Guide

Opening a UFDR without the extraction tool

What it takes to read a UFDR, or any extraction, as part of a case instead of in a separate viewer.

What it means

A UFDR is the report package an extraction tool writes. Reading it is not the problem; reading it beside the body-camera video, the 911 audio, the cloud return and the custody record is. A separate viewer shows one phone; an investigation has more than one source.

What to look for

The questions to ask: Is the file read bit for bit, with the original untouched? Does every row say how well it was read (full, partial or raw), or does the viewer hide what it could not parse? Can the phone's timeline merge with everything else in the case?

How DEVI does it

In DEVI, a UFDR, a raw extraction or another tool's output is booked as an item, hashed, and read into the case timeline and map with every row marked full, partial or raw. The file-types page lists exactly what is read in full.

Analysis in DEVI Workspace

See it on a test case

Walk through it with us

Tell us how your department handles this today, and we will show how DEVI does it.

Request a demoEverything DEVI does