Cellebrite Release Notes

Get Case Insights in Minutes

Investigators have loads of data, but little time. Cellebrite Genesis uses purpose-built AI to uncover source-traced insights across 35+ file formats.

Try the Demo

Start Your Free Trial

Genesis in Action

5-10 minutes to connect individuals, devices and activity linked to a suspicious activity.

16 people identified through linked information in just 15 minutes.

<2 minutes to summarize a 2-year financial investigation.

72+ hours of call recordings were reviewed to rapidly identify admissions, connections, and investigative leads.

Examples based on customer-reported outcomes.

THE INVESTIGATIVE CHALLENGE

Investigation Teams Aren’t Short on Data. They’re Short on Time.

Every case holds a digital witness: messages, media, app artifacts, files, records and communications that can reveal what happened. But when that evidence spans hundreds of thousands of items, manual review is impossible and delays your investigation.

With Genesis, teams can upload case data, ask broader investigative questions, explore source-linked leads and validate every finding against the evidence and records.

Where Genesis Helps Teams Move Faster

AI-Powered Analysis Across Multiple Data Sources

Review UFDRs alongside other case data to connect evidence across devices, files, records and other sources.

Backlogged or Under-Reviewed Cases

Quickly triage large volumes of digital evidence to identify priorities and where to focus first.

Key Moments in Video

Quickly find key moments, objects, people, activity or context without manually reviewing every video.

Cases with Limited Mobile Data

Analyze available evidence beyond mobile extractions, including documents, files, media, communications and other digital data.

Large Audio Collections

Quickly surface relevant conversations, names, themes and leads from hours of audio.

Isolating Specific Windows of Time

Focus analysis on a specific date, time range or event to understand what changed and who or what was involved.

Translations and Multilingual Investigations

Explore evidence across multiple languages to reduce review time and uncover relevant insights faster.

Revisiting Historical Cases

Re-examine existing evidence to uncover overlooked patterns, connections and new investigative leads.

Find the Next Break in the Case

Upload

Bring in the evidence available for the case, from a single file to multiple UFDRs, Portable Cases, call detail records, documents, PDFs, spreadsheets, handwritten notes, images, videos, social media data and audio files.

Ask

Question the evidence in plain language to uncover relationships, timelines, entities, patterns, contradictions and cross-file connections.

Explore

Investigators stay in control, choosing how to examine the evidence through recommended prompts, timelines, location views, mind maps and follow-up questions.

Validate

Trace every insight back to its source, review the underlying evidence and move forward with findings investigative teams can verify.

See what our early access users say

“In a recent grooming and exploitation case, our team ingested data from three suspect devices, and within 15 minutes Genesis surfaced 16 previously unidentified victims. Manual review would have taken our investigators an estimated two weeks. The case has since been forwarded to federal prosecution. Genesis is no longer a luxury tool. It is a critical resource for victim identification in time-sensitive exploitation cases.”

Lieutenant Jerod K. Abshire, Digital Forensics Unit, Calcasieu Parish Sheriff’s Office

THE NEW AGE OF INVESTIGATIONS

Purpose-Built Investigative AI Working Across Your Digital Evidence

Evidence Analysis

Analyzes common files and investigation-specific evidence in case context, including UFDRs, Portable Cases, CDRs, handwritten notes and legally obtained records.

Traceable Results

Links each result back to source material so investigators can inspect the evidence, validate findings and decide what moves forward.

Investigator-Led, AI-Assisted

Supports investigative work while keeping human judgment, verification and decision-making at the center of every next step.

From Insight to Investigation

Use Genesis to uncover critical findings, then leverage Cellebrite Guardian to manage the broader investigation and next steps.

Supporting the Teams Behind Every Case

Investigator

Explore evidence more deeply, ask follow-up questions, test theories and find leads faster, while staying in control of what is validated and acted on.

RESOURCES

Genesis Resources and Best Practices

BLOG

The New Age of Investigations: Cellebrite’s Journey to Genesis

Read More

SOLUTION BRIEF

Cellebrite Genesis: From Evidence Overload to Case Clarity

Read Now

WEBINAR

Meet Cellebrite Genesis: From Digital Overload to Investigative Clarity

Watch On Demand

BLOG

Cellebrite Genesis for Enterprise: Faster, More Defensible Outcomes

Read More

WEBINAR

Finding Answers Faster: Genesis for Private Sector Investigations

Register Now

Frequently Asked Questions

1. What is Cellebrite Genesis?

Genesis is Cellebrite’s AI-powered investigation solution that helps investigative teams review digital evidence, surface relevant leads, connect information across multiple evidence sources and move through investigations faster. Every response links back to the original evidence so teams can quickly verify findings.

1. What types of evidence can Genesis analyze?

Genesis works across 35+ file formats and evidence types, including UFDR files, Portable Cases, call detail records, documents, PDFs, spreadsheets, handwritten notes, images video and audio files.

1. How is Genesis different from general-purpose AI tools?

Genesis is purpose-built for digital investigations. Unlike general-purpose AI tools or standard investigation software, it understands digital evidence formats, follows investigative workflows and links every response back to source material. General-purpose tools are not designed for comprehensive evidence review, source traceability or the guardrails that investigative teams require.

1. Does Genesis replace my investigative team?

No. Genesis reduces the time spent manually reviewing evidence so teams can focus on evaluating findings, making decisions and moving matters forward. Human judgment remains central. Teams verify outputs, determine relevance and decide what moves forward. Subject matter experts provide the expertise to validate findings.

1. Can investigative teams verify Genesis responses?

Yes. Every response links directly back to the supporting evidence, making it easy to review context and validate findings.

1. Does Genesis alter the underlying evidence?

No. Genesis analyzes the data provided to it. It does not alter, add to or modify the underlying evidence.

1. Is customer data used to train AI models?

No. Customer data is not used to train or improve models.

1. How does Genesis help ensure trustworthy AI results?

Genesis is designed with human oversight, source traceability, auditability, role-based access and guardrails that help keep responses grounded in the evidence provided.

1. Can Genesis analyze evidence from multiple sources at once?

Cellebrite Genesis is built for multi-source investigations. It supports analysis across UFDRs, Portable Cases, CDRs, documents, audio, video and more — letting teams ask questions across all investigation data in a single session. Unlike generic AI platforms, Genesis is purpose-built for the evidence types, security requirements and workflow standards that investigation teams rely on.

1. Is Genesis cloud-based or on-premises?

Genesis is a SaaS solution. There is no software to install, and it is accessed through a secure tenant created for your organization.

1. Is my data secure, and where is it stored?

Yes. Your data stays within your organization’s secure Genesis environment and is only used to analyze the evidence you upload. It is never used to train or improve AI models and is not shared outside your environment. Genesis is not an evidence management system, so teams should continue to retain their own copy of the original evidence. Genesis only analyzes the evidence you provide. It does not search the internet, perform web queries or incorporate outside (OSINT) data into its responses. Its built-in guardrails help keep responses grounded in your evidence and aligned with investigative workflows.

1. What languages can Genesis transcribe and translate?

Genesis transcribes and translates audio and text across 100+ languages, including recorded calls, and makes the content fully searchable. It is built to interpret informal language, slang, abbreviations and misspellings, and you can clarify the meaning of specific terms directly in your prompts.

1. What analysis features does Genesis provide?

Genesis helps teams visualize timelines, map locations, identify relationships and uncover connections across communications, financial activity and other evidence types. Every insight is linked back to the original evidence, allowing teams to review the context, verify findings and confidently evaluate the next steps in their work.

1. Are there limits on file size or the number of files I can upload?

Genesis is designed to handle large investigative datasets, including very large files and multi-source investigations. Upload capabilities continue to expand as the platform evolves. If you have specific requirements, your Cellebrite representative can help determine the best approach.

1. Can Genesis analyze data across multiple cases?

Genesis analyzes evidence within a single case. If you need to analyze data from multiple devices, simply add them to the same Genesis case and it will search and reason across all evidence in that case. For investigations that require analysis across multiple cases, Cellebrite Pathfinder is designed to uncover connections between cases, identify recurring persons of interest, detect patterns across investigations and deconflict related cases. For broader AI-assisted investigations, Cellebrite Guardian Investigate applies AI across all evidence within a case, including mobile data, computer evidence, cloud data, OSINT, investigator notes and other supporting materials.

1. How is Genesis priced?

Genesis uses a flexible, usage-based pricing model built on credits, with organization-based pricing and unlimited users. Credits are consumed when data is uploaded and processed and when prompts are entered, and usage can be monitored from the admin dashboard. A free trial is available so your organization can gauge usage before working with your account manager on the right fit.

1. Who can use Genesis?

Genesis is designed for investigation teams across law enforcement, government agencies, enterprise organizations and service providers. Because Genesis is cloud-based, you can get started quickly without deploying infrastructure. You do not need to be an existing Cellebrite customer, and Genesis can be used independently or alongside other Cellebrite solutions. It also supports evidence beyond UFDRs, allowing you to analyze a wide range of digital evidence.

Ready to move from digital overload to investigative clarity?

See how Genesis helps your team work through digital evidence faster, verify findings and move investigations forward.

START YOUR FREE TRIAL

Original source

CLOSE THE BATTLEFIELD BLINDSPOT

Every soldier a sensor. Every device a source.

Every soldier a sensor.

Every device a source.

The Cellebrite Tactical Extraction Kit (C-TEK) is a ruggedized, all-in-one mobile forensics field kit that gives military teams the hardware, software and power to access and analyze devices at the point of capture.

Built around Cellebrite’s industry-leading digital forensics capabilities, C-TEK helps forward-deployed teams quickly triage data from phones, SIM cards, drones and portable media without a lab, turning captured devices into decision advantage.

UNDER 5 MINUTES

TIME TO DEPLOY, FULLY SELF-CONTAINED

PHONES | DRONES | COMPUTERS | + MORE

FEATURE PHONES, SIM AND SD CARDS, GPS DEVICES, REMOVABLE MEDIA

ALL-IN-ONE

HARDWARE + SOFTWARE + POWER + CONTAINMENT

WHAT C-TEK SOLVES

Every device is a window into the target’s world, but most captured in the field are never explored.

Digital extractions can’t wait for the lab.

Phones, SIM cards, drones and removable media captured in the field contain the identities, movements, communications and logistics that drive a mission forward. C-TEK puts extraction capability at the point of capture, so the exploitation window doesn’t close before analysis begins.

Forward teams need one kit, not a bench of tools.

C-TEK packages the hardware, software, power and field accessories teams need into a ruggedized, mission-ready bundle, deployable in under five minutes, in any environment, without lab infrastructure.

Every operator becomes a source, not just a collector.

On-device machine learning surfaces what matters immediately, so any trained operator can recognize priority data without a forensics background. The capability stops being a specialist bottleneck and starts being a unit-wide advantage.

What’s found in the field feeds the full intelligence cycle.

C-TEK is built to hand off. Data collected at the edge moves cleanly into Cellebrite analysis, evidence management and intelligence workflows at the FOB, the lab and central command — without reprocessing.

WHAT C-TEK ENABLES

Move Faster From Captured Device to Mission Insight

On-device machine learning surfaces what matters immediately, reducing cognitive load so operators without a forensics background can act on priority data — then preserve it for deeper analysis downstream.

Trace movement and points of origin

Use data from supported drones, GPS sources, phones and computers to identify routes, coordinates, launch and recovery locations and movement patterns — where activity started, where it moved and which locations matter next.

Surface key contacts and communications

Triage data from supported phones, feature phones, SIM and USIM cards, computers and connected media to identify contacts, communications, identifiers and links between people, devices and networks.

Uncover planning, logistics and intent

Review messages, files, media, app artifacts, computer data and removable storage to surface planning details, operational logistics, timing and other indicators that support faster decisions.

Hand off clean to deeper analysis

Move collected data into Cellebrite analysis workflows to correlate artifacts, build pattern of life and support mission handoff — without reprocessing.

What’s included in the kit?

C-TEK ships ready to deploy straight out of the box.

• Durable, waterproof backpack with MOLLE webbing and room for additional tactical gear
• Getac K120 ruggedized tablet or S410 Pro laptop, with Inseyets installed
• 4TB Digital Collector dongle for computer collection
• Cable bag covering a wide range of device types and models
• Small, medium and large Faraday bags
• USB hub to enable more device inputs
• TSA-compliant commercial battery bank
• 5590/2590 charger for NATO-standard military batteries
• DC-to-AC inverter to charge from vehicles and military batteries

Built for Teams Operating Where Time, Connectivity and Specialized Support are Limited

• Special operations and sensitive site exploitation
• Military intelligence units
• Conventional military

SSE and DOMEX operations depend on what gets collected at the point of contact. In austere environments, speed, portability and minimal dependencies aren’t preferences — they’re requirements. C-TEK is a deployable kit built for teams that need to move fast, operate disconnected and preserve mission momentum without waiting on lab infrastructure.

FROM THE POINT OF CAPTURE TO COMMAND

Extraction at the point of capture is the beginning of the intelligence cycle, not the end.

C-TEK is part of Cellebrite mission systems, and it’s built to hand off. Teams triage in the field, run high-volume extractions when speed matters most, then move collected data into the Cellebrite analysis, evidence management and intelligence workflows already in use at the FOB, the lab and central command.

Acquire and triage at the edge

On arrival: devices go straight into Faraday bags to prevent remote wipe or new writes. The Inseyets tablet or laptop runs off the battery bank, a vehicle, or a NATO-standard battery, then connects to devices through the USB hub and cable set. Fully self-contained, in under five minutes. Then the operator chooses a mode based on how much time the mission allows.

Mode 1 — Selective extraction. When answers are needed now.

Unlock, run a quick review, identify priority data, and carry the devices back to the FOB for full analysis. The fastest route from a captured device to something a team can act on in the field.

Mode 2 — Full field extraction. When everything needs to come back.

Unlock and run a full file extraction to a hard drive, then carry the drive back to the FOB. Built for volume — devices are processed on site and the data travels, not the hardware.

Go deeper at the FOB or lab

Move collected data into Pathfinder and broader Cellebrite analysis workflows to correlate artifacts, build timelines, connect people and devices, and reveal networks and patterns that aren’t visible in the field.

Plan operations at central command

Fuse findings across operations to give leaders a clear, defensible understanding of the threat environment for resource allocation and campaign planning. Guardian preserves, manages and shares collected data so mission stakeholders maintain continuity from field collection through downstream workflows.

Close the blind spot at the point of capture.

Close the blind spot at the point of capture.

C-TEK is a force multiplier at the point of capture. See what changes when every operator can carry the capability.

Frequently Asked Questions

1. What is C-TEK?

C-TEK is the Cellebrite Tactical Extraction Kit — a ruggedized, all-in-one hardware and software bundle that lets defense and intelligence teams conduct lawful digital collection and triage at the point of capture.

2. Who is C-TEK for?

C-TEK is a field solution, built for teams whose work happens away from lab infrastructure — forward-deployed military units, and intelligence and border security teams operating at checkpoints and in disconnected environments. Because the kit is configured specifically for field operations, a briefing is the right starting point to confirm fit for a particular operating environment.

3. What devices does C-TEK support?

Phones, drones, computers and more — including supported iOS and Android devices, feature phones, SIM and USIM cards, drones, GPS sources, computers, SD cards, USB drives and other removable media.

4. Does using C-TEK require a digital forensics background?

No. On-device ML triage surfaces what matters immediately, so operators can recognize what they’re looking at without specialist training. Enablement and training resources are available to support deployment.

5. How does C-TEK work alongside existing lab capability?

C-TEK is the field complement to lab capability, not a replacement for it. It starts collection and triage at the point of capture and hands data cleanly downstream with chain of custody intact, so the exploitation window — which closes in minutes — isn’t lost while a device is in transit.

6. Does C-TEK work offline?

Yes. C-TEK is built for disconnected environments — offline extraction and unlocks, on-device analysis and a power setup combining a commercial battery bank with NATO-standard military adapters and a vehicle inverter for complete grid independence.

7. How does C-TEK fit into the Cellebrite ecosystem?

C-TEK extends Cellebrite’s digital forensics capability to the tactical edge, then feeds collected data into Cellebrite analysis, evidence management and downstream intelligence workflows.

Original source

What’s New in Endpoint Inspector SaaS 2.6

Mobile Test Devices

Each instance of Endpoint Inspector can register up to two mobile devices for testing purposes. You may find this useful for testing updates to your Endpoint Inspector instance or the mobile collection agents, to test your network configuration, or to test a new mobile OS version. Test devices may also be useful for audits, compliance, or certification purposes, and even for training new users of Endpoint Inspector.
All normal collection capabilities are available with no limitations. Test devices have no affect on the mobile collections entitled by your license. To remove a test device, please contact Cellebrite customer support at [email protected].
An Endpoint Inspector administrator can either register an existing mobile device as a test device or register an entirely new mobile device as a test device. When you register an entirely new device, the owner of the device receives an email message from your instance of Endpoint Inspector. The device owner follows instructions in that email message to download and use the mobile agent to enable the initial collection required for registration. After a mobile device is registered as a test device, you can request collections from it exactly as you would from any other mobile device. You can see and manage its collections on the Collections page, review a collection’s details, and examine the collection in Cellebrite Inspector. You can the status of your test devices on the License page. For more information, see the “What’s New” chapter of the Endpoint Inspector User Guide.

Mobile Collection Features Now Available in the UK

Customers in the UK can now use these recently released mobile collection features:

• Filtering by date range when decoding is enabled.
• Connecting your RelativityOne instance to your Endpoint Inspector instance, to enable collecting message data from mobile devices directly from within RelativityOne.
• RSMF file format for message collections from mobile devices.
  To use these features, you must acknowledge the Data Processing Agreement. For more information, see these topics in the Endpoint Inspector User Guide:
• Data Processing Agreement
• Filter by Data Range
• RelativityOne Integration
• Integration with RelativityOne
• Setting Up Your RelativityOne Connection to Endpoint Inspector
• Define a Mobile Collection

Workflow Enhancements

Small user interface enhancements were made to improve the workflows for defining mobile and computer collections. For computer collections, there are two new options for selecting according to file extensions

• Office Files includes these extensions for commonly searched office applications: DOC, DOCX, DOCM, DOT, XLS, XLSX, XLSB, XLSM, PPT, PPTX, PUB, PDF, TEXT, TXT, PAGES, NUMBERS, RTF, ACCDB, ACCDE, ACCDR, ACCDT, and ACCDU
• Email Files includes these email file types: EML, EMLX, MSG, MBOX, PST, and OST

New Advice for Custodians of iOS Devices

This advice is added to the information provided in the “Custodian Tips and Requirements” topic in the “Custodian Tasks” chapter of the Endpoint Inspector User Guide.

• For devices running on iOS 18.2 and later, open Settings and then tap FaceID&Passcode > Stolen Device Protection > Turn off.
  To note: These features are available only for Endpoint Inspector SaaS. There are no new or changed features for Endpoint Inspector on-premise.
  For more enhancements and issues fixed in this release, a user guide, and a quick start guide, visit the
  MyCellebrite Portal.

Original source

Image Analyzer Update

These categories were added to Image Analyzer:

• Aircraft
• Medical
• Meme
• Offensive Gesture
• Schematic

Bitlocker Improvements

Bitlocker Improvements

Improvements were made to the workflow and user interface for decrypting and ingesting evidence sources protected by Bitlocker.

Improvements to Filtering

These improvements were made to filtering within specific views:

• For Internet History in the Actionable Intel view, Safari (10+) was changed to simply be Safari. This is consistent will all other views and ensures consistent filtering behavior.
• You can now use the colon (:) as an OR filter, the same way you can in the File Filter view. For example, in a text entry view filter such as Participants, typing ParticipantFirst:ParticipantSecond:ParticipantThird returns all results where participant is ParticipantFirst, or ParticipantSecond, or ParticipantThird.

For more enhancements and issues fixed in this release, a user guide, and a quick start guide, visit the MyCellebrite Portal.

Original source

What’s New in Endpoint Inspector SaaS 2.5

Decoding and Filtering Mobile Collections

Until this release, choosing the categories of data for the Endpoint mobile agent to target has been the only way to narrow the focus of a mobile collection.
Endpoint Inspector SaaS version 2.5 lets you additionally filter the resulting mobile collection file by enabling decoding. Decoding creates meaning from the raw data, thereby allowing you to apply additional filters. The resulting collection includes both UFDR and RSMF files. The precision enabled by decoding and filtering ensures that only relevant data is collected, resulting in smaller, more refined mobile collection files.
This release makes the first decoding filter available, which is date range. If you specify a date range, data is collected for the selected categories only when at least one of these activities falls within that range: sent, received, last written, and last accessed. You can also choose whether to include or exclude mobile data that has none of these dates. If you do not specify a date range, all mobile data is collected from the selected categories.
You must enable decoding at the time you define a mobile collection with Endpoint Inspector or RelativityOne. You cannot decode and filter a collection after it is complete.

Online Help

From the new Resources page in the Endpoint Inspector web interface, you can now access all technical publications in the form of online help. You can also send an email to Cellebrite technical support.

Update Requirements

Cellebrite updates environments for Endpoint Inspector SaaS over the course of the day of release. After your environment is updated, users may need to clear their browser cache to ensure the newest user interface is loaded. Endpoint Inspector may prompt users to do so.

Mobile Agent on Windows Computers

On Windows computers, the mobile agent must be uninstalled before installing a newer version. New mobile agents cannot be installed directly over a previous version of the mobile agent on Windows computers.

Linux Agents

Endpoint agents for Linux computers cannot be updated directly from version 2.2.3 to version 2.3. Linux agents must first be uninstalled, then you can install version 2.3.

To note: Note: These features are available only for Endpoint Inspector SaaS. There are no new or changed features for Endpoint Inspector on-premise.

For more enhancements and issues fixed in this release, a user guide, and a quick start guide, visit the MyCellebrite Portal.

Original source

Cellebrite is pleased to announce the following new features in this release of Endpoint Inspector.

Note: These integration features are available only for Endpoint Inspector SaaS. This release for Endpoint Inspector on-premise will be available later this month.

Integration with RelativityOne

Cellebrite is pleased to announce the integration of Endpoint Inspector with RelativityOne. With your RelativityOne instance connected to your Endpoint Inspector instance, you can seamlessly collect messages and attachments from remote devices running on Android and iOS with the speed and precision of Endpoint Inspector, without ever leaving RelativityOne.
Each export package that Endpoint Inspector automatically sends to your RelativityOne storage repository includes these files:

• The original collection file in UFED zip format
• Messages and attachments in an RSMF collection
• The UFED reader file (UFDR]
• The Device Report
• The Collection Report
• The Results.csv file

Getting Support

For more enhancements and issues fixed in this release, a user guide, and a quick start guide, visit the MyCellebrite Portal.

Original source

Mobile Agent Branding

Organizations can now customize the branding of the Endpoint mobile agent, including the name and icon. This is particularly beneficial for service providers. Contact Cellebrite for customization options.

Enhanced Mobile Collection Information

The Details panel for completed mobile collections now includes more information about the device, such as:

• Types of data targeted in the collection.
• Device details and a list of installed apps, indicating whether they were installed by the system or the user.
  PDF files with this information, along with the collection summary, are also uploaded to the repository.

Enhanced iOS Message Collections

When selecting Messages for a mobile collection, messages and their attachments from popular third-party apps (such as WhatsApp, Facebook Messenger, Line, and approximately 15 others) are now automatically collected from iOS devices.

Features Exclusive to Endpoint Inspector SaaS

Single Sign On with Multi-factor Authentication Endpoint

Inspector SaaS users can now implement single sign-on (SSO) with multi-factor authentication (MFA), enhancing security and simplifying access management.

Deployment for Endpoint Inspector SaaS

SaaS Endpoint servers will be updated over the course of the day of release. After your Endpoint server is updated, users may need to clear their browser cache to load the newest user interface. Endpoint Inspector may prompt users to do so. This ensures that each user will see the updated interface.

Linux Agents

Endpoint agents for Linux computers cannot be updated directly from version 2.2.3 to version 2.3. Linux agents must first be uninstalled, then you can install version 2.3.

Features Exclusive to Endpoint Inspector On-Premise

These features were previously available to customers using Endpoint Inspector SaaS.

Enhanced iOS Message Collection

The process for collecting messages from iOS devices has been streamlined. Now, when you select Messages for mobile collection, all attachment types—such as images, videos, audio, and documents—are automatically included in the collection from iOS devices.

Improved WhatsApp Cloud Collection

Collecting data from WhatsApp has become more efficient. The collection now starts immediately once the custodian scans the authorization QR code, speeding up the process.

Deployment for Endpoint Inspector On-Premise

Endpoint Inspector On-Premise must be updated incrementally unless specified otherwise. In other words, you cannot skip a version when you update the Endpoint server. For example, you cannot update to version 3 directly from version 1. You must first update to version 2, then update to version 3.

Note: On-premise Endpoint servers must be updated from version 1.8 directly to version 2.2. No intermediate version was released for on-premise servers. From there, servers can be updated to version 2.3.

Original source

What’s New in Endpoint Inspector 2.2

Deployment for Endpoint Inspector SaaS

SaaS Endpoint servers will be updated over the course of the day of release. After your Endpoint server is updated from version 2.1 to 2.2, each user must clear their web browser’s cache before they log in. This ensures that each user will see the updated interface. (This is necessary only for this release, not all releases.)

Deployment for Endpoint Inspector On-Premise

Endpoint Inspector on-premise must be updated incrementally unless specified otherwise. In other words, you cannot skip a version when you update the Endpoint server. For example, you cannot update to version 3 directly from version 1. You must first update to version 2, then update to version 3.

Note: On-premise Endpoint servers must be updated from version 1.8 directly to version 2.2. No intermediate version was released for on-premise servers.

Agent for Linux Computers

Cellebrite is pleased to announce that Endpoint Inspector can now collect data from Linux computers running either RedHat RHEL 9.3 or Ubuntu 22.04 LTS.

Linux collection capabilities are similar to capabilities for collecting from Mac and Windows computers. You can target specific files for collection, create disk images, and collect incident response information and artifacts. However, volatile artifact collections from Linux computers do not include screen shots or clipboard data. Linux collection and image files are in L01 format. You can ingest collections from Linux computers into Inspector for examination.

Android 14 Support

Mobile collections can now be made from devices running Android 14.

Enhancements to the Server Interface

The web interface for the Endpoint server has been improved to enhance usability and optimize workflows.

Improvement to WhatsApp Cloud Collections

WhatsApp cloud collections have been improved. Profile pictures are now included in the collected data.

Documentation and Guides

For more enhancements and issues fixed in this release, a user guide, and a quick start guide, visit the MyCellebrite Portal.

Original source

What’s New in Cellebrite Digital Collector 3.7

Support for macOS Sonoma 14.3

Mac T2, M1, and M2 computers running macOS Sonoma 14.3 can be started (booted) from Digital Collector as well as run Digital Collector live.

Digital Collector Devices

On 120 GB dongles updated to version 3.7, the DCData partition is a bit smaller than in version 3.6.

Improvement to the Image View

In the Image view, the Image Name field was moved to just above the Destinations box. This change ensures that the image file has the same name across all destinations. The Image Name field also now ensures that you can type only characters that are valid.

Improved Logging Information

The new Acquisition Hardware folder contains a file named SystemSummary.txt. That file contains information about the computer that Digital Collector is running from. The AcquisitionLog.txt file provides information about the computer that is the source of the acquired data.

For more enhancements and issues fixed in this release, a user guide, and a quick start guide, visit the MyCellebrite Portal.

Original source

Get ready to simplify the extraction workflow for even more devices with the new UFED and Responder v7.69 update.

What’s new:

• Full file system support using Smart Flow for the following devices:
  • Samsung Galaxy S23 FE, A05, A15, A25
  • Samsung Galaxy Tab A9, Tab A9+, Tab S9, Tab S9+, Tab S9 Ultra, Tab S9 FE, Tab S9 FE+
  • Motorola Moto G14, Moto G34, Moto G54, Moto G84
• Infrastructure changes to enhance memory usage during extraction and accommodate newer, larger mobile devices.

For more information about about the new capabilities and features, read the Release Notes document available to you on the MyCellebrite Portal.

Original source