Can Autopsy open UFED files?

Hi.

As far as I know Autopsy does not parse the Cellebrite .ufdr, . ufd, .ufdx files. The .ufd file is a simple text document which is in INI format and the .ufdx is a small XML document. Both of these file types could be easily parsed by Autopsy with a plugin. The .ufdr is a .zip archive containing all of the report files as well as a report.xml file which would need to be parsed and linked to all of the files in the archive. If someone was inclined they could write a plugin to parse this as well but I don’t believe it has been done yet.

1 Like