CloudNine Discovery Portal - CloudNine Review: Can I load and process a Cellebrite UFDR file to CloudNine Review?

Use CloudNine Discovery Portal to load Modern Data (text messages, chats, social media, calls, voicemails) collected and provided in UFDR format to CloudNine Review.

When cell phone data is collected, the investigator will often provide a UFDR file which is a summary report of data collected from smartphones or other smart devices.  Import modern data into CloudNine Review using the CloudNine Discovery Portal - CloudNine Review workflow.

CloudNine Discovery Portal Welcome Screen

CloudNine Discovery Portal's Welcome screen is where you choose your CloudNine Discovery Portal workflow. 

1. Launch CloudNine Discovery Portal.
   1. 📄 CloudNine Discovery Portal automatically verifies the version, if a new version is available it will update to the latest version.
2. You are on the Welcome to CloudNine Discovery Portal screen. There are two columns on the welcome screen: Select Data From and Review Data Using. This screen initializes the Modern Data Data workflow. Under Select Data From: Choose File System (e.g. File Share, Hard Drive, Forensic Image, etc).
3. Under Review Data Using: Select CloudNine Review. 
4. Click Continue.
   
5. The Log in to CloudNine Review screen appears. Enter the Email address* you use to log in to CloudNine Review, then click Continue. 
6. Enter your Password* for CloudNine, then click Continue.  You are prompted to Verify Your Identity with the two-factor authentication method you have set up in CloudNine Review. 
    
7. The What kind of data are you uploading screen appears. Choose UFDR Cell phone data, then click OK to advance to the Select a CloudNine Review Case screen. 

Select a CloudNine Review Case

On the Select a CloudNine Review Case you will Enter a Custodian name, select an existing CloudNine Review project from the Case Name list, or Create Case. 

1. Under Custodian name*, enter the Custodian for the UFDR file. 
2. Case Name: Under Case Name you will see a list of all CloudNine Review cases (projects/databases) in which you have Admin rights. Select, by clicking on the case name you are uploading to. The Case Name is highlighted and a check appears in the Selected column. 
   
   1. If you are loading to a new project, select Create Case. On the Create New Case screen, enter a Case Name, and Time Zone, then click Create. 
      
   2. Once created, the Case name list shows the case italicized and selected by default. 
      
3. After entering a Custodian Name and selecting a Case Name, click Next to advance to the Select UFDR File For Upload. 

Select UFDR File For Upload

On this screen, you will choose the path to the UFDR file you wish to load and enter the Evidence Container Name. 

1. Click Browse... to browse and select the UFDR file you want to load to CloudNine Review. 
2. Enter an Evidence Container Name. The Evidence Container Name is often the device name, make, model number, or combination of all three and is used to uniquely track the evidence loaded to CloudNine Review.
3. Click Next to advance to the Import Settings screen. 

Import Settings

On this screen, you will identify your Import Settings and Control Number Settings for the selected UFDR file. 

Import Settings Overview

1. Mobile Number* (Required): Enter the mobile number of the device from which the UFDR file was created. 
2. Processing Options: Select options, specifically a date range, to only include data items within the date range. 
3. Do Not Import: Exclude File attachments larger than X MBs. Enabled, any attachments larger than the specified file size are excluded from the import. 
4. Import Type* (Required): The communication data type(s) you wish to import. Only the checked items are imported to CloudNine Review. 
5. Prefix: An alphanumerical string of characters (20 max) to use at the beginning of each data item. The prefix is the same for all data items imported from the selected UFDR file.
6. Length: The character length (numerical) of each Item Number, with a minimum of 4 and a maximum of 24 characters. Leading zeros are used to pad the number to the number of characters selected. 
7. Example Control No: Illustrates a sample of how the control number will appear. 
8. Start No: The number the data starts with. 
9. Separator: The separator between the Prefix, Import Type, and Numeric value. 
10. Home: This takes you to the Welcome screen, all settings and selections will be lost. 
11. Back: Goes back to the previous screen. 
12. Next: Advances to the next screen. 

Select Your Settings

1. Under Import Settings, enter the Mobile Number for the UFDR file and select the Import Type(s) you wish to import. You must select at least one communication type. These are the required import settings. Optionally, choose any remaining import options. 
2. Under Control Number Settings, enter a Prefix, Start No, and Length. 
   1. Prefix: It is best practice to implement a prefix in your numbering. The prefix can be used to help maintain unique control numbers, as well as locate items in the database.
   2. Start No: If using the same prefix throughout the project, the Start No will need to be the next sequential number in the database to prevent duplicate numbering. 
   3. Length: The industry standard is 8-10 characters. 
3. Once you are happy with the selected settings, click Next to proceed to the Confirm & Upload screen. 

Confirm & Upload

The Confirm & Upload is your last chance to review upload data and settings.  

1. Uploading From: Indicates the data type being uploaded. The Total files selected for upload: is 1 for Modern Data, either the UFDR or Slack .JSON file. 
2. Uploading To: The CloudNine application selected to upload the data, in this case, CloudNine Review. This section will display the CloudNine Review Project Name, Custodian, and Evidence Container Name. 
3. Control Number Setting:  Shows the Prefix, Length, Separator, Start No, and an Example of the starting number assigned to the data. 
4. Import Settings: The Mobile Number you inputted and the Import Type(s) you selected. 
5. Back: Takes you to the previous screen. 
6. Start Upload: Initializes the upload to CloudNine Review. 

Once you have reviewed your data and are happy with your settings, click Start Upload to begin the upload process. 

Global Monitoring Console

The Global Monitoring Console launches and shows the progress of the upload. 

Select Global Monitoring Console for more information.