NEW! Tarantula 2.0
Now supporting Android MTK! Intuitive and forensically sound, Tarantula 2.0 is the ONLY comprehensive system for Chinese cell phone analysis. Tarantula 2.0 supports all major Chinese manufactured chipsets -- Mediatek, Spreadtrum, and Infineon, even if the phone is pin-locked. Tarantula 2.0 extracts a full physical image of the cell phone flash chip , decodes, and reports low-level data – even deleted data -- including phone file system, SMS, call logs, phone book, and critical phone information such as passwords, IMEIs and flash chip identification. Tarantula 2.0 now supports both feature phone chipsets as well as Android smartphone chipsets.
Overview of Cell Phones Based on Chinese Chipsets
Currently, 30% of cell phones worldwide are based on chipsets designed and manufactured in China. This trend is expected to increase to over 50% going forward into 2012 and beyond, as Chinese mobile device production tops 800 million units.
Supported Chinese chipsets
Automatic Pin Definition
Because of the lack of standardization found among them, simply establishing data communication with a Chinese phone can become a large part of the examination effort. Fortunately, Tarantula takes care of this work by automatically defining the phone's data and power pin configurations with special hardware designed exclusively for examination of these devices. Our hardware unit is now powered by USB, which means it is field ready. Our power connections are now higher quality, making examination easier, and our data tips are smaller and portable. The entire Tarantula kit is now optimized for usage in all environments.
Full Physical Extraction
Tarantula extracts a full image of the memory chips on Chinese-chip cell phones, not just a copy of the file system. A full physical image (binary file) of the memory chip is extracted which contains all of the undeleted and deleted user information and phone identification information. Tarantula can extract from Mediatek, Spreadtrum, infineon and Mstar chipsets, which together represent over 97% of Chinese-chip phones on the market.
User passwords are extracted immediately and provided to the examiner during the extraction process. Password extraction is supported for all Chinese chipsets.
After acquiring a full physical image of the memory chip, the resulting binary file is decoded to show user information such as passwords, SMS, contacts, and call logs. Tarantula supports decoding for Mediatek, Spreadtrum, Infineon and Mstar chipsets. Tarantula excels in supporting decoding from various languages and character sets across the world such as Arabic and Chinese.
After completing the examination, a report can be generated that includes case information, phone identification information, IMEIs, passwords, SMS, contacts, call logs, and more. An audit trail log is created during the examination process that can also be included in the final report.
Reports can now be exportedin three formats,HTML,XML and Excel, allowing you more options for presenting your data.
Binary File Export
After acquiring a full physical image of a phone with Tarantula, the resulting binary file can be exported. The exported binary file can then be input into third-party tools for further manual or automatic decoding. Tarantula sets itself apart from other tools in this aspect. We do not encrypt our binary files, which means we are offering you what many other tools inappropriately treat as "source code".
Binary File Import
Binary files that have been acquired with third-party tools such as flasher boxes can be imported into Tarantula and decoded.
Binary files are now exported with a secondary .txt file that includes a hash and timestamp of the exported file. This .txt file serves as validation of the export.
Tarantula hardware unit, USB powered and field ready
Two cell phone power cables for powering the phone during extraction
Cell phone data extraction main cable, for connecting to data tips
31 data cable tips, two sets of tips in case of breakage of loss
Carrying pouch for data tips, main cable, and phone power cables
Multi-country power adapter for hardware unit, in case AC power is required
3 Standard window Black Hole Faraday Bags
Tarantula software (registration and download required)
EDEC Training Programs
EDEC Digital Forensics provides comprehensive training, education and certification for all our products. We offer multiday, hands-on training and certification courses conveniently presented at major trade shows and conferences, as well as education institutions. These courses can also be presented at your location upon request. Please see below for training options.
EDEC Products 101
Tarantula, Eclipse, and Evidence Collection and Analysis with Black Hole Faraday Bags
This course is designed to provide forensics professionals with a general foundation in mobile device forensics in relation to EDEC products. With a combination of background fundamentals and hands on practice, examiners will gain an understanding of how to seize, transport, analyze and report information from a wide range of devices, with special emphasis on Chinese-chip cell phones.
Examiners will receive in depth analysis of the Chinese cell phone industry, a segment that represents over 30% of cell phones worldwide, including instruction on data analysis using EDEC Tarantula v1.1. Tarantula, the most advanced hardware and software system in its category, performs physical extraction and decoding for Chinese-chip phones, resulting in live and deleted SMS, contacts, call logs, historical and active Pin codes, multiple IMEI and more. Manual screen capture procedures will be taught with the Eclipse hardware and software tool, providing students with the ability to capture data from and report on virtually any mobile device. Examiners will also learn how to use Black Hole faraday bags to effectively seize, transport and analyze mobile devices while shielded from wireless signals, as well as the Black Hole Data Bag kit which allows shielded analysis and charging with a filtered USB connection built into the bag.
Example of Teel Tech Partner Training Schedule:
The Chinese Phone Problem
Flasher Boxes – Hyper and Spiderman
Date and time stamps
Automated Data Carving
Analyzing Tarantula Reads
Reporting with Tarantula
$1, 650.00 for Washington, DC
$1,950.00 for Myrtle Beach, SC*
Please see our product versions below to find out how we are updating our products and to make sure you have the latest version.
Tarantula 1.0 is the ONLY comprehensive system for Chinese cell phone analysis. Tarantula supports all major Chinese manufactured chipsets -- Mediatek, Spreadtrum, and Infineon, even if the phone is pin-locked
Tarantula v1.1 software updates include increased decoding for Mediatek and Spreadtrum chipsets, increased extraction platform support, historical pincode decoding, multiple IMEI decoding, excel report output and more.
Tarantula 2.0 includes redesigned hardware that is more compact with a tip-style kit, making it field ready. The software has been redesigned with an intuitive GUI and many new features. Most notable of the new features are file system decoding for feature phones and MTK Android devices, media decoding, deleted file flags, increased extraction support for Mediatek and Spreadtrum devices, and workflow enhancements like evidence selection, file system report generation, and more.
Tarantula 2.0 Beta Software Demo
Tarantula Version 2 Hardware Overview
Connecting a Phone to Tarantula
Anti-Corruption Commission, Malaysia
"Tarantula makes our job much more easier involving Chinese phones in Malaysia. It's capable of performing both logical and physical extraction on the devices at the same time. So far we have analyzed about 35 phones since we had Tarantula. It's portable, easy to use and the software is easy to install. It can capture the identities of the phone software whether it's MTK, Spreadtrum, Infineon, etc. We haven't found any problems in capturing and extracting data of calls and SMS, it was great."
Task Intelligence, Australia
"In my experience, Tarantula is a great tool and does exactly what it says it will. In demonstrations to the state police forces in Australia, I invite them to bring their own Chinese phones. In all cases, Tarantula has succeeded in getting data. I've also bought phones while in Singapore and Indonesia and had great results."
Teel Tech, USA
"Chinese phones have become a new necessary area of focus for the forensic examiner. Both domestically and overseas, law enforcement has to contend with the seemingly infinite variations of mobile devices from China. To address this new trend, tools are forced to take a new, chip-based approach, as opposed to device manufacturer or OS approach, to acquire data. For the examiner, new skills are required to understand and address this dynamic. In our class, we aim to provide a comprehensive education to enable students to acquire as much data as they can from whatever variation of Chinese phone comes their way."
-Sterling Bryan, Forensic Examiner & Trainer
Forensic Examiner, Ghaziabad, India
"Tarantula is a very good tool. You can use it with Chinese phones which are often encountered in India. It's very user friendly and anyone can learn to use it. Other tools that can process Chinese phones require hardware add-ons but Tarantula is stand-alone. In our work that has been an important aspect. We processed a minimum of 20 phones with Tarantula so far."