Exported Threaded M...
 
Notifications
Clear all

Exported Threaded Messages from CelleBrite

10 Posts
6 Users
0 Likes
2,672 Views
4Rensics
(@4rensics)
Posts: 255
Reputable Member
Topic starter
 

Does anybody know if its possible to get the beautiful threaded message view CelleBrite gives you for its chats as an exported report.

CelleBrite loves to show you the nice, clean message format as the user would see it on their phone, however when you try to put it in to a report, CelleBrite takes a MASSIVE dump all over it and turns that beautiful view into a big steaming pile of s**t that nobody can read with any clean context. All I'm looking for is a threaded view of WhatsApp, Telegram, etc the way CelleBrite shows you when it extracts it or puts it in to UFED Reader.

Please help. My sanity is on the line!

Thanks,
4F.

 
Posted : 22/11/2018 10:59 am
(@randomaccess)
Posts: 385
Reputable Member
 

is this what you're after?

https://www.computerforensicsworld.com/cellebrite-group-chat-digital-forensics-tool/

 
Posted : 22/11/2018 11:39 am
4Rensics
(@4rensics)
Posts: 255
Reputable Member
Topic starter
 

Tried that.

I had to convert the message export to a .csv, but it just rung up a ton of errors. I think CelleBrite is exporting tons of rows and columns and its confusing that tool. But thanks.

I've heard MobilEDIT does a pretty good export, I'm going to see what that looks like and if its useable in a report. It just needs to be clean and easy on the eye for a report for cops and CPS.

 
Posted : 22/11/2018 12:06 pm
hectic_forensics
(@hectic_forensics)
Posts: 40
Eminent Member
 

Lost count of the number of times I've actually suggested this to Cellebrite…

 
Posted : 22/11/2018 1:10 pm
4Rensics
(@4rensics)
Posts: 255
Reputable Member
Topic starter
 

You and me both buddy. You and me both!

It already does it in the software so why not let us export that view to put in to reports.

(tears hair out… | )

 
Posted : 22/11/2018 2:00 pm
(@merriora)
Posts: 44
Eminent Member
 

Tried that.

I had to convert the message export to a .csv, but it just rung up a ton of errors. I think CelleBrite is exporting tons of rows and columns and its confusing that tool. But thanks.

Hey

I'm the developer of this, so happy to help out. What type of errors did you observe? What type of 'chat' were you attempting to use it on? (iMessages, SMS/MMS, Facebook, etc)

If you want to contact me off-list, I can try to fix up your data so that the errors don't occur. In some cases, you will need to tidy up the data in the Excel file, especially if it includes a lot of deleted data with missing columns.

 
Posted : 22/11/2018 2:28 pm
4Rensics
(@4rensics)
Posts: 255
Reputable Member
Topic starter
 

Hi,

Its a Telegram Chat between two people. I've tried the chat helper tool, but I'm still gettting errors. Its basically saying "ERRORSource type does not match Source file"
I've opened it in Notepad++ and confirmed it all looks good and the csv is correct. I've also cut it down so that it doesn't have all the crap CelleBrite exports thats not relevant to the basic conversation.

This is the log from the tool

ERROR User may have selected incorrect file type. –> EXCEPTION System.InvalidOperationException Queue empty.
at System.ThrowHelper.ThrowInvalidOperationException(ExceptionResource resource)
at System.Collections.Generic.Queue`1.Dequeue()
at SMS2HTML.Main.<CollectSource>d__4.MoveNext() in Z\Forensic Tools\SMS2HTML\MainForm.csline 136
ERROR User may have selected incorrect file type. –> EXCEPTION System.InvalidOperationException Queue empty.
at System.ThrowHelper.ThrowInvalidOperationException(ExceptionResource resource)
at System.Collections.Generic.Queue`1.Dequeue()
at SMS2HTML.Main.<CollectSource>d__4.MoveNext() in Z\Forensic Tools\SMS2HTML\MainForm.csline 136

****************************************************************************************
PROCESSING COMPLETED at 23 November 2018 094526
*************************************************************************************

ERROR System.IO.DirectoryNotFoundException Could not find a part of the path 'C\Users\726352\Desktop\group-chat-digital-forensics-tool\Output\_PDFs'.
at System.IO.__Error.WinIOError(Int32 errorCode, String maybeFullPath)
at System.IO.FileSystemEnumerableIterator`1.CommonInit()
at System.IO.FileSystemEnumerableIterator`1..ctor(String path, String originalUserPath, String searchPattern, SearchOption searchOption, SearchResultHandler`1 resultHandler, Boolean checkHost)
at System.IO.Directory.GetFiles(String path, String searchPattern, SearchOption searchOption)
at SMS2HTML.Main.GenerateHtml(GeneratingOptions options, Action`1 htmlProcessor) in Z\Forensic Tools\SMS2HTML\MainForm.csline 1430
*************************************************************************************
DONE PROCESSING
****************************************************************************************

Please be sure to check this Log for any recorded errors.

NOTE This product is in BETA release.

Any help or pointers is much appreciated.

Thanks.

 
Posted : 23/11/2018 9:47 am
(@merriora)
Posts: 44
Eminent Member
 

Hi,

Its a Telegram Chat between two people. I've tried the chat helper tool, but I'm still gettting errors. Its basically saying "ERRORSource type does not match Source file"

Any help or pointers is much appreciated.

Thanks.

Hey 4Rensics

Telegram I never had a chance to test with Telegram, so this may be one of the Chats it does not work with. Most of the testing has been done with SMS/MMS and iMessages.

If you are able, can you Export to Excel from the Chat section in Cellebrite a few records?

If you need to, go into the Excel file and change any phone numbers or data that is deemed private or sensitive. With a few records, I can test and see what the issue is. Just send to me offlist (sent you PM).

Cheers,

Rob

 
Posted : 23/11/2018 1:27 pm
bytebrusher
(@bytebrusher)
Posts: 1
New Member
 

Hello guys, Anything new about it ?

I have the same problem

I need to export and display chat conversations as they are displayed on mobile devices, in chat like bubbles. It's easier to show to justice and lay person. Certainly with evidence report attached.

But does´t work on UFED reader export.

 
Posted : 12/02/2019 12:40 pm
(@deltron)
Posts: 125
Estimable Member
 

Hello guys, Anything new about it ?

I have the same problem

I need to export and display chat conversations as they are displayed on mobile devices, in chat like bubbles. It's easier to show to justice and lay person. Certainly with evidence report attached.

But does´t work on UFED reader export.

Looks like PA 7.15 does it now
About 40 Sec into the video

 
Posted : 15/02/2019 12:36 am
Share: