Paraben`s DS 7.0 Release Notes

1
Paraben’s DS 7.0
Release Notes
2
Welcome to Paraben’s DS 7!
Device Seizure is designed to allow investigators to acquire the data contained on mobile
phones, smartphones, tablets, GPS, and PDA devices in the most forensically sound manner
possible. Since 2001, Paraben’s mobile tools have been acquiring and analyzing data from devices.
Device Seizure employs different techniques with each type of device. In most cases, images are
created both logically and physically. This gives the examiner the maximum access to data that
includes information such as phone numbers, dates, times, pictures, and call history for both active
and deleted data. There are many unique analysis functions as well that come with the powerful
Device Seizure acquisition engines to include bookmarking, advanced searching, importing of backup
data, and case data comparisons. Device Seizure supports over 22,000+ device profiles and the list
keeps growing with each release. Device Seizure is a must-have tool for any lab.
Device Seizure has some additional functionality that makes it the ideal analysis engine. For
data associated with GPS coordinates or Call Detail Records (CDR) that might be included with the
case, you can import this information into Google Earth directly through Device Seizure. In addition
to importing data, Device Seizure contains case comparison functionality to allow for continued
review of case data against the original acquisition. This functionality is crucial to compare a device
after both sides have done examinations to insure changes have not occurred. Device Seizure was
designed with forensic examiner’s needs in mind.
This document allows you to get more information about DS 7.0 features and changes.
3
What’s new in DS 7.0!

A completely new modern looking interface including ribbons, improved layout, new graphics,
improved options window, improved grids, acquisition wizard, etc.

Auto-detect in acquisition wizard now available. Now, you just connect your device and start an
acquisition without having to load drivers or select drivers (manual options are still available as well.)
This completes the integration of DDS into DS.

Support of Android logical acquisition of Android 5.0 & 5.0.1 Lollipop has been added

Support of Android 4.4 KitKat physical acquisition has been added.

Support of Password protection removal for Android OS up to 4.1 has been added.

BlackBerry 10 backup import has been added. It includes the following features:

o
Decryption of encrypted backups.
o
RIM BlackBerry 10 backup data parsing (SMS, Call logs, Notes, Calendar, etc.)
o
Application list parsing.
o
Application data parsing (WhatsApp, Skype, BB Messenger, Evernote).
SMS and iMessages acquisition for iOS devices has been improved. Now, links to attachments (like
sound attachments) are included.

Call History parsing for iOS 8.x devices has been improved. Now more information about the calls is
available.

iOS acquisitions have become faster.

Cell/Wi-Fi locations parsing for iOS 6–7 jailbroken devices has been added.

Notes parsing for iOS 7 devices has been added.

Device properties parsing from the iPhone backup has been added.

New drivers have been added to the driver pack (such as drivers for Nexus 4, LG G3, HTC, etc.).

Pre-Release of Windows 10 support!

Support of Huawei Ascend II

Support of Kindle Fire
4
“App” Application
WhatsApp
KIK
Gmail
Evernote
Mail.ru
TextFree
TextPlus
Vkontakte
Facebook
Facebook Messenger
Pinger
Skype
iOS
Android
X
X
X
X
X
X
X
X
X
X
X (iOS 7.x
and higher)
X
iPhone
Devices that
are Not
Jailbroken
Only & [NEW!]
iPad
X
X
X
X
X
X
X
X
[NEW!]
BB Messenger
Twitter
[NEW!]
Chrome
[NEW!]
VoiceMail
[NEW!]
BlackBerry
10 Backup
X
X
X
X
X
X
X
DS Version
6.80 (Android &
iOS)
7 (Blackberry)
6.66
6.66
6.66
6.66
6.66
6.66
6.66
6.66
6.66
7 (iOS)
6.66
6.66 (iOS)
6.80 (Android)
7 (iPad)
7
7
7
7
Additional App parsing is being done with each new release. If there is an App of interest, please email
us for review in a future release.
5
DS Smartphone Support
Android Devices
Logical Support
Physical Support
Cupcake (1.5)
Doughnut (1.6)
Éclair (2.0–2.1)
Froyo (2.2–2.2.3)
Gingerbread (2.3–2.3.7)
Honeycomb (3.0–3.2.6)
Ice Cream Sandwich (4.0–4.0.4)
Jelly Bean (4.1)
Jelly Bean (4.2–4.3)
KitKat (4.4–4.4.2)
Lollipop (5.0)
X
X
X
X
X
X
X
X
X
X
X
X
X
X
X
X
X
X
X
Partially
-
BlackBerry Devices
Logical Support
Physical Support
1.0
3.6
5.0
6.0
7.0
7.1
10.x
X
X
X
X
X
X
-
X
X
-
iOS Apple Devices
Logical Support
Physical Support *
1.x
2.x
3.x
4.x
X
X
X
X
X
X
X
X
5.x
6.x
X
X
X
X
7.0.x
7.1
7.1.1
[NEW]
8.0.x
[NEW]
8.1.x
X
X
X
X
X
X
X
X
X
X
Windows Phone
Logical Support
Physical Support
7.0
8.0
8.1 (beta)
X
X
X
N/A
N/A
N/A
* Physical support is determined based on hardware. See the chart below.
6
iOS Device Hardware
1G
2G
3G
3GS
4G
4S
5
5C
5S
6
6 Plus
iPad 1st Gen
iPad 2nd Gen
iPad 3rd Gen
iPad 4th Gen
iPad Air
iPad Mini 1st Gen
iPad Mini 2nd Gen
iPod Touch 1st Gen
iPod Touch 2nd Gen
iPod Touch 3d Gen
iPod Touch 4th Gen
iPod Touch 5th Gen
Logical
Physical
X
X
X
X
X
X
X
X
X
X
X
X
X
X
X
X
X
X
X
X
X
X
X
X
X
X
X (Jailbroken only)
X
X
X
-
7
DS Key Features
General Features:
- More than 50 plug-ins for working with more than 25 types of devices including:
-Cell phones
-Smartphones (iPhones, Androids, BlackBerry)
-Windows Phones & Portable devices
-PDAs
-Tablets (iPads/iPod Touches, Android tablets)
-Media Devices (iPods, eReaders)
-GPS devices
-Media cards
[NEW!]
Device auto-detection during acquisition
- Support of more than 22,000 device profiles
- USB, serial, and Bluetooth (Limited) support
- Verification of file integrity with use of MD5 and SHA1 hash values
- Deleted data recovery on all types of devices
- Encrypted image files to guarantee image integrity
- Google Earth integration
- Database driven case format for secure data storage and large volume storage
Bonus Features:
- Includes a free 1 year subscription with purchase
- Includes license to Link2 for full link analysis chart capabilities
- Includes comprehensive cable kit
GUI Features:
- Special Hex and Text viewers for viewing data in hex and text representation
- Image viewer for convenient viewing of all types of images
- File viewer for viewing files of different types (*.html, *.doc, etc.)
- Grid viewer for an easy-to-read format of SMS, Phonebook, Calendar, etc.
- Data Sorter function for sorting thousands files from the acquired data by file types
- Quick export functions for exporting media file types from case data
- Bookmarking for easy navigation and review of data
Plug-ins Features:
- Comprehensive data acquisition of text messages, address books, call logs, and more
- Built-in recovery of a variety of passwords from devices
- Portable Device Plug-in added for Windows 8 and all devices that mount as media devices
- Windows CE registry viewer
- Acquisition of complete GSM and CDMA SIM card information including deleted data
- Full flash download for certain models of cell phones, PDAs, and smartphones
- SIM Cards cloner
- Parsed data viewer for smartphone Application data
8
Other Features:
- Exporting of the acquired data to the PC
- Search within the acquired data including file search, Hex, and Text (including Unicode)
searches
- Import of databases acquired with PDA Seizure, Cell Seizure, SIM Card Seizure, CSI Stick, and
Deployable DS
- Import of other desktop data:
-RIM BlackBerry Backup (IPD & BBB) including [NEW!]BlackBerry 10
-Apple iPhone Backup (Including encrypted back-ups)
-KLM and GPS maps
- Import of data from other tools
-Cellebrite cases
-Tarantula back-ups (Chinese Phone Support)
- Viewing acquired data with external viewers
- Comprehensive HTML, Text, CSV, XLS, and PDF reporting, including Timeline report
- Case Comparer compares two databases to verify differences in their structure with bookmarks
creation and quick reporting
- Data saving to CD/DVD. You can easily take your case with you without using any external
applications
- Cell Tower Import for viewing call locations within Google Maps
9
DS 7.0 New Features
A completely new modern looking interface including ribbons, improved layout, new graphics,
improved options window, improved grids, acquisition wizard, etc.
10
11
12
Auto-detection of device in acquisition wizard now available. Now, you just connect your
device and start acquisition.
13
14
15
BlackBerry 10 backup import has been added.
16
17
Application data parsing for iOS and Android devices has been improved.
Facebook Messenger (for iOS 7 and higher)
Twitter application (for iOS devices)
18
Chrome application (for iOS devices and Android devices)
19
VoiceMail application (for iOS devices)
SMS and iMessages acquisition for iOS devices has been improved. Now, links to the
attachments, such as sound attachments, are added to them.
20
Call History parsing for iOS 8.x devices has been improved. Now more information on the
calls performed is available.
21
Cell/Wi-Fi locations parsing for iOS 6–7 jailbroken devices have been added.
Notes parsing for iOS 7 devices have been added.