Description
On the UFED Touch, it is possible to select extraction of data and choose from a wide list of vendors. After the data extraction is done, it is possible to analyze the data in the Physical Analyzer application.[3]
The Cellebrite UFED Physical Analyzer supports the following features:[3]
Extract device keys which can be used to decrypt raw disk images, as well as keychain items.
Revealing device passwords, although this is not available for all locked devices
Passcode recovery attacks
Analysis and decoding of application data
Generating reports in various formats such as PDF and HTML
Dump the raw filesystem for analyzing it in other applications