Digital forensic examiners are investigators who are experts in gathering, recovering, analyzing, and presenting data evidence from computers and other digital media related to computer-based .They might work on cases concerning identity theft, electronic fraud,investigation of material found in digital devices ,electronic evidence, often in relation to cyber crimes.
Clone SIM ID The “Clone SIM ID” option allows an investigator to create an exact replica of the original SIM ID and extract phone data without allowing the cellular device to connect to the internet, which preserves the current call and SMS history and no Faraday Bag is needed. This option also allows an investigator to manually enter the ICCID or IMSI of the SIM, if the SIM card is missing, so that they can create a SIM card that mimics the original SIM card. This option also allows an investigator to clone and extract data from the original SIM card if it is locked by a PIN.
1. To clone a SIM card ID, if you have the original SIM card, click the “OK”
button on “Clone SIM ID”.Click “OK”
on “Clone an existing SIM card”.
Insert The SIM Card into the matching size slot
Select the partition to read, “USIM (3GPP)” or “SIM
(GSM)” and click “OK”. Remove the SIM card that you want to clone and then insert the Target SIM
ID Access Card into the SIM card slot and click the right arrow to continue.
Digital Forensics: CelleBrite Physical Analyzer AKSFRIDGE.SYS Blue Screen Error
CelleBrite Physical Analyzer AKSFRIDGE.SYS Blue Screen Error
The Cellebrite UFED Physical Analyzer
Cellebrite - BSoD When Installing or Upgrading Win10
The old HASP driver can cause Blue Screens in the following cases. The message is:
Stop code: PAGE_FAULT_IN_NONPAGED_AREA
What failed: aksfridge.sys
Case #1 - When installing Cellebrite on a Windows 10 Version 2004 OS.
Case #2 - When upgrading to Windows 10 Version 2004 (the latest as of May, 2020) when Cellebrite is already installed.
Resolution - The old HASP driver needs to be upgraded before you can proceed. Download and install the updated HASP driver from https://digitalintelligence.com/files/HASPUserSetup.exe before installing Cellebrite or upgrading Windows to version 2004.
F:\Digital Forensics Tools.exe = DIGITAL FORENSICS TOOLS.EXE-1C722632.pf
z:\Digital Forensics Tools.exe is executed
it is mapped to its UNC path
\\Localhost\Z\Digital Forensics Tools.exe = DIGITAL FORENSICS TOOLS.EXE-7DE46524.pf
Note that I’ve got several applications with the same name, but a different location. That is evidence by the somewhat-similar hashes, and in many application’s cases, is likely indicative of folder structure change.
