±Forensic Focus Partners

Become an advertising partner

±Your Account


Username
Password

Forgotten password/username?

Site Members:

New Today: 0 Overall: 36738
New Yesterday: 0 Visitors: 225

±Follow Forensic Focus

Forensic Focus Facebook PageForensic Focus on TwitterForensic Focus LinkedIn GroupForensic Focus YouTube Channel

RSS feeds: News Forums Articles

±Latest Articles

±Latest Videos

±Latest Jobs

XAMN - .UFD files?

Discussion of forensic issues related to all types of mobile phones and underlying technologies (GSM, GPRS, UMTS/3G, HSDPA, LTE, Bluetooth etc.)
Subforums: Mobile Telephone Case Law
Reply to topicReply to topic Printer Friendly Page
Forum FAQSearchView unanswered posts
 
  

John000
Member
 

XAMN - .UFD files?

Post Posted: Feb 04, 20 08:09

I'm trying to import .UFD into MSAB XAMN v4.5 but it seems they support only the UFDR format.
Does anyone know if that's the case here? because I saw their marketing ads and they mentioned .UFD ingestion.

Thank you,
John  
 
  

AmNe5iA
Senior Member
 

Re: XAMN - .UFD files?

Post Posted: Feb 04, 20 12:04

Depends. if the UFD points to a physical extraction then you can just import the physical extraction. Otherwise I believe you need the UFDR file. the UFDR file is basically just a zipped up Extended XML file with attachments (pictures etc.)  
 
  

John000
Member
 

Re: XAMN - .UFD files?

Post Posted: Feb 04, 20 14:24

- AmNe5iA
Depends. if the UFD points to a physical extraction then you can just import the physical extraction. Otherwise I believe you need the UFDR file. the UFDR file is basically just a zipped up Extended XML file with attachments (pictures etc.)


This is true for importing extractions using XRY.
I'm talking about importing files via XAMN.  
 
  

mcman
Senior Member
 

Re: XAMN - .UFD files?

Post Posted: Feb 04, 20 17:38

I don't use XAMN but the .UFD itself is just a text file, you can open it with notepad and give it a read, won't really have anything of value to load into XAMN which is why AmNe5iA suggested to load the actual image. It will contain extraction and file details at most.

The UFDR is an actual processed report which makes sense why XAMN ingests it. If they take .UFD files, it's likely used as a pointer to process the actual image in their processing engine as opposed to XAMN.

Hope that helps,
Jamie  
 
  

Finz_Up
Newbie
 

Re: XAMN - .UFD files?

Post Posted: Feb 26, 20 19:16

XAMN does not import UFD file as they are pointers to extracted files/bin files. UFDR files can be imported, however the data will not have been decoded using XRY parsers. It will, however, be another tool to examine the data that was extracted using UFED.

If the device is directly supported with XRY then you can navigate to that profile and perform an import of a bin, zip etc. XRY will then decode the data using their parsers, potentially providing more data. If it is not directly supported then you can choose something such as an Android Generic profile etc depending on the make/model. Once completed you could then open it in XAMN for analysis.

A bin file can be imported directly into XAMN as well, however the data will not have been decoded.

My apologies for the late reply.  
 

Page 1 of 1