fts. - wikileaks...including gsm (zg), umts (3g) and iden.the integrity of the data stored on the...

2
Advanced Forensic SIM Card Reader and Cloning Software 1 1 SlMiFORQ is a forensic SlM card reader and cloning software SIMiFOR. ASC is a mobile phone SIM card cloning suite for the purpose of examination, extraction and application that allows a duplicate radio blocked SIM to be presentation of evidence. created for the purposes of forensic handset examinations. SIMiFOR@ offers forensically safe, read-only access t o system Re-useable SIM clone cards and user data held on CS-M (2G). UM* (3G). CDG and iDEN SIM cards. It is able t o access both live and deleted data Clone all accessible data, original SIM remains and supports the advanced decoding of WAR SMS and EMS unchanged message types. This information can-be used to identify the Clone from original UM or custom clone from SIM owner and last known location of use, in addition to revealing details any stored contents. Blank done images for all UK networks included Get data image and evidence report in one click e Save clone image files t o create a database Supports multiple SIM card formats (i.e. GSM, UMTS, CDMA and iDEN etc.) Captures USlM extended phonebook data on USlMs with 1000+ records e Obtain location (LAC) information, PLMN codes. voicemail numbers, and handset IMEl data* Generates and reports MD5 hash data of the image file Simultaneous GSM and UMTS data reads *where suppod by service pmviden Additional storage cards available ASC can quickly load and create a clone SIM in seconds. A 'cloned' SIM card has the benefit of holding all the correct data from the evidential SIM, but is radio inactive so will protect the handset evidence by blacking a network connection during analysis. There are two methods of creating a done SIM usingMC: I. Utilise an image file produced by SIMiFORQ reader t Create a clone from custom details using a known set of values, including the lMSl and SIM Serial Numbers Tested and proven to -lX data from 'IM cards A custom SIM done is ideal if a handset needs t o be -mined in over 45 countries worldwide. SIMiFORQ can correctly but the card has lost or disptay Unicode and extended character entries. A controlled countdown entry system for PIN and PUK hamine a phone with a PIN lacked SIM card numbers prevents SIM blocking. SIMiFORQ easily recovers a Examine a phone without connecting to the mobile extended USlM phonebook data such as email addresses and network additional names and numbers that other readers oken miss. Examine a phone without the original SIM being Full forensic decode of the SIM card contents present h c t live and deleted data where available a Fully integrates with SIMiFORe reader User customised report, output in XML format ASC is capable of replicating multiple SIM card formats, Reduce long-term spend on SIM card examinations including GSM (ZG), UMTS (3G) and iDEN.The integrity of the data stored on the original SIM card is not affected. SIMi WR@ is SUCC~~S~UIIY used in-house by FTS for over 20.000 SIMiFORQ and SIMiFORe ASC have been created and each year, 'l facilities are provided to add developed by FTS and benefit from ongoing support t o ensure exhibit references, examiner details and case notes which are al the dara defined in the GSM are induded in the output report N o specialist operator expertise is required, with simple options for creating a SIM report or clone. Telecommunications Services FOrens'C FTS.

Upload: others

Post on 06-Mar-2021

2 views

Category:

Documents


0 download

TRANSCRIPT

Page 1: FTS. - WikiLeaks...including GSM (ZG), UMTS (3G) and iDEN.The integrity of the data stored on the original SIM card is not affected. SIMi WR@ is SUCC~~S~UIIY used in-house by FTS for

Advanced Forensic SIM Card Reader and Cloning Software 1

1 SlMiFORQ is a forensic SlM card reader and cloning software SIMiFOR. ASC is a mobile phone SIM card cloning suite for the purpose of examination, extraction and application that allows a duplicate radio blocked SIM to be presentation of evidence. created for the purposes of forensic handset examinations.

SIMiFOR@ offers forensically safe, read-only access to system Re-useable SIM clone cards and user data held on CS-M (2G). UM* (3G). CDG and iDEN SIM cards. It is able to access both live and deleted data Clone all accessible data, original SIM remains

and supports the advanced decoding of WAR SMS and EMS unchanged

message types. This information can-be used to identify the Clone from original UM or custom clone from SIM owner and last known location of use, in addition to revealing details any stored contents. Blank done images for all UK networks included

Get data image and evidence report in one click e Save clone image files to create a database Supports multiple SIM card formats (i.e. GSM, UMTS, CDMA and iDEN etc.)

Captures USlM extended phonebook data on USlMs with 1000+ records

e Obtain location (LAC) information, PLMN codes. voicemail numbers, and handset IMEl data*

Generates and reports MD5 hash data of the image file

Simultaneous GSM and UMTS data reads *where s u p p o d by service pmviden

Additional storage cards available

ASC can quickly load and create a clone SIM in seconds. A 'cloned' SIM card has the benefit of holding all the correct data from the evidential SIM, but is radio inactive so will protect the handset evidence by blacking a network connection during analysis.

There are two methods of creating a done SIM using MC:

I. Utilise an image file produced by SIMiFORQ reader

t Create a clone from custom details using a known set of values, including the lMSl and SIM Serial Numbers

Tested and proven to -lX data from 'IM cards A custom SIM done is ideal if a handset needs to be -mined in over 45 countries worldwide. SIMiFORQ can correctly but the card has lost or disptay Unicode and extended character entries.

A controlled countdown entry system for PIN and PUK hamine a phone with a PIN lacked SIM card

numbers prevents SIM blocking. SIMiFORQ easily recovers a Examine a phone without connecting to the mobile extended USlM phonebook data such as email addresses and network additional names and numbers that other readers oken miss. Examine a phone without the original SIM being

Full forensic decode of the SIM card contents present

h c t live and deleted data where available a Fully integrates with SIMiFORe reader

User customised report, output in XML format ASC is capable of replicating multiple SIM card formats,

Reduce long-term spend on SIM card examinations including GSM (ZG), UMTS (3G) and iDEN.The integrity of the data stored on the original SIM card is not affected.

SIMi WR@ is SUCC~~S~UIIY used in-house by FTS for over 20.000 SIMiFORQ and SIMiFORe ASC have been created and each year, '''l facilities are provided to add developed by FTS and benefit from ongoing support to ensure

exhibit references, examiner details and case notes which are all the dara defined in the GSM are induded in the output report N o specialist operator expertise is required, with simple

options for creating a SIM report or clone.

Telecommunications Services FOrens'C FTS.

Page 2: FTS. - WikiLeaks...including GSM (ZG), UMTS (3G) and iDEN.The integrity of the data stored on the original SIM card is not affected. SIMi WR@ is SUCC~~S~UIIY used in-house by FTS for

:WNITED KINGDOM : -sbRd&md ,

S X:*M*,~-W * ,

W"@" $+$<$&%:F$* ..:, *?:S*,"; %gz ' , c

T :+44 ( 4 ) ) 7 9 I 9 ~ ~ $ 4 & ~ ~ $ ' : *<*"g .

8: 7;g$<m$:.s-- - Midlands g&.% ;,$cx;$' 2-

Telecommunications Services FO"nslc FTS.

8 Mobile Phone and SIM Card Forensics

HEX MALTER@ Chip Level Forensics

@ Hi-Tech Device, SatNav and Computer Forensics

0 Cell Site Analysis and Expert Witness Services

3 Audio and Digital Imagin Forensics

@ Specialist Investigator Training Services

Forens~cTelecommun~cations Services Ltd. (FTS) IS a world leader In the advanced extraction, analys~s and presentation of data from moblle telephones, cellular networks and all forms o f computing and mobile communlcat~ons technology.

FTS delivers special~st technical servlces and unique data extraction tools t o a wide range of security servlces, police forces, legal services and corporate clients.Through the provision of highly specialised software, hardware and trainlng solutions the company also supports the activities of law enforcement and internal secur' i agencies all over the world.

Based in the UK with ofices in Europe and the USA, FTS has provided advanced technical services since 2000, developing the experience and techn~cal expertise to enable the delivery of Best Evidence as a standard. ki lding on this solid foundation, the bus~ness 1s managed and staffed by qualified individuals from the telecommun~cat~ons ~ndustry and by experienced former police ~nvestigators.

An accred~ted IS0 900 1 2008 company. FTS IS commtted to achlev~ng the lntematlonally recogn~sed IS0 standards relevant to the dellvery of forenslc servlces and software products, ~nclud~ng IS0 17025 2005 and IS0 2700 1 2005 A strong emphas~s IS placed on best practlce and audrted forens~c processes to ensure the constant fidelity, ~ntegrty and cred~b~llty of all FTS's data output and products

Fundamental t o FTS's ongolng success is a slgnlficant and continu~ng ded~catlon to independent research and development, specifically the advancement o f e-forensic extraction techn~ques, spec~alist telecoms products and the validat~on o f digital forens~c processes. It is through thls continued commitment to qual~ty, Improvement and stabil~ty that FTS is assuring i ts long-term ab~lity to deliver Best Evidence through Best Practice, thereby guaranteeing Best Value.