 Software Update 10 83 113 129 Sony Ericsson 72 77 79 80 131 Storage Compartment 14 Stylus 12 13 22 23 93 Switch Power 15 134 Symbian 77 Target Device 9 10 12 25 28 48 51 52 67 69 70 71 72 89 95 103 122 133 134 Technical Support Logicube III 95 114 124 260 TomTom 39 131 Touch screen 12 13 23 USB Storage Device 95 98 104 109 110 113 125 User Name 16 Virus Checker 19 Virus Protection virus removal 18 Warranty Parts and Labor II Windows 31 51 72 91 102 103 131 219 word search 96 Write Protect 10 14 77 Write Protected 13 14 SOFTWARE LICENSE 9 CellDEK Software License CellDEK Software License EU EU CUSTOMER LICENCE BETWEEN LOGICUBE INC the Licensor and the End User You RECITAL A The Licensor is engaged in creating and is the owner of the Software as hereinafter defined B The Licensor has agreed to grant You a non exclusive licence to use the Software as hereinafter defined upon the terms and conditions of this Agreement C The Licensor has provided You with a copy of the End User Software License as hereinafter defined which grants You a license to use the Microsoft and related software contained within the PC embedded in the CellDEK device
156. e Contracts Rights of Third Parties Act 1999 to enforce any term of this Agreement but this does not affect any right or remedy of a third party which exists or is available apart from that Act 18 PUBLICITY The Parties agree to keep confidential the terms of this Agreement and neither Party shall make any announcement in relation to this Agreement or otherwise publicise its existence or its contents or use or refer to the name trade mark or trade name of the other Party in any disclosure without the prior written consent of the other Party such consent not to be unreasonably withheld or delayed A Party shall be entitled to withhold such consent and shall be under no obligation to provide any explanation for such action 19 AMENDMENTS No amendment to this Agreement whether oral or written shall be binding on either Party unless in writing and signed on behalf of the Parties 20 GOVERNING LAW AND JURISDICTION 201 This Agreement shall be governed by and construed in accordance with English law 20 2 Itis irrevocably agreed that the English courts shall have non exclusive jurisdiction as regards any claim or matter arising out of or in connection with this Agreement 21 NO PARTNERSHIP AGENCY Nothing in this Agreement is intended to or shall operate to create a partnership or joint venture of any kind between the Parties or to authorise either Party to act as agent for the other 22 THIRD PARTY SOFTWARE 22 1 software uses l
157. e 7 4 in no event shall the Licensor be liable to You for loss of revenue loss of anticipated savings loss of profits loss of data damage to goodwill loss of reputation or for any type of indirect economic or consequential loss or damage whatsoever or howsoever caused 7 4 Neither party excludes or limits liability to the other for death or personal injury caused by its negligence or for fraud 7 5 Save as expressly stated in this Agreement all conditions warranties and representations unless fraudulent expressed or implied by statute common law or otherwise in relation to the Licensed Software Materials are hereby excluded to the fullest extent permissible by law 8 RISK IN THE LICENSED SOFTWARE MATERIALS Risk in the Licensed Software Materials will pass to You upon the date of delivery of the Licensed Software Materials to You subsequently the Licensed Software Materials are in whole or in part destroyed damaged or lost the Licensor will upon written request replace the same subject to You paying its then prevailing charges 9 CONFIDENTIALITY 9 1 Neither Party shall use copy adapt alter disclose or part with possession of any information or data of the other Party which is disclosed or otherwise comes into its possession directly or indirectly as a result of this Agreement and which is of a confidential nature Confidential Information without the prior written consent of the disclosing Party except as strictly necess
158. e CellDEK Report Builder insert the CellDEK V1 16 0 0 or newer Update Pen Drive to your PC or Laptop navigate to the folder CellDEK Report Builder Installer and run Setup exe When the installer starts tap Next ite CellIDEK Report Builder throug Ihe soe COE OK Roe fub pee WAANIHG The compute pregiamic potected be an md ess e cep atan oc mogen v ary potion ol meedesct p seves 4 pella wi ed prese doni Figure 77a CellDEK Report Builder Select the folder to install CellDEK Report Builder to and tap Next CellDEK amp User Manual 100 CellDEK User Manual ANALYZING CAPTURED DATA gt Fondi onde Ruble akawa Ide To in hu to 5 Sek Tevac C 755 lt Dik Cont Dal DES or Tor nere eo asses thet OF von Jut Figure 770 CellDEK Report Builder continued Tap Next on the following dialog to begin the installation CellDEK Report Ti iz ready bo matal Cal Guidar on pour conputes Heed Ip shart ther
159. e and agree that Fujitsu may automatically check the version of the software and or its components that you are utilizing and may provide upgrades or fixes to the software that will be automatically downloaded to your computer Third Party Beneficiary For all purposes of this License Agreement each Fujitsu third party licensor of any of the Fujitsu Software shall be expressly deemed an intended third party beneficiary of this License Agreement and shall have the right to enforce the terms and conditions of this License Agreement Entire Agreement Governing Law This License Agreement constitutes the entire agreement between you and Fujitsu and supersedes any other prior or contemporaneous agreements or communications regarding the Fujitsu Software If any provision of this agreement is held invalid the remainder of this agreement shall continue in effect The laws of California excluding California s choice of law rules shall govern this Agreement Each party agrees to submit to the personal and exclusive jurisdiction of the courts located in Santa Clara County California CellDEK amp User Manual 208 MADE MANUFACTURED IN USA CellDEK is a UK USA and European registered trademark of Logicube Inc 19755 Nordhoff Chatsworth CA 91311 USA Tel 818 700 8488 Fax 818 700 8466 www logicube com Technical Support Information For further assistance please contact Logicube Technical Support at 001 818 700 8488 Monday Frida
160. ected tap the Download button The Download Manager will show progress as the files are downloaded to CellDEK File Download Manager 249 files 1149595KB queued A Selection Estimated download time 0h 17m 475 Figure 59b Download Manager 6 At any time press the Change Selection button to stop downloading and re select the files to download 7 the files download the Activity Log will indicate downloaded files in green selected files not downloaded in gray and unselected files in white 241 files selected 1136780 KBytes Select files to download Estimated download time 0h 57m 36s Select all image files Select all jpg files 745414 bytes downloaded 755 d 08072008003 jpg 271400 bytes Select all brnp files 735450 bytes downloaded 08072008002 jpg 248607 bytes Figure 59c Activity Log During Download On completion of the download a summary of all files including listings for files not selected for download will be displayed The data received CellDEK User Manual 71 CAPTURING DATA CellDEK User Manual from the target device is written into an XML and a CSV file then stored in the case unique folder NOTE The csv data file only contains data for Device Info Call Logs Contacts and Messages Support for Non Latin Languages All handsets supported by CellDEK have had full validation of each feature carried out for the full range of Lati
161. ed software products and documentation were developed at private expense and are provided with RESTRICTED RIGHTS Use duplication or disclosure by the government is subject to restrictions as set forth in FAR 52 227 14 and DFARS 252 227 7013 et seq or its successor The use of this product by the government constitutes acknowledgment of Intel s proprietary rights in the product CellDEK User Manual 206 HARDWARE LICENSE Fujitsu P1610 License Please read this license agreement License Agreement and the other license agreements if any accompanying your Fujitsu computer system before using any of the software provided with and as part of the Fujitsu computer system By using the software you are agreeing to be bound by the terms of the applicable license agreement There may be software products included as part of this Fujitsu computer system which are governed by separate agreements contained within this Fujitsu computer system Any software contained as part of the Fujitsu computer system that 15 not governed by a separate applicable agreement is governed by this License Agreement Fujitsu software If you do not agree to these terms or the terms of any other agreements contained in the Fujitsu computer system promptly return the Fujitsu computer system and all enclosed material including software to the place where you purchased it for a full refund License The Fujitsu Software is licensed to you t
162. ellDEK will initialize and boot up the CellDEK application At the login prompt type CellDEK for the user name and leave the password blank This is the operator login NOTE The operator login restricts the use of the device operating system solely for use of the CellDEK application The operator does not have access to the operating system settings NOTE Accessing the embedded PC s Operating System for purposes other than running the CellDEK application will void the warranty 4 Asmall prompt will appear that asks where CellDEK is being used Choose USA for the United States and its territories otherwise choose UK for the rest of the world Please select which country 54 CC UK Do show me this again Figure 5 Country EULA Prompt CellDEK amp User Manual 16 CAPTURING DATA 5 The EULA End User License Agreement will appear Please read the following license agreement carefully END USER LICENCE AGREEMENT EULA FOR FORENSIC SCIENCE SERVICE LTD SOFTWARE PRODUCTS IMPORTANT NOTICE PLEASE READ CAREFULLY BEFORE INSTALLING THE SOFTWARE PRODUCT ITHIS EULA shall be binding upon installation of the Software Product and is by and between FORENSIC SCIENCE SERVICE LTD 255 and the End User clicking the ACCEPT button or installing downloading or otherwise using this computer which includes computer software the data supplied with it the
163. em performance is affected it may be necessary to adjust the virus software settings or remove entirely to enable CellDEK to operate without restriction Logicube is not liable for damages or lost files when using untested software Windows Malicious Software Removal Tool Screen Shots Microsett Windews Malicious Software Removal Tool Sep 7009 Windows Malicious Software Removal Too Sep Welcome to the Windows Solfwere Removal Toni Thee w few wet mom mmy Pets me YA 62 cca for and Net soec roe you Mosse Coase type of scan sve nf ormanan on Hes tool please see oie Quick Scare armen of the not Bai contin malicious softer fee Seed and omes rakcxaz softwere n ford you be to run ful scan Tul wan hee ertive Mote et cam cwn twee up to seem oun on 5 In addon 00 crees of a Det tok Ths tools not for an tp aus poat hep probect you computer kis an snti erus product more see Protect Yo g Figure 10 Windows Malicious Software Removal Tool CellDEK amp User Manual 21 CAPTURING DATA The tfa arrg raa paa o
164. en prior to the generation of the CellDEK report All data is individually hashed using the MD5 algorithm to ensure that the data can be verified as unchanged The Standard and Extended Data View Screens both contain the following navigational buttons Case Details This button opens the Case Details Input Form Data can be edited or added to the form Please refer back to Chapter 3 Capturing Data for more information about this form Up Arrow This button allows the user to scroll up through the Data List Down Arrow This button allows the user to scroll down through the Data List Print This button prints a copy of the list to a USB printer that is attached to the USB port Please see Chapter 5 Other Features for more information on printing Done This button closes the data View Screen and goes back to the Main Application Menu CellDEK User Manual 87 ANALYZING CAPTURED DATA Viewing Standard Data Contacts SIM Contacts Number of entres 7 Figure 61 Standard Data View Screen The Standard Data View Screen allows the user to view such information as contacts call log Text Messages and Calendar data The following buttons are unique to this screen Device Info This button displays general handset information like the Brand Name Model Number and IMEI number Contacts This button displays all Contact information including names phone numbers and other informa
165. eoe EU mu 34 ATTACHING A MEMORY FLASH C AB DE i stre 36 TAG CUNO u NR RE saves seat 37 ATTACHING A GPS ___________ _6_ __ ___ 38 GENERIC GPS EXTRACTION __________ 4 CellDEK User Manual V TABLE OF CONTENTS GPS DRACK T ste cata 42 OPENING GPSDATA GPX OUTPUT FILES IN GOOGLE 1 11 22 0022000 0000000000000000000050500 13 42 GEO E Reap 46 ATTACHING AN DEVICE d a p Ea dO 46 TIONS 48 TOU RR 48 CABEE CONNEC ee Maid UE 49 DHlockuig DENCE RO 49 INFRARED IR CONNECTION CELL PHONES AND 55 0 0 00220 0 6 6 6 50 BLUETOOTH CONNECTION CELIA PHONES L a unas au DS aa 51 Cone U O uu 52 CUSTOM EX TRACTION Son eese ceca 53 SIM CARDS AND FLASH MEMORY CARD 53 MAIN CONNECTIVITY ICONS 54
166. er Ensbung thes fitter means Width that only phones with dimensions will be displayed iimm 100mm ao 3 inch n Phones Figure 186 Enter Dimensions CellDEK User Manual 28 CAPTURING DATA NOTE There is a measuring ruler printed on the in inches and mm NOTE This screen will allow the user to enter the dimensions in mm 1 8 inch or 1 16 inch increments Tap the Up and Down Arrows to change each filter If the handset does not have one of the features such as a camera set the filter to Ignore When finished tap the Display Phones button CellDEK will display models matching those features Tap the model number or image to highlight it and then tap the Select button Refer to the Connection Options section later in this chapter Generic Extraction Module If the Other Button is chosen on the Cellphone Extraction Screen the Generic Extraction Module appears This is used to extract from handsets that have not been identified or verified with CellDEK This includes handsets where data could not be obtained from the known manufacturers as well as from unknown manufacturers The time taken for data extraction can take up to 30 minutes depending on the amount of data The Generic Extraction Module only supports Bluetooth and Infrared connections You have chosen other as the device manufacturer
167. er extraction Appendix C lists the 150 PDAs that are supported by these cable tips Each tip can be placed into the female receptacle thus allowing a large range of tips to be connected to the same USB cable 31 CAPTURING DATA a P PDA Cable Tips Tip USB Cable Female receptacle Figure 22 Additional Cable Support SIM Card Extraction NOTE CellDEK supports with software release 1 20 0 0 the ability to clone an existing SIM card This and other features using the Network Isolation Card NIC are described in detail in the Network Isolation NIC Cards section on p 56 SIM Card extraction supports both SIM and USIM cards 1 Begin by tapping the Read New Device button on the Main Application Screen The Device Type Selection screen will appear f Select Device Type SIM Card Create NIC Flash Memory Figure 23 Device Type Selection CellDEK User Manual 32 CAPTURING DATA CellDEK User Manual Tap the SIM Card button Remove the SIM Card from the target cell phone It is usually located underneath the battery Figure 24 Removing SIM card from cell phone Slide the SIM card into the adapter with the gold contacts facing out Place the adapter in the SIM card reader which is located on the right hand side of the control panel As the card is read the green LED light will behave one of two ways On older CellDEK units the LED will con
168. for best results Sony Ericsson P800 P900 Memory Stick Duo minimum size 16 77 P910i P990i Memory Stick PRO Duo minimum size 64MB M600i P1i Memory Stick Micro 2 minimum size 256MB Motorola Z8 Z10 Micro SD minimum size 128 MB Follow these steps to capture data 1 User inserts spare memory card into the memory card reader 24 25 26 27 28 29 30 31 32 generates and formats a UIQ and installs the Agent User then inserts the UIQ card into handset User locates the Agent installer on the UIQ card using the file browser application and then installs the agent onto the device User locates and runs the Agent application then waits for the data extraction to complete Extracted data is now stored on the UIQ card User removes the UIQ card from the handset and inserts it back into the memory card reader CellDEK automatically copies and decodes all data from the UIQ card CellDEK formats the UIQ card CellDEK instructs the user to uninstall the agent from the handset CellDEK presents the results to the user This data capture is possible with the following caveats Extraction of Call Logs is not supported Extraction of SMS messages stored in user created folders is not supported Extraction of MMS Email messages is not supported Memory cards within these phones need to be captured sep
169. ght in addition to any other legal remedies available to injunctive relief enjoining such acts without the posting of bond it being acknowledged by You that all other remedies are inadequate d This Agreement contains the entire agreement of the parties with respect to the subject matter hereof and supersedes and terminates any and all correspondence proposals RFPs Your purchase order terms or agreements or contracts written or oral entered into between the parties relating to the subject matter hereof and any representation promise or condition in connection herewith not in writing shall not be binding upon either party Neither the title of this Agreement nor the Section headings shall have any bearing whatsoever on any interpretation hereof None of the provisions of this Agreement shall be deemed to have CellDEK User Manual 197 SOFTWARE LICENSE been waived by any act of or acquiescence the of Licensor its agents employees but only by an instrument in writing signed by an authorized representative of Licensor No waiver by Licensor of any provisions of this Agreement shall constitute a waiver of any other provision or of the same provision on another occasion This Agreement may be amended only in writing signed by each of the parties hereto This Agreement is personal to You and You may not assign or sublicense its rights or obligations under this Agreement in any way to any third pa
170. gned ix the claim is unrelated to force majeure x the claim is unrelated to operator error or to any software firmware peripheral or communication device and xi where authorized Licensor updates are provided to You the Software incorporates all such updates within ninety 90 days of each update being provided or otherwise made available In the event it is determined that any warranty claim reported by You falls within any of the foregoing exceptions You shall pay for services at then current rates and charges d Nothing herein shall obligate Licensor or its authorized reseller to improve or otherwise support any Software licensed hereunder Without prejudice to the foregoing all support enhancements modifications and upgrades delivered to You if any shall be subject to the same protections restrictions limited warranty and limitations on copying and tampering as set forth elsewhere herein 5 Component Items In the event that Licensor or its authorized reseller shall deliver to You any individual components apart from the Software specifically licensed hereunder You shall not use or attempt to use any such component outside or independent of the parameter of this License and each such component shall be subject to the same rules and restrictions binding on You to which the Software is subject whether under this Agreement or otherwise 6 Breach In the event that either party hereto should breach any of the material terms and
171. gsten E2 Tungsten 15 700 800 20 2200 600 5 Traveller GPS 525 PN 3550 PN 3560 PN P201 PN P550 A PN P550 A Workabout PRO Workabout PRO G2 QDA Icon QDA Lite SUPPORTED HANDSETS O2 O2 O2 O2 O2 QTEK QUEST ROVER PC ROVER PC ROVER PC ROVER PC ROVER PC ROVER PC ROVER PC ROVER PC ROVER PC ROVER PC ROVER PC ROVER PC ROVER PC ROVER PC ROVER PC ROVER PC SAMSUNG SAMSUNG SAMSUNG SAMSUNG SAMSUNG SAMSUNG SAMSUNG SAMSUNG SAMSUNG SAMSUNG SAMSUNG SAMSUNG SAMSUNG XDA Atom XDA Atom Exec XDA Atom Life XDA Atom Pure XDA Comet 5310 6700 6 5 G5 G6 M5 N6 N7 P6 P745 Q5 Q6 R5 55 56 57 W5 B7320 B7330 OmniaPRO B7610 OmniaPRO C6620 C3010 C3110 E1310 ib20 Symbia n i550 Symbia n i560 Symbia n 1640 7110 5 17500 SUPPORTED HANDSETS d OPTICON H 16B QOOLLABS Twins 178 SAMSUNG 18910 1010 SAMSUNG 1907 19 2020 SAMSUNG M7610 OPTICON PHL 5400 QTEK 2060 SAMSUNG Propel Pro OPTICON PHL 7111 QTEK 7070 SAMSUNG 3110 OPTICON PHL 7114 QTEK 8010 SAMSUNG 53310 PHL 7142 QTEK 8020 SAMSUNG S5230W ORANGE SPV C100 QTEK 8060 SAMSUNG 5233 S5600v ORANGE SPV C200 QTEK 8080 SAMSUNG Blade ORANGE SPV C220 QTEK 8100 SAMSUNG 55603 ORANGE SPV C700 QTEK 8200 SAMSUNG 57350 ORANGE SPV Classic QTEK 8300 SAMSUNG S
172. he Software made available to all Customers and which 18 provided to You pursuant to the Contract Software means the software programs in Executable Code only and which are listed in the Schedule Software Documentation means the instruction manuals user guides and other information and any modifications or additions thereto to be made available by the Licensor at its discretion to You in either printed or machine readable form Software Specifications means the technical specifications from time to time published by the Licensor in respect of the Software and Use means the copying or transmission of the Software or where in machine readable form the Software Documentation for use in accordance with the instructions contained in the Software or as the case may be the software Documeniation In this Agreement unless the context requires otherwise 1 2 1 the singular includes the plural and vice versa and any gender includes any other gender 1 2 2 references to Clauses and Schedules are to Clauses of and schedules to this Agreement 1 2 3 any reference to an enactment order regulation or other similar instrument includes a reference to that enactment order regulation or instrument as from time to time amended extended or re enacted 1 2 4 references to persons include bodies corporate unincorporated associations and partnerships and any reference to the Parties include their respective successo
173. he corner of the error Could not find comector rack Weert charger and close bd for a of 20 second Figure 97 Help Icon Location Tap the Help Icon to bring up a description of the error message and possible solutions CellDEK User Manual 134 GLOSSARY AND TROUBLESHOOTING GUIDE 7 Cannot find connector rack message 7 1 USB hub fault on pc rds 1 20 ath _ atte d be Chu Uv 964 k DT 1705 Ta ow gt wW oni o amp chew o US Bee reme tee otn Ste ew 7 2 Flat Battery Connectors will not light on power up x cm ie Mer 7 free fee te Pe of ee sw fee Or 4 1 e wh beter m Met y 7 3 Charger sleep mode not charging w nde By wit 5 et det fret th xg ha prey 0 web tw tome the tepe Cher eq Zaw Gee wrga GEC tes Sor Figure 98 Error Message Help Window CellDEK User Manual 135 7 Supported Handsets Handsets tested on CellDEK and the results verified These handsets are assigned a green tick next to their image on CellDEK The following handsets have been tested on CellDEK using the standard valid
174. he purchaser by Fujitsu The Fujitsu Software and copyright to the printed information contained in this package is and shall remain the intellectual property of Fujitsu and or its suppliers This license License grants to you a non exclusive right to use the Fujitsu Software on a singe computer system You may make one copy of the Fujitsu Software for backup or archival purposes Restrictions on Use The Fujitsu Software contains copyrighted material and in its human readable form it contains trade secrets and proprietary information owned by or licensed to Fujitsu You may not de compile disassemble or otherwise reduce it to human readable form You may not modify rent lease loan or distribute copies of the Fujitsu Software You may not create derivative software based upon any trade secret or property contained on the Fujitsu computer system and that Fujitsu and its suppliers continue to own title to the Fujitsu Software and copyright to the printed information Termination This License shall remain in full force and effect unless and until terminated This License will terminate immediately automatically and without notice if you fail to comply with any provision of this License Agreement Upon termination you must stop using the Fujitsu Software erase or destroy all copies of the Fujitsu Software and destroy all printed information provided with the Fujitsu Software Limited Warranty See the Limited Warranty information provided
175. heft malicious damage strike lock out or industrial action of any kind and h any cause or circumstance whatsoever beyond the reasonable control of a Party Goods means CellDEK mobile phone and PDA data extraction kit Intellectual Property Rights means all inventions whether patentable or not patents utility models designs both registered and unregistered and including rights in semiconductor topographies copyright database rights trade and service marks both registered and unregistered together with all applications for right to the grant of and extensions of the same and all other intellectual and industrial property including but not limited to all similar or analogous rights throughout the world in each case for the full term of the relevant right Licensed Software Materials means the Software the Software Documentation the Periodic New Releases any Releases and any fixes created and which are provided to You pursuant to the Contract Periodic New Releases means a release of the Software that is made available to all Customers and that corrects errors or changes or improves the Software s utility efficiency or capability and associated cable upgrade specifications and which is provided to You pursuant to the Contract Party means each of the persons identified as parties to this Agreement and jointly the Parties Release means the most recent standard version of t
176. hese changes to the data on the handset A quarterly hardware and software upgrade package is available by subscription This will increase the capabilities of CellDEK and ensure CellDEK develops in line with new handsets and technologies Able to connect to a wide variety of cellular phone oatellite Navigation SmartPhones PDA Personal Digital Assistant and Flash Memory devices Direct connection via cable IR Infrared or Bluetooth Built in cellular phone identification module Water resistant rugged carrying case Embedded PC with 30GB of storage MD5 Hash to ensure that captured data is not tampered with Using this guide This user guide is made up of 6 sections Introduction Getting Started Fast Start Capturing Data Analyzing Captured Data Other Features FAQ s and Troubleshooting Guide System description The CellDEK system is packed in a rugged water resistant carrying case Inside you will find the following components Embedded PC built into the case INTRODUCTION stylus for use with embedded PC s touch screen A set of intelligent data cables which are able to connect to a variety of cellular phones These cables are stored in sequential holders built into the case lid 1 Nokia CA 42 Cable Nokia Flash Adapters A SIM card adapter An AC power adapter that charges the internal battery of CellDEK A Network Isolation Card NIC which is used to isolate a target de
177. ibraries and other components from the LibUSB Win32 project The library is distributed under the terms of the GNU Lesser General Public License LGPL The other components are distributed under the terms of the GNU General Public License GPL These licenses are available to read at the LibUSB Win32 project home page www libusb win32 sourceforge net 22 2 1 The End User License is provided as a paper license along with the CellDEK device By using the Software You agree to be bound by the terms of the End User Liclense Agreement Additional copies of this license are also available from Logicube CellDEK User Manual 191 SOFTWARE LICENSE CellDEK Software License US THIS AGREEMENT shall be binding on installation of the Software and is by and between LOGICUBE INC Licensor and the End User You 1 Grant of License So long as You shall be in compliance with the terms hereof You shall have a limited perpetual non exclusive and non transferable license License to use the Software solely in the course of lawfully operating the device with which the Software is integrated and for no other purpose You are also granted a license to use the Microsoft and related software contained within the PC embedded in the CellDEK device and by using such software You agree to be bound by the terms of the End User License agreement a copy of which is provided to You with the device Additional copies
178. ice to the foregoing the Licensor does not warrant that the Use of the Software will meet Your requirements or that the operation of the Software including where in machine readable form the Software Documentation will be uninterrupted or error free 6 5 Nothing in this Agreement shall obligate the Licensor to improve or otherwise support the Licensed Software Materials 6 6 Subject to the foregoing all conditions warranties terms representations unless fraudulent and undertakings express or implied statutory or otherwise in respect of the Licensed Software Materials are hereby excluded to the fullest extent permissible by law 7 LIMITATION OF LIABILITY 7 1 Where any sustainable claim is made by You in respect of any breach of the warranties given by the Licensor pursuant to clause 6 above the Licensor shall be entitled at 15 option either to replace or repair the Software free of charge This shall be Your sole and exclusive remedy and the Licensor shall have no further liability to You for breach of such warranties 7 2 Subject to Clause 7 1 above and without prejudice to Clause 7 4 and except as otherwise provided in this Agreement the total liability of the Licensor in contract tort including negligence or breach of statutory duty or otherwise arising by reason of or in connection with this Agreement shall be limited in aggregate to the total price paid and payable by You for the Goods under the Contract 7 3 Without prejudice to Claus
179. inMobile devices to obtain Telecommunication Data GPS Track Logs CellDEK can extract GPS track logs from devices manufactured by Garmin e Navman HP Track logs record the GPS coordinates of the device every 1 2 seconds giving an accurate description of where the device has been and when The CellDEK report shows only the start point of each stored track log as each track can potentially store thousands of points Track log data is best viewed by importing the GPSData gpx into Google Earth NOTE Some devices start logging as soon as they are turned on however other devices require the user to initiate logging to record track log data Opening GPSData gpx Output Files in Google Earth CellDEK generates an additional data file when extracting GPS Data This file contains GPS data and can be imported into Google Earth to display the data The data file GPSData gpx is created within the extraction folder automatically when a GPS extraction is performed The data file stores all waypoints routes and track log data in a format which can be used by Google Earth to display all of the GPS data in the report NOTE Google Earth 5 0 will need to be installed on a PC to view the GPSData gpx file This can be downloaded from http earth google com Open Google Earth and tap the File menu CellDEK amp User Manual 42 CAPTURING DATA Google Figure 33a Then select Open E Figure 33b
180. ind out which version of iTunes is supported Note the iPhone extraction button will only be displayed in the CellDEK software when a version of iTunes is available on the system IOS 5 x Data from iPhones with iOS 5 X has been fully validated by Logicube Please check the software version s release notes for the version of iTunes required Error message Cannot find plist When an iPhone is connected to CellDEK or CellDEK TEK that has iTunes installed a unique identifier file is created and stored in the local windows system folder CellDEK User Manual 117 OTHER FEATURES CellDEK User Manual This file is referred to as a plist file and is used by CellDEK software to communicate with the device directly When Apple launched support for the iPhone 3GS and iPhone OS 3 0 in iTunes version 8 2 the storage location for this plist identifier file was changed newer iTunes version was used in conjunction with CellDEK 1 14 the device would fail to connect and result in an error message on connection cannot find plist The CellDEK software version 1 15 was released shortly afterwards and the new plist storage location was included to allow the support for any device running the new iPhone software version 3 0 including iPhone 3GS Devices that had iPhone OS version 3 x can only be extracted on CellDEK when the iTunes version 8 2 9 x is installed Error message Couldn t find backup files
181. introduced in version 3 0 of the iPhone software CellDEK now extracts MMS messages from Apple iPhone handsets that have version 3 0 and above MMS messages will be automatically extracted and will be added to the output report ina separate chapter entitled MMS Messages CellDEK now supports extraction of Skype data from Apple iPhones Extracted data includes e Voice Video calls In the extraction report Skype voice video calls are shown under the Call Register section Chat messages CellDEK amp User Manual 75 APTURING DATA 100012 In the extraction report Skype chat messages shown in the Messages section e User profiles In the extraction report Skype user profiles are shown in the Contacts section iPhone Dictionary Data software version 1 21 x x and newer reports a list of keywords extracted from the following iPhone file dynamic text dat These keywords are shown in the report under the dictionary heading iPhone files of Interest During the iPhone extraction process a number of other files can be extracted Some of these files may contain useful information A selection of these files is shown below private var mobile Library Cookies Cookies plist Contains website cookies saved by the Safari browser private var mobile Library Safari Bookmarks db Contains website bookmarks saved by the Safari browser private var mobile Library Safari History pl
182. inux operating system Although the Lesser General Public License is Less protective of theusers freedom it does ensure that the user of a program that is linked with the Library has the freedom and the wherewithal to run that program using a modified version of the Library The precise terms and conditions for copying distribution and modification follow Pay close attention to the difference between a work based on the library and a work that uses the library Theformer contains code derived from the library whereas the latter must be combined with the library in order to run GNU LESSER GENERAL PUBLIC LICENSE TERMS AND CONDITIONS FOR COPYING DISTRIBUTION AND MODIFICATION 0 This License Agreement applies to any software library or other program which contains a notice placed by the copyright holder or other authorized party saying it may be distributed under the terms of this Lesser General Public License also called this License Each licensee is addressed as you A library means a collection of software functions and or data prepared so as to be conveniently linked with application programs which use some of those functions and data to form executables The Library below refers to any such software library or work which has been distributed under these terms A work based on the Library means either the Library or any derivative work under copyright law that is to say a work containing the Library or a port
183. ion of it either verbatim or with modifications and or translated straightforwardly into another language Hereinafter translation is included without limitation in the term modification Source code for a work means the preferred form of the work for making modifications to it For a library complete source code means all the source code for all modules it contains plus any associated interface definition files plus the scripts used to control compilation and installation of the library Activities other than copying distribution and modification are not covered by this License they are outside its scope The act of running a program using the Library is not restricted and output from such a program is covered only if its contents constitute a work based on the Library independent of the use of the Library in a tool for writing it Whether that is true depends on what the Library does and what the program that uses the Library does 1 You may copy and distribute verbatim copies of the Library s complete source code as you receive it in any medium provided that you conspicuously and appropriately publish on each copy an appropriate copyright notice and disclaimer of warranty keep intact all the notices that refer to this License and to the absence of any warranty and distribute a copy of this License along with the Library You may charge a fee for the physical act of transferring a copy and you may at your option offer war
184. ion of the Software and that the Software is used in accordance with any and all CellDEK User Manual 195 SOFTWARE LICENSE applicable manuals documentation and instructions You shall indemnify and hold Licensor harmless from and against all claims damages losses judgments fees expenses and costs including attorneys fees arising out of or resulting from Your acts negligence or failure to comply with this or any other provision of this Agreement 9 Delay in Performance Neither party shall be liable for failure or delay in the performance of any of its obligations under this Agreement except obligations for the payment of money if such delay or failure is caused by circumstances of force majeure that are beyond the control of the party affected Notwithstanding the foregoing in the event that any delay or failure identified in this Section 9 continues for sixty 60 consecutive days the party adversely affected by such delay may cancel this Agreement and the License granted hereunder upon written notice to the other party 10 Term This Agreement unless terminated pursuant to other applicable provisions hereof shall commence on the date the Software 15 purchased and shall be perpetual unless terminated in accordance with this Agreement 11 Miscellaneous a This Agreement shall be governed by and interpreted in accordance with the substantive and not conflicts laws of California Other than for co
185. ircled 20 Insert the lower part of the adapter first then snap the upper part of the adapter into place Figure 51 Adapter in Handset 21 Insert the 5 battery into the adapter by aligning the battery pins Push the battery in and down until it snaps into place CellDEK User Manual 65 CAPTURING DATA Figure 52 Battery Pins on Adapter and Battery circled 22 When properly assembled the handset should look like the picture below Figure 53 Installed Flash Adapter 23 Power the handset on and perform the data extraction with Cable 25 as outlined in the Cable Connection section earlier in this chapter Figure 54 Connected to Cable 25 CellDEK User Manual 66 CAPTURING DATA 3 Capturing Data Case Details Once the target device has been successfully connected the Case Details input form appears Case Reference Number Operator wowitgstig Officer Bag Seal Number Sag Reseal Number Printed on SIM Service Provider IME Number Printed Handset Time on Device Date Device Time of Extraction 10 55 28 Date of Extraction 09 0154 Motes Figure 55 Case Details Input Form 1 report will be filled out later tap the Later button to continue on to data extraction 2 report is to be filled out now tap the first line that needs to be filled out 3 The CellDEK keyboar
186. ist Contains website history saved by the Safari browser e private var mobile Library Mail Accounts plist Contains email server account details this does not include actual emails private var mobile Library maps History plist Contains a Google Maps history file which includes addresses route directions and other useful data private var mobile Library Keyboard dynamic text dat A keyboard cache containing user entered text private var mobile library Preferences com apple Maps plist Contains the last longitude latitude coordinates viewed the Google maps application private var mobile library Preferences com apple mobilesafari plist Contains a list of recent searches performed using the Safari browser private var root library caches locationd consolidated db Contains a list of web connections and location services private var mobile library Calendar Calendar sqlitedb private var mobile library Preferences com apple mobilecal plist Contains Google calendar details private var mobile library WebKit Databases Databases db private var mobile Library WebKit Databases http_m yahoo com_0O db private var mobile Library WebKit Databases https_mail google com_0 db CellDEK User Manual 76 Contains email database details private var mobile Applications com yahoo messenger Library Preferences co m yahoo messenger plist
187. iting to the Licensor that You has complied with such obligation 11 FORCE MAJEURE 11 1 Neither Party shall be liable to the other Party for any delay or non performance of its obligations under this Agreement to the extent that its performance is interrupted or prevented by Force Majeure 11 2 Such delay or failure shall not constitute a breach of this Agreement and the time for performance shall be extended by a period equivalent to that during which performance Is so prevented provided that if such delay or failure persists for sixty 60 days or more the Party not affected may at its option and if it is reasonable for it to do so terminate this Agreement by giving fourteen 14 days written notice to the other Party 12 WAIVER Any failure or delay on the part of either Party to exercise any power or right under this Agreement shall not operate as a waiver of it nor shall any single or partial exercise of any such right or power preclude any other or further exercise of the right or power Any of the rights and remedies of either Party under this Agreement may at any time be enforced separately or concurrently with any other rights and remedies whether under this Agreement or arising by operation of law with the effect that the rights and remedies are cumulative and not exclusive of each other 13 NOTICES 13 1 notices required to be given under this Agreement shall be in writing and delivered personally or by first class post or transmit
188. ity to capture the memory card separately If present remove the memory card from the GPS device This will be captured later WARNING ALWAYS remove the Memory Card from a TomTom device prior to capture NOTE TomTom can store the same information in the device and on the Memory Card For that reason the device and card may contain different sets of the same type of data i e application info favorite destinations etc Connect Cable 9 to the GPS Device and follow the prompts to extract data The following information can be extracted from the supported TomTom Devices Device information Manufacturer Model Serial Number Owner information Owner s Name Owner s Street Owner s Town Owner s City GPS location information Home address with GPS coordinate Favorite addresses with GPS coordinates Destination addresses with GPS coordinates Recent addresses with GPS coordinate Miscellaneous addresses with GPS coordinates Telecommunication information Telephone contact information stored on TomTom Telephone numbers called via the TomTom 39 CellDEK User Manual Telephone numbers of calls received the TomTom SMS messages received via the TomTom SMS messages sent via the TomTom Files MP3 files JPEG files on supported devices The following information can be extracted from Garmin devices manufacturer model seria
189. ity to remedy a breach of warranty where such breach arises 6 3 1 in respect of Software that is not properly licensed pursuant to Clause 2 of this Agreement 6 3 2 circumstances where You 15 not in conformity with the minimum technical requirements and prerequisites set out in the Software Specifications or 6 3 3 as a result of a the improper use operation or neglect of either the Software or the Goods upon which the Software is installed or used b the modification of the Software or its merger in whole or in part with any other software c the failure by You to implement recommendations in respect of or solutions to faults previously advised by the Licensor d any repair adjustment alteration or modification of the Software by any person other than the Licensor without the Licensor s prior consent e failure by You adequately to back up the Software f any breach by You of any of its obligations under any maintenance agreement in respect of the Goods upon which the Software is installed or used g any failure accident neglect or misuse of equipment software or media not supplied by the Licensor CellDEK User Manual 187 SOFTWARE LICENSE h Your failure to install and Use in substitution for the previous release any New Release of the Software within ninety 90 days of receipt of the same or the use of the Software for a purpose for which they were not designed 6 4 Without prejud
190. ive copies directly or indirectly through you then the only way you could satisfy both it and this License would be to refrain entirely from distribution of the Library If any portion of this section is held invalid or unenforceable under any particular circumstance the balance of the section is intended to apply and the section as a whole is intended to apply in other circumstances It is not the purpose of this section to induce you to infringe any patents or other property right claims or to contest validity of any such claims this section has the sole purpose of protecting the integrity of the free software distribution system which is implemented by public license practices Many people have made generous contributions to the wide range of software distributed through that system in reliance on consistent application of that system it is up to the author donor to decide if he or she is willing to distribute software through any other system and a licensee cannot impose that choice This section is intended to make thoroughly clear what is believed to be a consequence of the rest of this License 12 If the distribution and or use of the Library is restricted in certain countries either by patents or by copyrighted interfaces the original copyright holder who places the Library under this License may add an explicit geographical distribution limitation excluding those countries so that distribution is permitted only in or among co
191. l number favorite addresses with GPS coordinates 14 After the GPS Device is extracted press Memory Card on the screen that appears Follow the directions for Connecting a Memory Flash Card earlier in this chapter 15 The following information can be extracted from HP satellite navigation devices GPS location information Favorite addresses with GPS coordinates Route Waypoint addresses with GPS coordinates Search History addresses with GPS coordinates Telecommunication information Contact information Call Registers Files User files can also be retrieved from the device by performing a separate Flash Media extraction Generic GPS Extraction CellDEK can now search certain devices for GPS data generated by any of the following GPS Software CoPilot 6 Garmin Navman Smart ST NavNGo NDrive TomTom The data files generated by this software can be stored on devices without any GPS software installed This data can still be extracted using CellDEK 40 CellDEK User Manual CAPTURING DATA Devices which GPS Data can be extracted from are Sat Nav GPS Devices Windows Mobile Devices Flash Media Cards Mass Storage Devices NOTE GPS Devices be used to store data generated from other devices Therefore care must be taken when linking data to a specific device The following GPS Data can be extracted 5 Favourite Locations These are a list of
192. le AT Mobile AT Mobile AT Mobile AT Mobile AUDIOVOX AUDIOVOX AUDIOVOX AUDIOVOX AUDIOVOX SIEMENS BLACKBERR Y BLACKBERR Y BLACKBERR Y BLACKBERR Y BLACKBERR Y BLACKBERR Y BLACKBERR Y BLACKBERR Y BLACKBERR Y BLACKBERR Y BLACKBERR BLACKBERR BLACKBERR Y CINGULAR CINGULAR CINGULAR CINGULAR CINGULAR CINGULAR iPAQ CINGULAR iPAQ COMPAQ iPAQ COMPAQ iPAQ FUJITSU SIEMENS FUJITSU 170 AT Bear AT Cobra AT Eagle AT Falcon AT Pelican 5050 5600 6601 XV6600 XV6700 P51 8110 8130 Pearl 8220 8230 Pearl Pearl 3G 9100 9105 Pearl 3G Curve 3G 9300 9520 9550 9630 9650 Bold 9670 Style Torch 9800 2125 3125 8100 8125 SX66 h6320 16325 3800 3830 110 500 DELL DOCOMO DOPOD DOPOD DOPOD DOPOD DOPOD DOPOD DOPOD DOPOD DOPOD DOPOD DOPOD DOPOD DOPOD DOPOD DOPOD DOPOD DOPOD DOPOD DOPOD DOPOD DOPOD DOPOD DOPOD DOPOD DOPOD DOPOD DOPOD DOPOD DOPOD DOPOD DOPOD HP iPAQ HP iPAQ 51 htc Z 310 515 535 565 566 575 585 586 595 686 696 699 700 710 818 830 838 900 577W 586W 696i 818 Pro 828 838 Pro C500 C720W C730 C800 C858 CHT 9000 CHT 9100 h3800 h3830 DOPOD DOPOD DOPOD DOPOD DOPOD DOPOD E PLUS E PLUS ETEN ETEN ETEN ETEN ETEN ETEN ETEN ETEN ETEN ETEN ETEN ETEN ETEN ETEN ETEN ETEN ETEN ETEN ETEN ETEN ETEN CellDEK User Manual D
193. llection and equitable actions against You to the extent legal actions are commenced by or name Licensor each party hereto i submits to the exclusive general jurisdiction of the State and Federal Courts in the State of Ohio and any appellate courts from any decision thereof in any legal action or proceeding relating to this Agreement ii consents that any such action or proceeding may be brought in such courts and iii waives any objection that he she or it may have to the venue of any such action or proceeding in any such court or that such action or proceeding was brought in an inconvenient court and agrees not to plead or claim the same Any action arising hereunder or related in any way hereto against Licensor shall be brought within one 1 year after the occurrence giving rise to the claim or be barred forever If any provision or portion of this Agreement is held by a court of competent jurisdiction to be invalid void or unenforceable the remaining provisions or portions of this Agreement shall remain in full force and effect and shall in no way be affected impaired or invalidated IT IS EXPRESSLY UNDERSTOOD AND AGREED THAT EACH AND EVERY PROVISION OF THIS CellDEK amp User Manual 196 Sor TWARE LICENSE AGREEMENT THAT PROVIDES FOR A LIMITATION OF LIABILITY DISCLAIMER OF WARRANTIES OR EXCLUSION OF DAMAGES IS INTENDED BY THE PARTIES TO BE SEVERABLE AND INDEPENDENT OF ANY OTHER PROVISION AND TO BE ENFORC
194. m the Connectivity Option Screen CellDEK will access the Cable Adapters that are stored in the case lid Tap the Run Extraction button CellDEK will illuminate the correct data cable with a green light A prompt will appear on the screen asking the user to attach the cable to the Phone Cable Jack NOTE DO NOT attach the cell phone until prompted by CellDEK Remove the cable from the rack and insert into the Phone Cable Jack The cable s LED will turn red Tap OK on the screen The cable s LED will turn green and a new prompt will appear Attach the target cell phone at this time Tap the OK button once the phone is connected _ On completion of data extraction the data cable must be replaced into any of the forty storage sockets It does not matter which socket the cable is attached to Unlocking a Blackberry Device The CellDEK allows the user to input the PIN lock for a Blackberry device directly through the CellDEK interface rather than the device itself The CellDEK will automatically detect if a PIN lock is enabled and bring up the Enter Password Prompt 49 CAPTURING Click connect to begin extraction password farar Hide Password OFF Figure 38 Enter Password Prompt TIP Tap Hide Password to turn it on or off If Hide Password is on the password will appear Click connect to begin extraction
195. main menu The device type selection screen will appear Tap Create NIC The NIC Operation screen will appear Manually enter Oper NX date 56 CAPTURING DATA e Create from Existing SIM CellDEK will clone the original SIM card ID It will copy the ICCID and IMSI from original SIM card onto a NIC SIM ID Card The ICCID and IMSI on NIC must be identical to original SIM NIC SIM ID Card ICCID and IMSI values can be checked by performing a SIM Card Extraction of NIC This method is useful when the original SIM card is available 1 From the NIC Operation screen tap Create from Existing SIM 2 Place the SIM card into the SIM card adapter then insert the adapter into the reader Tap OK Put SIM card into adapter and insert into reader Then click 3 CellDEK will read the inserted SIM card After this process the following screen will appear Please remove master SIM and insert target NIC card into the reader 4 Remove the SIM card from the adapter and place the NIC SIM ID Card into the same adapter Insert the adapter into the reader then tap OK CellDEK will now create the SIMID Card When this process finishes the screen below will appear Tap OK CellDEK amp User Manual 57 CAPTURING DATA CellDEK User Manual Successfully created NIC This NIC has been designed for network isolation purposes only It is not an exact copy of the original
196. mark so treat extractions from these handsets as a minimum data extraction NOTE Some handsets can use a Network Isolation card NIC during capture This feature is further explained in the Network Isolation Card NIC section later in this chapter CellDEK amp User Manual 27 APTURING DATA TURNS Scroll down the list and choose image looks like the target cell phone You may be faced with a large list of cell phones To narrow down the search tap the Back button Select Refine List The user has the option to apply two filters The user can choose to apply either or both of these filters The first will narrow down the images shown using physical features of the phone e g Does the phone have an antenna or camera and what type of phone 15 it Clamshell swivel slide or bar The second or Input Dimensions filter is used to enter the physical dimensions of the target device length width depth using mm or inches CellDEK TEK will display the models matching those dimensions or features within a given tolerance and depending on which filter is used Enter Features of Phone Cock to edit Amerson filker bur ei rabinng this filter means Camera WIESE with matching phiercal Features will displayed lanore ignore Display Press Figure 18a Enter Features Erte Cenerrenm of Phone Click te fib
197. me the logo to LOGO jpg Make sure that it is less than 1MB in size NOTE The logo s name is case sensitive so it needs to be written exactly as LOGO jpg 2 logo to the root directory of a USB storage device 3 Inthe About CellDEK Screen tap the Update Logo button Insert the USB storage device into the USB port Tap the OK button The logo will be automatically copied to CellDEK and overwrite any existing logo Virus Check A virus check option has been included within the system setup menu The user can now run a malware removal tool to check for virus infection See the section Virus Checker in Chapter 2 Getting Started for more information Report Button Tapping this button brings up the Report Settings screen Checked items are represented by a blue box CellDEK amp User Manual 125 OTHER FEATURES Report Settings Screen Repart Output Report shew Unread Messages 5 Unread Massages show hashes hashes error descriptians error descriptions 9 Show file metadata file metadata image thumb nails Hon dawnicaded Mes Files E Figure 92 Report Settings Menu On Screen Report Settings Show Unread Messages Un checking this box prevents CellDEK from showing any unread SMS messages on screen This setting can be used for any phones that change extracted unread messages to read stat
198. n character sets ASCII programming language CellDEK has also been further developed to extract information from Unicode languages that provide non Latin character sets such as Greek and Arabic characters These extractions have not been verified although tests indicate the following cards supported natively Windows supported natively Nokia supported natively Sony Ericsson full support Unicode development implemented an option has been implemented to allow the user to extract in ASCII if required Samsung partial validated Unicode support for messages only e Motorola partial support Unicode development implemented an option has been implemented to allow the user to extract in ASCII if required e Siemens partial i e validated Unicode support for handsets contacts and notes If CellDEK does not extract a character it will appear as a square on the screen Special Note for Motorola and Sony Ericsson The extraction of Unicode characters for all data sets has not been verified for Motorola and Sony Ericsson devices Before an extraction begins with one of these devices the CellDEK will offer the user a choice 1 Extract validated data set only This means that some Unicode data will not be extracted 2 Attempt to extract all Unicode data Software will try to extract Unicode 72 Other Data Extraction Notes CAPTURING DATA characters for all data sets on
199. n coming into Your possession shall be marked by You as such 8 Use a You shall be solely responsible for the design repair and configuration of Your equipment machinery systems and or products except where specified in another agreement between the parties hereto You assume all rights and liability for results obtained by the use or implementation of the Software whether such results are used singly or in combination with other software or products You agree that Licensor shall have no liability to You or to any third party for any ordinary special indirect consequential or other damages or losses that might arise directly or indirectly by reason of Your use of the Software You shall be responsible for use of all hardware including but not limited to operating procedures audit controls accuracy and security of input and output data restart and recovery routines and other procedures necessary for Your intended use of hardware You shall maintain back up data necessary to replace Your critical data in the event of loss of or damage to such data from any cause Regardless of the cause of loss of Your data Licensor shall not in any way be liable therefor 6 In Your use of the Software You shall comply with all present and future statutes laws ordinances regulations and or guidelines of any applicable jurisdiction or agency You shall ensure that its personnel are at all times educated and trained in the proper use and operat
200. n the connector rack As such it needs to be installed on the CellDEK prior to use To install the cable 1 Boot the CellDEK to the Main Application Screen 2 Attach the CA 42 Cable to the USB port Wait for the USB connection tone It may take over a minute for the tone to be heard 3 Remove the cable It is now ready to be used for extractions Nokia Flash Adapters CellDEK User Manual The CellDEK is able to connect to certain Nokia handsets through the use of specialized adapters from Nokia Refer to chapter 7 for a list of Nokia handsets that are supported and the corresponding adapters 63 CAPTURING DATA Attaching Nokia Flash Adapters Follow these steps to attach a flash adapter to a Nokia handset NOTE This demonstration uses a Nokia 1100 but the procedure is similar for other models Figure 47 Nokia 1100 Handset 16 Power the handset off 17 Remove the back cover and the battery Leave the SIM card in place Figure 48 Handset Battery Removed NOTE The time and date on the handset may be changed when the battery is removed 18 Locate the data pins in the battery compartment of the handset You may need to remove a small black plastic cover CellDEK User Manual 64 CAPTURING DATA Figure 49 Data Pins 19 Place the appropriate adapter inside the handset so that the adapter s data pins touch the pins of the handset Figure 50 Adapter Data Pins c
201. nd corner of the compartment On newer models Press the screen option buttons 1 and 4 simultaneously which are located at the bottom right corner of the screen When on the windows desktop you will need to run Shortcut to HideStartBar exe located on the desktop this may be located inside the unused desktop items folder The virus software can then be installed using a CD drive or from a USB thumb drive following the providers installation instructions Virus Updates To gain access to the windows desktop from the main CellDEK application press the following where applicable Virus protection software requires regular updates in order to recognize the latest virus threats The update method can vary but usually requires an update file to be downloaded on an internet PC This update file can then be copied to the CellDEK desktop folder and the virus settings can be set to point to the location When the update option is selected in the virus software the software will retrieve the file from the desktop folder rather than from the internet The desktop folder contents can then be updated daily weekly or when required If virus protection software is installed we recommend that the system is monitored for changes in performance to the CellDEK application If the system performance is affected it may be necessary to adjust the virus software settings to enable CellDEK to operate without restriction Virus Checker A virus
202. ng contacts or abandon the whole capture session Pressing the Abandon button will go back to the Main Application Screen Extended Data Extraction Extended Data refers to such items as Image files Video files Audio files and any other files such as themes screensavers etc When the standard data has been extracted the user is given the option to select and download other files from the target device 256 files selected 1150393 KBytes Select files to download all aller bles all bet Tas Unseect all Jat Mog al Unsseci rd filet THER files 1 p Irma gas Videos Audic Other DOWNLOAD Figure 59a Data Download Selection Screen 1 the Images Button at the bottom of the screen CellDEK will display all supported CellDEK User Manual 70 0 70 CAPTURING DATA Image files that were found in the target device s memory 2 Select an Image file for download by tapping once on it Tap a second time to deselect the file Scroll through the list and tap any other files that are desired 3 Repeat Steps 1 2 for the Video Audio and Other buttons NOTE Select all files of a particular type by tapping the Select all lt ext gt files bar 4 As files are selected CellDEK shows the number and size of total files at the top of the screen 5 Once all needed files have been sel
203. o these things To protect your rights we need to make restrictions that forbid anyone to deny you these rights or to ask you to surrender the rights These restrictions translate to certain responsibilities for you if you distribute copies of the software or if you modify it For example if you distribute copies of such a program whether gratis or for a fee you must give the recipients all the rights that you have You must make sure that they too receive or can get the source code And you must show them these terms so they know their rights We protect your rights with two steps 1 copyright the software and 2 offer you this license which gives you legal permission to copy distribute and or modify the software Also for each author s protection and ours we want to make certain that everyone understands that there is no warranty for this free software If the software is modified by someone else and passed on we want its recipients to know that what they have is not the original so that any problems introduced by others will not reflect on the original authors reputations Finally any free program is threatened constantly by software patents We wish to avoid the danger that redistributors of a free program will individually obtain patent licenses in effect making the program proprietary To prevent this we have made it clear that any patent must be licensed for everyone s free use or not licensed at all The precise
204. of the End User License are also available from Logicube 2 Title No title or ownership in the Software is transferred to You Title to all applicable rights in patents copyrights trademarks and trade secrets in the Software shall remain in Licensor Software licensed hereunder is property of Licensor and You shall be bound by and observe such nature thereof as herein provided You shall take appropriate action by instruction to and agreement with its employees agents consultants or any other end users who are permitted access to the Software to fulfill its obligations hereunder Without limiting the foregoing You shall ensure that any end user license agreement provided with the ooftware is brought to the reasonable attention of all such end users You shall not provide or otherwise make available the Software or copies thereof to any third party ownership rights to any developments or improvements to the Software made by You shall belong solely to Licensor 3 Copying a You shall be entitled to make one copy the Software for back up and archival purposes You shall include in each such copy the Licensor s copyright notice s and trademark s b In no event shall You be entitled to remove or tamper with any such proprietary notices contained in the Software c Software shall not be reverse compiled disassembled reverse assembled or otherwise reverse engineered All rights in or to the Software not expressly granted to Y
205. off iTunes wont be able to recognize when CD is inserted or ejected unti your computer s AutoRun setting ts burned on Do you want iTunes to turn on AutoRun For you Figure 86e 12 The installation will begin This process may take a very long time Please do not turn off the device during this process your music All im one place Import your favorite CDs with just one click Add favorites day or night from the Tunes Store Enjoy your collection everywhere with Phone and iPad Figure 86f 13 On the last screen of the wizard uncheck the box next to Open iTunes after installer exits Tap FINISH CellDEK User Manual 116 OTHER FEATURES Open Tunes after the ots to quit this Figure 86g 14 The will then reboot At this point iTunes will have been updated iPhone Support User Application Notes Introduction The iPod touch iPhone 2G 3G and 385 supported on In order to extract the data from an Apple device iTunes must be installed on the system Periodically Apple release iTunes software updates that are available for download from the Apple website Apple also release periodic iPhone software updates for the iPhone device operating system that is installed through iTunes Newer versions of iTunes may not have been tested by Logicube yet Please contact Logicube Technical Support to f
206. on and other authors who decide to use it You can use it too but we suggest you first think carefully about whether this license or the ordinary General Public License is the better strategy to use in any particular case based on the explanations below When we speak of free software we are referring to freedom of use not price Our General Public Licenses are designed to make sure that you have the freedom to distribute copies of free software and charge for this service if you wish that you receive source code or can get it if you want it that you can change the software and use pieces of it in new free programs and that you are informed that you can do these things To protect your rights we need to make restrictions that forbid distributors to deny you these rights or to ask you to surrender these rights These restrictions translate to certain responsibilities for you if you distribute copies of the library or if you modify it For example if you distribute copies of the library whether gratis for a fee you must give the recipients all the rights that we gave you You must make sure that they too receive or can get the source code If you link other code with the library you must provide complete object files to the recipients so that they can relink them with the library after making changes to the library and recompiling it And you must show them these terms so they know their rights We protect your rights with a t
207. or unenforceable provisions by substitute provisions 15 ENTIRE AGREEMENT 15 1 This Agreement and the Contract constitute the entire agreement CellDEK amp User Manual 190 cette Sor TARE LICENSE between the Parties with respect to the subject matter hereof and supersede and invalidate all prior oral or written communications understandings representations or warranties relating to the subject matter hereof 15 2 Each Party warrants to the other that it has not relied any such communications understandings representations or warranties in entering into this Agreement 153 Notwithstanding anything contained herein to the contrary the provisions of Clauses 4 7 9 and any other Clauses which are intended to survive termination shall survive termination of the Agreement and shall continue in full force and effect thereafter 16 ASSIGNMENT SUB CONTRACTING AGENCY 161 You shall not be entitled to assign sub contract or otherwise transfer your rights or obligations under this Agreement whether in whole or in part without the Licensor s prior written consent 16 2 Licensor shall be entitled to assign its rights hereunder in whole in part to any person partnership or company 16 3 This Agreement shall be binding upon and inure for the benefit of the Parties and their respective permitted successors and assigns 17 THIRD PARTY RIGHTS A person who 15 not a Party to this Agreement has no rights under th
208. ork as a whole If identifiable sections of that work are not derived from the Library and can be reasonably considered independent and separate works in themselves then this License and its terms do not apply to those sections when you distribute them as separate works But when you distribute the same sections as part of a whole which is a work based on the Library the distribution of the whole must be on the terms of this License whose permissions for other licensees extend to the entire whole and thus to each and every part regardless of who wrote it Thus it is not the intent of this section to claim rights or contest your rights to work written entirely by you rather the intent is to exercise the right to control the distribution of derivative or collective works based on the Library In addition mere aggregation of another work not based on the Library with the Library or with a work based on the Library on a volume of a storage or distribution medium does not bring the other work under the scope of this License 3 You may opt to apply the terms of the ordinary GNU General Public License instead of this License to a given copy of the Library To do this you must alter all the notices that refer to this License so that they refer to the ordinary GNU General Public License version 2 instead of to this License If a newer version than version 2 of the ordinary GNU General Public License has appeared then you can specify
209. ormation on VCards and VCalendars can be found at www imc org pdi Customized Blackberry Extractions CellDEK now allows users to specify which parts of a Blackberry Devices memory are extracted To use this feature select PDA from the read new devices menu and then select Blackberry On the following screen select Custom Extraction 84 CAPTURING DATA Figure 60e Here you have the ability to enable or disable features for that particular extraction You can choose to download or skip the following Call Registers Contacts Messages Organisers Files Custam Extraction Contacts Registers AVES Extract vil ga Filtre Files Figure 60f Any memory not read will be flagged in the output report with the following message User chose not to extract 2 CellDEK amp User Manual 85 CAPTURING Various WinMobile Devices The following mobile GPS software has been verified and can be extracted from supported devices using CellDEK Google Maps Mobile Various Windows Mobile devices Other Extraction Notes can now playback W4A files that have been extracted from devices WAA files are audio files that can be created on some mobile handsets CellDEK amp User Manual 86 4 Analyzing Captured Data Displaying Extracted Data Once the extraction for standard and extended data is complete the data is displayed onscre
210. ou under CellDEK amp User Manual 192 0 Sor WARE LICENSE this Agreement are retained by Licensor 4 Warranty a Subsection 4 b hereof provides Licensor s twelve month limited warranty for the Software 6 Licensor warrants that for a period of twelve 12 months from installation of the Software the Software will perform in accordance with the Software documentation In the event the Software does not perform in accordance with such documentation then during such twelve month period Licensor shall at its option i correct any variance between the Software performance and its documentation ii replace the Software media The foregoing shall be Your sole and exclusive remedy with respect to the Software or otherwise hereunder EXCEPT AS WARRANTED BY THE PRECEDING THREE SENTENCES THE SOFTWARE IS LICENSED AS IS AND NO WARRANTY OF ANY KIND EXPRESS IMPLIED OR STATUTORY WHETHER IN RELATION TO MERCHANTABILITY HIDDEN DEFECTS FITNESS FOR PARTICULAR PURPOSE COURSE OF PERFORMANCE COURSE OF DEALING USAGE OF TRADE NONINFRINGEMENT THAT THE SOFTWARE S OPERATION SHALL BE ERROR FREE OR UNINTERRUPTED OR OTHERWISE IS GIVEN BY LICENSOR TO YOU OR ANY OTHER PARTY LICENSOR SHALL NOT UNDER ANY CIRCUMSTANCES BE RESPONSIBLE FOR ANY LOSSES OR DAMAGES DIRECT INDIRECT SPECIAL ORDINARY EXEMPLARY CONSEQUENTIAL OR OTHERWISE INCLUDING BUT NOT LIMITED TO LOSS OF DATA LOSS OF REVENUE PROFIT OR USE OR COST OF CAPITAL O
211. ows Selection from a model list Selection from model images CellDEK User Manual 25 CAPTURING DATA Selection from short list of model images based on entered dimensions Android Diackberr Kyocera LG Motoroi 02 arsuri Figure 14 Cell Phone Manufacturer Once the manufacturer is chosen the Cell Phone Selection Screen will appear List Models View Models Refine List Figure 15 Cell Phone Selection the user Knows the model of the cell phone then the List Models option should be selected A list will come up of all known models CellDEK User Manual 26 CAPTURING DATA 5150 Nokia 5151 5155 Nokia 51551 Nokis 5165 5170 Nokia 5200 210 Select Model of Nokia phone 52151 Nokia 220 5125 5210 Nokia 5230 Holes 5222 Nokia 52214 Hos 5235 Notes 5216 Figure 16 Cell Phone Model List Scroll down the list and select the model number of the cell phone If the model is unknown images of all models for the chosen manufacturer are obtained by selecting View Models Select Phone Model Page 6 of 18 Figure 17 Cell Phone Models NOTE Fully verified and supported handsets are indicated by green check marks Handsets that are not Supported but are expected to work are indicated by amber check marks Unverified handsets have no check
212. ppa salaa ira we Mut a sad Uus apas the a report of the malus software Cul Setechod and removed To prevent changes to the evidential data content in the data files folder the user can select a custom scan and choose to scan system folders Thus hood w roh o replacement Mee wn To help estet mr you Mod use ant mua product Por PC Ce J Figure 11 Windows Malicious Software Removal Tool cont d Carrying out a full or quick scan may result in files that have been identified by the Microsoft Windows Malicious Software Removal Tool as malicious to be removed from the CelIDEK system To protect evidential files you may wish to isolate the data files folder from the scan by selecting the customized option Data Files folder location C Program Files FSS CellDEK Data Files Note Any files identified as malicious that are removed from the data files folder during the scan will remain listed as downloaded in the CellDEK report CellDEK Operation CellDEK amp User Manual Figure 12 Using CellDEK stylus 22 CAPTURING DATA The CellDEK is operated via a touch screen interface A stylus is included and is stored in a holder located directly above the touch screen NOTE The CellDEK lid should always remain closed when the unit is charging or not in use Touch Sc
213. pported by Windows XP Check with your printer manufacturer to determine if your printer supports Windows XP CellDEK User Manual 103 JE E EZ E R i iii Qm 5 Other Features Main Application Screen This chapter discusses those features of the Application that were not covered in previous chapters read new device manage files view previous Upgrace system extractions software setup Figure 79 Main Application Buttons Manage Files From time to time previous capture sessions should be copied to an external storage device This archives the data and frees up space in the CellDEK memory storage Note all handsets must be disconnected from CellDEK prior to any file management tasks are performed Figure 80 USB Storage Device in Port 1 From the Main Application screen tap the Manage files button CellDEK User Manual 104 OTHER FEATURES 2 The first prompt that appears asks whether the User wishes to Back Up or Delete Files Backup files Fia aperstion Delete files Figure 81a Back Up Delete Files Selection 3 To Delete files skip to step 11 If Backup files is chosen you will see the following selection choices Copy files Figure 81b 4 No matter which button is tapped two buttons will appear All files or One by One Mess or flea All files Backup files or select edh dually
214. ranty protection in exchange for a fee 2 You may modify your copy or copies of the Library or any portion of it thus forming a work based on the Library and copy and distribute such modifications or work under the terms of Section 1 above provided that you also meet all of these conditions a The modified work must itself be a software library b You must cause the files modified to carry prominent notices stating that you changed the files and the date of any change C You must cause the whole of the work to be licensed at no charge to all third parties under the terms of this License If a facility in the modified Library refers to a function or a table of data to be supplied by an application program that uses the facility other than as an argument passed when the facility is invoked then you must make a good faith effort to ensure that in the event an application does not supply such function or table the facility still operates and performs whatever part of its purpose remains meaningful For example a function in a library to compute square roots has a purpose that is entirely well defined independent of the application Therefore Subsection 2d requires that any application supplied function or table used by this function must GNU GENERAL PUBLIC LICENSE be optional if the application does not supply it the square root function must still compute square roots These requirements apply to the modified w
215. reen Calibration The touch screen on the CellDEK can be calibrated There are two sets of instructions that can be followed to perform a touch screen calibration depending on the CellDEK you have 7 Fujitsu tablet CellDEKs that have power button top right hand corner of the display 8 Panasonic tablet CellDEKs that require you to open the storage area to turn the power on Calibrating the Fujitsu model 1 Turn the CellDEK 2 Onthe Windows Log On screen tap OK to log on to Windows 3 End User License Agreement should appear Do not do anything to the License Agreement Do not close it Do not click OK 4 Double tap the Hide StartBar icon f you cannot locate it on the desktop look for a folder called Unused Icons Double tap that folder and see if the Hide StartBar icon is there After double tapping the Hide StartBar the Windows Start button should appear on the bottom left of the screen Tap the Start button Tap Control Panel In the Control Panel double tap Tablet Calibration 8 Follow the instructions on the screen touching the red marks There will be 9 of them 3 rows top middle and bottom and 3 columns left middle and right 9 When you are done with the 9 mark a pop will appear Calibration is succeeded Settings change is effective after system restart 10 Tap OK and close Control Panel window CellDEK amp User Manual 23 CellDEK
216. review Dump File Hash 97234 Sc6f Sc LOchbe0c3400c7b6166385 Metadata Width x Height 1600 1200 Comments _ 1 Sew 81 02 2 sedate sage Created 22230455739 09 32 13 05 lan 2009 F w F Figure 66 Extended View Data Screen The Extended Data View Screen allows the user to view such information as Image files Video files Audio files and Other files The following buttons are unique to this screen Images This button displays thumbnails of all Images that were downloaded during data capture It also displays a list of the image files that were not downloaded Images can be viewed full size by tapping on the thumbnail to reveal the pan rotate and print screen CellDEK User Manual 92 CellDEK User Manual ANALYZING CAPTURED DATA print Tap image to rotate 90 degrees clockwise File on device 000002 20 03 2007 05 48 45 Double tap image to resze Figure 67 Pan Rotate and Print Image Screen In this screen tapping the image once causes it to rotate Drag the stylus through the scroll image area to pan left right or up down Arrow buttons are also provided for this purpose Tap the Print button to send a copy of the image to an attached USB Printer please refer to the Printing Reports section later in this chapter Double tap the image to resize it so that the entire image can be seen
217. rmine which SIM card they were sent to from this can be determined by viewing the SMS on the handset Call Logs Dual SIM handsets store all call logs on the handset and can be dialled or received from either SIM card CellDEK will extract all call log entries but cannot determine which SIM card was used to dial or receive the call this can be determined by viewing the call logs on the handset Any LDN s stored on the SIM cards will not be extracted a separate SIM card extraction will obtain this data NIC Card Functionality Where NIC card support is verified a NIC card will need to be created for each SIM card used in a Dual SIM handset The NIC card will need to be returned to the same Slot from which the SIM card taken from Placing a NIC card in the wrong slot will result in a loss of data NOTE A separate extraction should always be performed on all SIM cards 35 CAPTURING DATA Attaching Memory Flash The Memory Card Reader is also located on the right hand side of the control panel The CellDEK software application does not allow data to be written to the Memory Card Reader slots IMPORTANT NOTE CellDEK can only support Memory Cards up to 2GB in size and will not work with SDHC cards Users may attach a card reader that can read larger flash media such as SDHC to the USB port on the CellDEK 1 Begin by tapping the Read New Device button on the Main Application Screen The Device Type Selec
218. roduct which was accompanied by the Programs C You and your employees and agents are required to protect the confidentiality of the Programs You may not distribute or otherwise make the Programs or related documentation available to any third party by time sharing or otherwise without the prior written consent of MEI D You may not copy or reproduce or permit to be copied or reproduced the Programs or related documentation for any purpose except that you may make one 1 copy of the Programs for backup purposes only in support of your use of the Programs on the single Product which was accompanied by the Programs You shall not modify or attempt to modify the Programs E You may transfer the Programs and license them to another party only in connection with your transfer of the single Product which was accompanied by the Programs to such other party At the time of such a transfer you must also transfer all copies whether in printed or machine readable form of every Program and the related documentation to the same party or destroy any such copies not so transferred CellDEK User Manual 204 HARDWARE LICENSE F You may remove any copyright trademark or other notice or product identification from the Programs and you must reproduce and include any such notice or product identification on any copy of any Program CellDEK User Manual 205 HARDWARE LICENSE YOU MAY NOT REVERSE AS
219. rs permitted assigns and personal representatives and 1 2 5 any reference to company subsidiary and holding company CellDEK User Manual 185 SOFTWARE LICENSE shall be as defined in section 736 of the Companies Act 1985 1 3 The headings of this Agreement are for ease of reference only and shall not affect its interpretation or construction 1 4 In the event of a conflict between any of the terms of this Agreement including its Schedules and appendices the conflict shall be resolved according to the following order of priority 1 4 1 the Clauses of this Agreement 1 4 2 the Schedules of this Agreement and 1 4 3 the Recitals 2 GRANT OF LICENCE 2 1 The Licensor hereby grants to You a non exclusive non transferable licence to Use the Software and where appropriate the Software Documentation any Periodic New Releases and any Releases and to possess and refer to the Software Documentation the Licence in accordance with and subject to the terms and conditions of this Agreement 2 2 The Licensor has provided a copy of the the End User License to You By using the ooftware You are granted a license to the software in PC embedded in the CellDEK device and You agree to be bound by the terms of the End User License agreement 3 TERM This Agreement shall commence on the Commencement Date and shall continue in force unless or until terminated by either Party in accordance with the provisions of
220. rty This Agreement shall be binding upon and inure to the benefit of the parties hereto and their respective permitted successors and assigns GNU General Public License CellDEK User Manual 198 GNU GENERAL PUBLIC LICENSE Version 2 June 1991 Copyright C 1989 1991 Free Software Foundation Inc 51 Franklin Street Fifth Floor Boston MA 02110 1301 USA Everyone is permitted to copy and distribute verbatim copies of this license document but changing it is not allowed Preamble The licenses for most software are designed to take away your freedom to share and change it By contrast the GNU General Public License is intended to guarantee your freedom to share and change free software to make sure the software is free for all its users This General Public License applies to most of the Free Software Foundation s software and to any other program whose authors commit to using it Some other Free Software Foundation software is covered by the GNU Lesser General Public License instead You can apply it to your programs too When we speak of free software we are referring to freedom not price Our General Public Licenses are designed to make sure that you have the freedom to distribute copies of free software and charge for this service if you wish that you receive source code or can get it if you want it that you can change the software or use pieces of it in new free programs and that you know you can d
221. s Storage Device or Windows PDA from the GPS Device list GARMIN nuvi 200 200W 205 205W 250 255W 260 260W 265T 265WT 270 2751 350 360 370 500 550 600 610 650 660 670 680 750 7551 76571 770 7751 780 7851 850 855 8551 880 885T 1200 1250 12601 1300 13507 13701 13907 14907 5000 NAVIGON 1200 1210 2100 max 2110 max 2150 max 2200 2310 3300 3310 4310 4350 7310 8110 8310 NAVMAN 530 530 3D 550 580 590 NDRIVE G280R 52805 5400 G800R 5400 Touch Touch XL TOMTOM GO GO 300 GO 500 GO 510 GO 520 GO 530 GO 540 LIVE GO 700 GO 710 GO 730 GO 740 LIVE GO 910 GO 920 GO 940 LIVE XL Additional Cable Support for PDAs The set of 5 cable tips can be purchased from http www gomadic com celldek html This will enable the User to extract data from the following 150 PDAs PDA Cable Tip 1 DELL Axim X5 PDA Cable Tip 2 CINGULAR iPAQ h6320 h6325 COMPAQ iPAQ 3800 3830 3835 3850 3870 3875 3900 3950 3955 3970 3975 HP iPAQ 11900 11910 11915 11920 11930 11935 11937 11940 11945 12200 12210 12215 13800 13830 13835 13850 13870 13875 13900 13950 13955 13970 13975 14140 14150 14350 14355 15100 15150 15155 15400 15450 15455 15500 15550 15555 16315 16320 16325 16340 16365 hw6500 hw6510 hw6515a hw6515 hw6710 hw6715 hw6910 hw6915 hw6925 hw6940 hw6965 hx2000 Series hx2090 hx2110 hx2190 hx2410 hx24
222. s not normally print such an announcement your work based on the Program is not required to print an announcement These requirements apply to the modified work as a whole If identifiable sections of that work are not derived from the Program and can be reasonably considered independent and separate works in themselves then this License and its terms do not apply to those sections when you distribute them as separate works But when you distribute the same sections as part of a whole which is a work based on the Program the distribution of the whole must be on the terms of this License whose permissions for other licensees extend to the entire whole and thus to each and every part regardless of who wrote it Thus it is not the intent of this section to claim rights or contest your rights to work written entirely by you rather the intent is to exercise the right to control the distribution of derivative or collective works based on the Program In addition mere aggregation of another work not based on the Program with the Program or with a work based on the Program on a volume of a storage or distribution medium does not bring the other work under the scope of this License 3 You may copy and distribute the Program or a work based on it under Section 2 in object code or executable form under the terms of Sections 1 and 2 above provided that you also do one of the following a Accompany it with the complete corresponding
223. sage and describe the type of attached content Notifications appear in the following form CONTAINS CLIPART REFER TO HANDSET SMS Messages may contain more than one type of attached content CellDEK will display a notification for each piece of attached content within the message VCard and VCalendar Content VCards and VCalendars are used to exchange information between application VCards store address book entries while VCalendars store organiser entries 83 CellDEK User Manual VCards and VCalendars be attached to SMS Messages CellDEK will now display the raw data of attached VCards and VCalendars within the body of the SMS Message VCard and VCalendar data will appear between the tags ATTACHEMENT CONTACT DATA Or ATTACHMENT CALENDAR DATA And will end with END ATTACHMENT As SMS Messages have a limited size VCards and VCalendars may span several messages In this case each part of the VCard or VCalendar will start with the tag ATTACHMENT CONT To indicate the content follows from a previous message Each message part will also end with the tag below to indicate that more content will follow in the next message NOTE VCard and VCalendar content is displayed in its raw format Where VCards and VCalendars span more than one SMS Message each part will need to be manually put together to form a valid VCard or VCalendar entry More inf
224. se 9 5 The obligations in this Clause shall continue in force notwithstanding termination of this Agreement for any reason 9 6 this Agreement is terminated the receiving Party shall return destroy at the request of the disclosing Party all Confidential Information of the disclosing Party 10 TERMINATION 101 This Agreement may be terminated 10 1 1 by either Party upon giving not less than sixty 60 days written notice to the other 10 1 2 forthwith by either Party upon giving written notice to the other if the other commits any material breach of this Agreement and which in the case of a breach capable of remedy shall not have been remedied within thirty 30 days of a written request to remedy the same and non payments of sums when due to the Licensor shall be a material breach 10 1 3 forthwith by either Party upon giving written notice to the other Party if the other Party makes or proposes to make any arrangement or composition with its creditors or has a receiver administrative receiver administrator liquidator manager or similar officer appointed in respect of all or any part of its assets or passes a resolution for winding up otherwise than for the purpose of a solvent amalgamation or reconstruction where the resulting entity assumes all of the obligations of the relevant party under this Agreement or in the case of an individual commits any act of bankruptcy or dies or in the case of a partnership is dissolve
225. se events The SMS event has a body fragment of Data Message The following Symbian 560 handsets are verified on CellDEK NOKIA 3230 3250 5320XpressMusic 5500 Sport 5 00 6120 6220 Classic 6260 6290 6620 6630 7610 E50 E51 E61 E63 E65 E66 E70 E71 N70 N71 N72 N73 N76 N77 N79 N80 N81 N82 N85 N90 N91 N93 N93i N95 N95 8GB SAMSUNG 18510 SGH D720 SGH G810 Data Capture from Sony Ericsson Phones If the User runs into trouble capturing data from a oony Ericsson phone or any other handset that connects to Cable 18 users should make sure that the Default Contacts setting on the target CellDEK amp User Manual 79 CAPTURING DATA CellDEK User Manual handset is to Phone Contact before extraction is performed This is done by navigating manually on the phone s menus as follows Menu gt Contacts gt Options gt Advanced gt Default Contact gt Select Phone Contact Once this setting is enabled users should have no trouble extracting data from the handset Unlocking Sony Ericsson Handsets CellDEK is able to deactivate Sony Ericsson handset lock codes of up to 8 digits Some handsets may not be able to establish a USB connection whilst the handset lock is active In this case CellDEK will first attempt to locate device drivers then ask the user to confirm the handset is locked Check phone display Is the phone asking for a Phone lock code
226. se terms and conditions You may not impose any further GNU GENERAL PUBLIC LICENSE restrictions on the recipients exercise of the rights granted herein You are not responsible for enforcing compliance by third parties to this License 7 lf as a consequence of a court judgment or allegation of patent infringement or for any other reason not limited to patent issues conditions are imposed on you whether by court order agreement or otherwise that contradict the conditions of this License they do not excuse you from the conditions of this License If you cannot distribute so as to satisfy simultaneously your obligations under this License and any other pertinent obligations then as a consequence you may not distribute the Program at all For example if a patent license would not permit royalty free redistribution of the Program by all those who receive copies directly or indirectly through you then the only way you could satisfy both it and this License would be to refrain entirely from distribution of the Program If any portion of this section is held invalid or unenforceable under any particular circumstance the balance of the section is intended to apply and the section as a whole is intended to apply in other circumstances It is not the purpose of this section to induce you to infringe any patents or other property right claims or to contest validity of any such claims this section has the sole purpose of protecting the
227. sed on start up irrespective of the Slot it is in Therefore the SIM card in Slot 2 can be set to be used before that in Slot 1 34 CellDEK User Manual CAPTURING DATA The SIM cards will be referred to as Primary SIM and Secondary SIM where the Primary SIM is the one set to be used first The following data has been tested and can be extracted from these handsets IMEI Each Dual SIM handset has two IMEI numbers one for each SIM card Slot The IMEI numbers are associated to the SIM card slots on the handset NOT the SIM Cards CellDEK will only extract the IMEI number of Slot 1 regardless of how many SIM cards are present or which card 15 set as the Primary SIM IMSI Each Dual SIM handset can have up to two IMSI numbers one for each SIM card inserted CellDEK will only extract the IMSI of the Primary SIM card regardless of which slot it is inserted into SIM Contacts Dual SIM handsets can store contacts to either SIM card CellDEK can retrieve contacts from both SIM cards and identify which card they were stored on Contacts stored on the Primary SIM will be labelled Primary SIM Contacts stored on the Secondary SIM will be labelled Secondary SIMP SMS Messages Dual SIM handsets can store SMS messages on either SIM card CellDEK will only extract messages stored on the Primary SIM card regardless of which slot it is inserted into CellDEK will extract all handset SMS messages but cannot dete
228. sks NOTE If a search is performed on the report the printed report will also show all found words highlighted in yellow Connecting a Printer to CellIDEK CellDEK amp User Manual Figure 78 USB Printer 1 Power up the printer and insert paper 2 Attach the printer s USB cable to the USB port on the CellDEK Control Panel Tap the Load Drivers Automatically button that appears Once the USB printer is attached reports can be printed from the Standard and Extended Data View ocreens 1 From the Standard Extended Data View Screen tap the Case Details button 102 ANALYZING CAPTURED DATA 2 Make any changes if necessary to the Case Details Input Form and tap the OK button report will automatically generate 3 Tap the View Report button to preview the report 4 Tap the Print Report button to print a hardcopy of the report The report shows all information about the capture including target device information standard data lists extended data downloaded and lists of extended data not downloaded It also includes a glossary of terms at the end of the report The report will also include the company logo if itis added Please refer to Chapter 5 More Features for more details on adding a logo NOTE Some reports can be many pages long Be sure to review the report before printing Supported Printers CellDEK supports any USB printer that is natively su
229. sm we pecos gt esu asm se asm s 2 pecos e esu ofl oss mfal 2 vecos gt o soe o o o suo o aro o sor o sor o owo fot com ___ U gt 53 53 X P P P P P Q SE EA E JEE GSM lols T MOBILE MDA Vario II TES lt gt gt 2 501 VERIZON XV6700 PERS T 5 la SONY 5 922 ERICSSON 7520 10 21010 2310 2500 401 2500 TOSHIBA Portege G710 TOSHIBA 1910 SONY 931 ERICSSON 2800 es en 2m 925 ERICSSON 2550 926 ERICSSON 2555 er en 2m 927 ERICSSON Z600 es en me 928 ERICSSON 2610 eo en me 929 ERICSSON 2710 m 930 ERICSSON 2770 enicsson zea 5 923 ERICSSON 25201 emicsson _ 2590 _ 924 ERICSSON 2530 z z z gt 2 Ols O s AIS AIS AIS 5 5 2 0 2 912 ol a Oo 9o mo
230. stantly stay lit and blink when the SIM is accessed On newer CellDEK units the LED stays off then blinks when the SIM is accessed Figure 25 Inserting SIM Card in Slot 33 CAPTURING DATA CellDEK User Manual A 8 A Figure 26 SIM Card in Slot SIM PIN and PUK Codes CellDEK enables an investigator to unlock SIM cards via the PIN code and the PUK code if they are known When CellDEK is used to unlock a SIM card via the PIN code it does not relock the card afterwards When unlocking the SIM card via the PUK code CellDEK will reset the PIN number to 0000 To enable the feature to enter the PUK code the PIN code needs to be entered incorrectly several times The PIN input screen displays the number of attempts remaining before the PUK code is required Dual SIM Extracted Data Dual SIM handsets can contain two SIM cards however the handsets are fully operational with only one SIM Dual SIM handsets will have the following data 2 IMEI Numbers e Upto 2 IMSI Numbers e Up to two lots of SIM Contacts e Up to two lots of SIM Messages These handsets make use of two SIM card slots are referred to as Slot 1 and Slot 2 Either slot can be used if only one SIM card is present There are a number of ways the user can switch between SIM cards including a software menu option or a hardware button The handsets also have the functionality to set which SIM card is initially u
231. system Such a contradiction means you cannot use both them and the Library together in an executable that you distribute 7 You may place library facilities that are a work based on the Library side by side in a single library together with other library facilities not covered by this License and distribute such a combined library provided that the separate distribution of the work based on the Library and of the other library facilities is otherwise permitted and provided that you do these two things a Accompany the combined library with a copy of the same work based on the Library uncombined with any other library facilities This must be distributed under the terms of the Sections above b Give prominent notice with the combined library of the fact that part of it is a work based on the Library and explaining where to find the accompanying uncombined form of the same work 8 You may not copy modify sublicense link with or distribute the Library except as expressly provided under this License Any attempt otherwise to copy modify sublicense link with or distribute the Library is void and will automatically terminate your rights under this License However parties who have received copies or rights from you under this License will not have their licenses terminated so long as such parties remain in full compliance 9 You are not required to accept this License since you have not signed it However nothing else gran
232. t code number or file acceptance on screen during the extraction Ensure cable is replaced correctly and retry then reboot the CellDEK if problem persists Ensure all connectors are correctly inserted into the storage rack and reboot the CellDEK Connection to hardware com port suspect reboot CellDEK NOTE Connector lights should go out as the CellDEK software opens thus indicating hardware 133 GLOSSARY AND TROUBLESHOOTING GUIDE CellDEK application freezes continuously SIM card read fail SIM PIN required message SIM PUK required message CellDEK fails to read memory card SIM Card LED goes out CellDEK unit freezes or crashes Error Messages port success Hold power switch in the on position for a few seconds until shutdown Wait for unit to emit beeps before releasing switch Ensure SIM is correctly inserted and in the correct orientation Enter PIN code If entered incorrectly 3 times PUK will be required Contact carrier provider to obtain PUK code Ensure card 15 inserted correctly Reboot CellDEK If problems persist hold power switch in the on position for a few seconds until shutdown Wait for unit to emit beeps before releasing switch Hold power switch in the on position for a few seconds until shutdown Wait for unit to emit beeps before releasing switch If an error message occurs during CellDEK use a small Help icon appears in t
233. t data If unchecked failure messages will error occurred during the extraction of this section of data Show Image Metadata Checking this box will include metadata information with any downloaded images on the report Show Image Thumb Nails Checking this box will show thumb nail images of any downloaded image files on the report Show Non downloaded Files Un checking this box replaces the list of non downloaded files on the report with a statement that the user has chosen not to show non downloaded data Security Button This button is activated if the Erase program is loaded on the CellDEK A single menu choice will appear that asks if secure erase should be used when deleting case files CellDEK amp User Manual 127 OTHER FEATURES Security Settings secure erase software when deleting case files Figure 94 Security Settings Menu If Use secure erase is checked a prompt appears asking the user to change or accept default settings Security Settings Figure 95 Secure Erase Default Prompt If Change is tapped another prompt appears asking the user which level of security erase should be used Security Settings Chopos erase method 1 pieucorandom t pass 2Getmann 35 passes 3 03 DoD 5220 22 7 passes ag Figure 96 Secure Erase Settings CellDEK amp User Manual 128 OTHER FEATURES The settings are Pseudo Erase
234. ted by facsimile to the Parties as set out below 13 1 1 The Licensor Address Logicube Inc 19755 Nordhoff Place Chatsworth CA 91311 USA For attention of COO 13 1 2 You to the address or facsimile number that You provided for Your purchase of the Software 13 2 notice served by 13 2 1 personal delivery shall be deemed served at the time of delivery 13 2 2 first class post shall be deemed served at the start of the fifth business day after posting and 13 2 3 facsimile shall be deemed served on the day of transmission or the next following business day if transmitted outside the Party s normal working hours provided that the sender shall have received a transmission report indicating that all the pages of the notice have been transmitted to the correct facsimile number 133 Party may change any details of its address or facsimile number by notice in the manner described above 14 SEVERABILITY If any term or provision of this Agreement or its application to any Party or circumstances shall to any extent be invalid or unenforceable the remainder of this Agreement or the application of the term or provision to any other Party or circumstances other than those as to which it is already invalid or unenforceable shall not be affected and each term and provision of this Agreement shall be valid and enforceable to the fullest extent permitted by law The Parties shall negotiate in good faith to replace any invalid
235. that version instead if you wish Do not make any other change in these notices Once this change is made in a given copy it is irreversible for that copy so the ordinary GNU General Public License applies to all subsequent copies and derivative works made from that copy This option is useful when you wish to copy part of the code of the Library into a program that is not a library 4 You may copy and distribute the Library or a portion or derivative of it under Section 2 in object code or executable form under the terms of Sections 1 and 2 above provided that you accompany it with the complete corresponding machine readable source code which must be distributed under the terms of Sections 1 and 2 above ona medium customarily used for software interchange If distribution of object code is made by offering access to copy from a designated place then offering equivalent access to copy the source code from the same place satisfies the requirement to distribute the source code even though third parties are not compelled to copy the source along with the object code 5 A program that contains no derivative of any portion of the Library but is designed to work with the Library by being compiled or linked with it is called a work that uses the Library Sucha work in isolation is not a derivative work of the Library and therefore falls outside the scope of this License However linking a work that uses the Library with the Libr
236. the device At this time the output in this case is not guaranteed by validation testing Data Captured from Android Google CellDEK User Manual has the capacity to extract information from mobile devices that use Google s Android operating system Extracted data includes Contact details Call Logs SMS messages Calendar Tasks and Files CellDEK supports extraction of contacts database on handsets running on Android 2 2 operating system Before an extraction can be performed users must 1 Tick Unknown Sources and USB debugging in the target devices application settings 2 Ensure the target device has a formatted SD Card inserted The Android extraction process requires the use of an application Agent which is automatically installed onto the target device and executed The Agent extracts data from the device and stores in a temporary file called ANDDAT on the devices SD Card sdcard ANDDAT At the end of the extraction the ANDDAT file is deleted from the card and the Agent is automatically uninstalled Support for Android ad hoc Rooting CellDEK software version 1 21 x x and newer can temporarily root Android OS devices This allows access to all user data stored on the device Ad hoc rooting does not work with all Android devices Rooting is removed after the device is restarted Please check with local laws governing rooting prior to using Compatible with the majority of Android OS devices
237. the map and can be selected using the Places navigation panel C emer apakka AIT gt gt 11 5 ws 27 Googk Figure 33f A full Google Earth User Guide can be viewed at http earth google com intl en userguide v5 NOTE Google Earth imports GPS coordinates Time and Date Altitude and waypoint name data only Any other information displayed in Google Earth has been inferred by the Google Earth software CellDEK amp User Manual 45 Geo Tag Data from Images CellDEK will now display Geo Tag data for images that have been captured using a device with a GPS receiver A Geo Tag consists of latitude and longitude coordinates and adds geographical identification to an image Geo Tag information is automatically extracted and appears in the metadata section associated with an Image u mu 19092009 C Deta mages Camera 200909 200909A0 11 52147 Created 11 49 54 14 2009 Copied to CellDEK User 14092009 Preview Bye 1 Hash 2 2800901 d90daf 50394 Camera Make Nokia Camera Model 6720 Metadata Date Time 2009 09 14 12 49 53 NOTE Geo Tagging is only displayed if the image has been captured using a device that supports geo tagging Attaching an Apple Device CellDEK software ver 1 12 0 0 and newer is able to capture data from Apple devices such as the iPhone 2G 3G
238. tion Call Log This button displays a list of calls dialed received and missed Text Messages This button shows all text messages sent and received CellDEK User Manual 88 CellDEK User Manual ANALYZING CAPTURED DATA I PF 06 SIM SMS Messages Number of entrees 0 Handset SMS Messages Number of estes 22 00000 Di Ot 2000 You myf ewes cuntacts been refreshed Messages M 6 42 55 2008 Did you imow Messape rates for eves you rate plan Go to t robbie core for your details j EES 2006 Your contact has been updated F F goog Figure 62 Captured Text Messages tex MMS or Email Messages If supported CellDEK displays all captured MMS messages along with their attachments For more details please refer to the MMS Messages and Email Messages sections on the next page Organizer This button shows information such as reminders notes etc Extended Data This button opens the Extended Data View Screen NOTE A Not Extracted message will appear for any data that CellDEK cannot pull from the target device 89 ANALYZING CAPTURED DATA Extended Data SIM Card Dialled Calls Number of entries 0 Handset Dialled Calls Number of entries 4 Not m extracted extracted 122154411543
239. tion screen will appear Cell Phone GPS Device Select Device Type SIM Card Create NIC Flash Memory Figure 27 Device Type Selection Tap the Flash Memory button The next screen will prompt the user to choose the correct memory card ub cant Figure 28 Memory Card Selection Screen Once the correct Memory Card image is selected the next screen will prompt the user to insert the card in the indicated slot CellDEK amp User Manual 36 CellDEK User Manual CAPTURING DATA Insert memory card into the slot highlighted here Figure 29 Orientation Guide Place the card into the correct slot of the reader as indicated by the on screen graphics NS 7 Sis Figure 30 CF Memory Card in Slot NOTE If the suspect Memory Card is not represented on the Selection Screen a card adapter may be required e g Transflash Mini SD Memory Stick Duo etc Imaging Flash Media After capturing data CellDEK will ask the user if it should perform a complete image capture of the flash memory card If the user chooses to do this CellDEK will run the following procedure 1 CellDEK will make a sector by sector copy of the entire flash media drive 2 copy will be stored as an image file in the resource folder of the extraction directory 3 CellDEK will then scan the image file for the following types of JPEG files 37 CAPTURING DATA CellDEK User Manual
240. to the absence of any warranty and give any other recipients of the Program a copy of this License along with the Program You may charge a fee for the physical act of transferring a copy and you may at your option offer warranty protection in exchange for a fee 2 You may modify your copy or copies of the Program or any portion of it thus forming a work based on the Program and copy and distribute such modifications or work under the terms of Section 1 above provided that you also meet all of these conditions CellDEK amp User Manual 199 GNU GENERAL PUBLIC LICENSE a You must cause the modified files to carry prominent notices stating that you changed the files and the date of any change b You must cause any work that you distribute or publish that in whole or in part contains or is derived from the Program or any part thereof to be licensed as a whole at no charge to all third parties under the terms of this License C If the modified program normally reads commands interactively when run you must cause it when started running for such interactive use in the most ordinary way to print or display an announcement including an appropriate copyright notice and a notice that there is no warranty or else saying that you provide a warranty and that users may redistribute the program under these conditions and telling the user how to view a copy of this License Exception if the Program itself is interactive but doe
241. ts you permission to modify or distribute the Library or its derivative works These actions are prohibited by law if you do not accept this License Therefore by modifying or distributing the Library or any work based on the Library you indicate your acceptance of this License to do so and all its terms and conditions for copying distributing or modifying the Library or works based on it 10 Each time you redistribute the Library or any work based on the Library the recipient automatically receives a license from the original licensor to copy distribute link with or modify the Library subject to these terms and conditions You may not impose any further restrictions on the recipients exercise of the rights granted herein You are not responsible for enforcing compliance by third parties with this License 11 If as a consequence of a court judgment or allegation of patent infringement or for any other reason not limited to patent issues conditions are imposed on you whether by court order agreement otherwise that contradict the conditions of this License they do not excuse you from the conditions of this License If you cannot distribute so as to satisfy simultaneously your obligations under this License and any other pertinent obligations then as a consequence you may not distribute the Library at all For example if a patent license would not permit royalty free redistribution of the Library by all those who rece
242. tware button 4 You will be prompted to insert the upgrade key Attach the USB thumb drive to the USB port of the CellDEK Wait a few moments to make sure the USB thumb drive loads properly then tap the OK button 5 The file will automatically download from the USB thumb drive and the CellDEK will restart 6 After the restart the iTunes setup will begin The iTunes setup is a manual process in which you will have to perform certain tasks such as tapping the Next or OK buttons 114 CellDEK User Manual OTHER FEATURES 7 You may see the following message below If you do tap Yes EE An older version of QuickTime Pro was detected on the madre you proceed with thes instalation you gt must purchase new QuickTime Pro key to regain QuickTime fro functenalty Continue with instal WR M Figure 86a 8 Tap NEXT on first screen of the installation wizard Week ome to iTunes Tunes makes easy to enjoy your Favorite TY Shows and more on your IPhone or Purves the funes Store a place you can everything you need to be entertained day or iTunes ow stores your purchases i Cloud and makes them on your devices anywhere any time at no addbon cost iTunes mow includes Tunes Match Shore your entire m sn you can enjoy your collection anywhere
243. uch 4G SDA SDA II SDA Music Shadow 2 Sidekick 4G Wing h6315 G900 601 5030 103 111 820 6600 6800 v1210 v1240 v1415 v1605 v1620 v1640 VDA VDA Compact GPS VDA SUPPORTED HANDSETS ERICSSON SONY ERICSSON SONY ERICSSON SONY ERICSSON SONY ERICSSON SONY ERICSSON SONY ERICSSON SONY ERICSSON K750c K758c K790a K790c K790i M608i S700c TDS TDS T MOBILE T MOBILE T MOBILE T MOBILE T MOBILE Handsets Other 800LE Ranger 300X Ranger 500 Dash G2 G2x VODAFONE VODAFONE VODAFONE VODAFONE VODAFONE VOXTEL VOXTEL VOXTEL VOXTEL Compact IV VDA II VDA V VPA Compact VPA Il Compact VPA III W210 W420 W520 W740 Other handsets can be tested on CellDEK however the amount of data extracted has not been assessed and all information should be treated as a minimum data extraction GPS Device Verified CellDEK Support The following GPS Devices have been tested CellDEK using the standard verification procedures of Logicube The results below display the data sets that can be extracted from CellDEK for the specific handset There may be additional data sets available from handsets and these will require further examination Key Phone ID CellDEK amp User Manual mas m 178 SUPPORTED HANDSETS si Call Logs Recent Destinations Track Logs Track Logs with
244. uch E100 beTouch E200 510 530 C531 DX650 DX900 Liquid M900 n10 n30 n35 n300 n310 n311 n320 n321 neoTouch CellDEK User Manual ASUS ASUS ASUS ASUS ASUS ASUS ASUS ASUS ASUS ASUS ASUS AT amp T AT amp T AT amp T AT amp T AT amp T AT amp T AT amp T AT amp T P550 P552 P560 P565 735 750 P835 2801 2810 ZX1 2125 3125 5700 8125 8500 8525 5 56 5 66 169 DAXIAN DELL DELL DELL DELL DELL DELL DELL DELL DELL 3835 3850 3870 3875 3900 3950 3955 3970 3975 CU928 Pocket DJ 20GB Pocket DJ 30GB X3 X3i X30 5 50 50 SUPPORTED HANDSETS AIRIS AIRIS AnexTEK AnexTEK Apple ASUS ASUS ASUS ASUS ASUS ASUS ASUS ASUS ASUS ASUS ASUS ASUS ASUS ASUS ASUS ASUS ASUS ASUS ASUS ASUS DOPOD DOPOD T610 T620 E72 E75 E76 E78 E850 E860 moboDA 3160 moboDA 3360 moboDA 3380 SP310 iPod Touch A696 J501 H502 M530W M356 M930 Mars II Mypal A626 MyPal A632 MyPal A636 MyPal 636 MyPal A639 MyPal A686 P305 P320 P505 P525 P526 P527 P535 D600 D802 CellDEK User Manual AT Mobi
245. untries not thus excluded In such case this License incorporates the limitation as if written in the body of this License 13 The Free Software Foundation may publish revised and or new versions of the Lesser General Public License from time to time Such new versions will be similar in spirit to the present version but may differ in detail to address new problems or concerns Each version is given a distinguishing version number If the Library specifies a version number of this License which applies to it and any later version you have the option of following the terms and conditions either of that version or of any later version published by the Free Software Foundation If the Library does not specify a license version number you may choose any version ever published bythe Free Software Foundation 14 If you wish to incorporate parts of the Library into other free programs whose distribution conditions are incompatible with these write to the author to ask for permission For software which is copyrighted by the Free Software Foundation write to the Free Software Foundation we sometimes make exceptions for this Our decision will be guided by the two goals of preserving the free status of all derivatives of our free software and of promoting the sharing and reuse of software generally NO WARRANTY 15 BECAUSE THE LIBRARY IS LICENSED FREE OF CHARGE THERE IS NO WARRANTY FOR THE LIBRARY TO THE EXTENT PERMITTED BY APPLICABL
246. ures to thes folder Fig 86k Properties window 7 Disconnect the iPhone and Cable 31 from the CellDEK Place Cable 31 back on the CellDEK rack 8 Accept the EULA and the CellDEK software should start System Setup The System Setup brings up a Setup Menu like Figure 87 below CellDEK amp User Manual 121 OTHER FEATURES CellDEK User Manual CellDER Setup Information Report Virus Check Advanced Figure 87 System Setup Menu Extraction Button Tapping this button brings up the Extraction Settings screen Checked items are represented by a blue box Extraction Settings Extract Files _ Automatically extract ALL files Skip messages during extraction Extraction may cause Unread status to be changed extended SIM file acquisition generates SIMDAT file Network Isolation Card after SIM extraction cancel Capture to external storage disable local storage This feature is under development Make sure you backup your destination media first Figure 88 Extraction Settings Menu Extract Files Checking this box will cause CellDEK to extract the target device s file listing Automatically Extract Files Checking this box will automatically download all Extended Data files without prompting the user This includes all image video audio and other files Skip Messages During Extraction Checking this box gives the option
247. us Show Hashes Checking this box will display the MD5 Hash Value for all extracted data files Show Error Descriptions Checking this box will show detailed error descriptions for any failure to extract data unchecked failure messages will read An error occurred during the extraction of this section of data Show Image Metadata Checking this box will include metadata information with any downloaded images Fig 92 shows an example of this Downloaded Image Files 4 umber ol entries Fde Path Size Cation Camera Model Canon DIGITAL TXUS Date Time 2001 06 09 15 17 32 Width x Heiaht 040 x 680 2 12 307075551 1 20606 74 5514 gt 7 5 2 Figure 93 Image Thumbnail with Metadata CellDEK User Manual 126 OTHER FEATURES NOTE All metadata may not be retrieved from every image extraction Show Non downloaded Files Un checking this box replaces the list of non downloaded files on the screen with a statement that the user has chosen not to show non downloaded data Output Report Settings Show Unread Messages Un checking this box prevents CellDEK from showing any unread SMS messages on the report Show Hashes Checking this box will display the MD5 Hash Value for all extracted data files Show Error Descriptions Checking this box will show detailed error descriptions for any failure to extrac
248. used to transfer data from the target device CellDEK has a range of 60 feet for Bluetooth connectivity Bluetooth extraction is a wireless communication link On initiation will produce a list of all Bluetooth enabled devices Caution is therefore required when selecting the correct device name list particularly if two devices in the area have the same name Any connection will require confirmation acceptance on the handset in question before the extraction process can commence This prevents accidental connection to other devices Bluetooth capability can only extract data once the handset has been paired with the CellDEK unit Pairing is when you enter a 4 digit code into 51 CAPTURING DATA CellDEK User Manual the phone handset to accept the connection If the 4 digit code is incorrectly entered you cannot access any data from the device Data can only be extracted covertly over Bluetooth if the device is PAIRED FIRST before returning it to the target owner The data could then be extracted remotely without the target owner s knowledge depending on phone type Cell Phone Connection T Set the target device to Bluetooth mode If the device is a recognized cell phone CellDEK will display instructions to set it to Bluetooth mode Select Bluetooth from the Connectivity Option Screen and tap the Run Extraction button A prompt will appear asking the User to Tap Discover Devices to Begin
249. ve verified that CellDEK extracts data reliably The User should consult this information to ensure that the captured data meets their needs Users should consider using CellDEK in an appropriate environment to prevent any messages or calls being received which will change the data on the handset This can also be considered as interception The user should consult with their local authorities for recommendations on legal implication of intercepting data in the context of their examinations Current Software Version of CellDEK As of this writing the latest software version available on CellDEK is 1 22 0 1 Software updates are available by subscription only Please contact Logicube Sales or your CellDEK Distributor to purchase a subscription New software features are listed in the CellDEK activity log every time it is started 10 CellDEK User Manual Features INTRODUCTION There are several changes to handsets that will result from examination by CellDEK If an unread SMS is opened during the examination process the unread SMS status will change to read on the phone or SIM card However CellDEK will report the original status of the message CellDEK operation will remove the missed call message or symbol from the handset Bluetooth acquisitions will leave the extracting device name in the trusted devices list in the handset Bluetooth menu The extraction of SMS messages can be skipped thus preventing t
250. vice from the network This manual NOTE Opening the CellDEK faceplate to access the embedded PC will void the warranty NOTE Hacking the CellDEK application to access the embedded PC s Operating System will also void the warranty Logicube can reload the CellDEK application for a substantial fee Figure 1 CellDEK CellDEK amp User Manual 12 2 Getting Started Overview of the CelIDEK Please refer to Figure 2 below CELL PHONE PHONE CABLE not included ADAPTER STORAGE INFRARED IR M EMITTER Figure 2 CellDEK Overview 1 TOUCH SCREEN All of the CellDEK software and user input is controlled from here 2 AC POWER SOCKET The AC power supply plugs into this socket The power supply charges the CellDEK battery 3 RULER This ruler is used to measure the dimensions of a suspect wireless device lt is printed in mm and inches 4 STYLUS This can be used on the touch screen instead of the user s finger It is more precise and keeps the display clean 5 CELL PHONE This is one of many types of cellular phones that can be connected to the CellDEK amp User Manual 13 CellDEK User Manual 10 11 12 13 14 with one of the included adapter cables PHONE CABLE ADAPTER STORAGE This rack is for cell phone adapter cables that are not currently in use It is also where the CellDEK detects the adapter cable prior
251. wa Figure 81 Back Up Files Selection 5 No matter which button is tapped you will be prompted to insert a USB thumb drive CellDEK User Manual 105 OTHER FEATURES IMPORTANT Ensure that any phones are disconnected from the device bed Please insert USB thumb drive Figure 81d 6 For Multi Partition drives the following selection will be displayed Choose the appropriate storage partition and then tap OK This drive has multiple partitions Please select a partition to copy to 1 39 MB 135 KB free e 982 MB 974 MB free Figure 81 7 storage drive has a partition that is not accessible the message shown below will be displayed This drive appears to have an inaccessible partition 15 this drive encrypted Figure 81f CellDEK User Manual 106 CellDEK User Manual OTHER FEATURES 8 Encrypted drives usually have an active partition that contains the password entry application Below is an example of this type of application It is called WARNING CellDEK is about to run the following executable from the flash device DTVP Launcher exe Only continue if this is from a trusted source Cancel Continue Figure 81g Warning Please ensure that the above named executable application is from a trusted source By selecting continue the operator accepts full responsibility for running the
252. wo step method 1 we copyright the library and 2 we offer you this license which gives you legal permission to copy distribute and or modify the library To protect each distributor we want to make it very clear that there is no warranty for the free library Also if the library is modified by someone else and passed on the recipients should know that what they have is not the original version so that the original author s reputation will not be affected by problems that might be introduced by others Finally software patents pose a constant threat to the existence of any free program We wish to make sure that a company cannot effectively restrict the users of a free program by obtaining a restrictive license from a patent holder Therefore we insist that any patent license obtained for a version of the library must be consistent with the full freedom of use specified in this license Most GNU software including some libraries is covered by the ordinary GNU General Public License This license the GNU Lesser General Public License applies to certain designated libraries and is quite different from the ordinary General Public License We use this license for certain libraries in order to permit linking those libraries into non free programs When a program is linked with a library whether statically or using a shared library the combination of the two is legally speaking a combined work a derivative of the original library
253. y 5 PST excluding US legal holidays or by email to techsupport logicube com CellDEK User Manual 209
Download Pdf Manuals
Related Search
Related Contents
SI-37R0A - Shimano Fleet F55 / F77 Reference Manual User Manual XP600 Kit P7H55D-M PRO - oldschooldaw.com Digital Photo Frame with Color Weather Station XC0345 User Manual ZyXEL Prestige 661HNU-F1 Projet pédagogique La Vague - Académie de Clermont Manual de usuario (versión pdf > 500 Ko) R4C6680 Rev. D Copyright © All rights reserved.
Failed to retrieve file