Knowledgebase
Guidelines for Upgrading Paraben’s DS to E3:DS
Posted by Jack H. Ward on 04 November 2016 06:32 PM

About E3:DS

E3:DS is a package for mobile forensic analysis. While keeping all the functionality available in Paraben’s DS, E3:DS offers you a lot more – new supported types of data, advanced data analysis options, and a number of other new features intended to make your investigations more convenient.
This document describes how to upgrade your DS application to E3:DS.
If you are interested in upgrading to the E3:Universal license, you can contact sales@paraben.com. The E3:U license will also allow the processing of a variety of other data types beyond mobile data.

New Features for DS Users

General Changes:

  • A completely new interface designed to expedite navigation around the case.
  • A new type of licensing – Internet License allowing you to use your E3:DS packages on multiple machines with discounts for additional licenses.
  • New Tutorial – a quick guide for first-time users.
  • Multi-threading – now there is the ability to work with data during acquisition, import, or cloud import.
  • A task pool for viewing task progress and state.
  • The ability to select a specific data time zone for viewing evidence.
  • More usable bookmarks that can be categorized and organized in the hierarchical structure.

New Plug-Ins for Acquisition and Parsing:

  • New Android Spreadtrum plug-in for acquisition of Android devices with Spreadtrum chipsets.
  • JTAG plug-in for analyzing JTAG memory dumps.
  • SQLite plug-in for analyzing SQLite databases.
  • Ability to add Project-a-Phone folders as evidence and parse them.

New Analysis Functionality:

  • Improved sorting with the ability to use the Image Analyzer for illicit detection, and eliminate internal application data and standard smileys from the sorted files.
  • Keywords indexing for performing quick keyword searches.
  • Optical character recognition for text extraction from graphic files.
  • Advanced searches including search using regular expressions and pre-defined CP (child pornography) search term list.
  • Usable sorted data search with the ability to use hash databases for filtering out common hashes.

New Exporting & Reporting Functionality:

  • Ability to export any category of Sorted files (not only Graphics and Multimedia).
  • A completely new Mobile Data Review Report providing data in the most comprehensive format for forensic investigators.
  • Mobile Evidence Timeline Report for timeline representation of mobile data evidence.
  • Mobile Evidence PDF Report for analysis of mobile data evidence.
  • The ability to add Evidence Summary/Evidence Conclusion sections to the report.

Upgrading Paraben’s DS to E3:DS

If you have DS with a valid subscription, it is recommended that you upgrade your DS to E3:DS to get access to all the new features offered for DS users.
The upgrading process consists of the following steps:

  1. Sending an upgrade request to Paraben’s Support Center at forensics@paraben.com
  2. Uninstallation of your DS application and Driver Pack
    a. E3:DS is backwards compatible with all prior case data associated with DS. However, with this version change we have updated many drivers and have a new multi-threaded design, so all prior software needs to be removed before the new version is installed.
  3. Installation of E3:DS software: a link will be provided in your dongle manager or in your registration site account
  4. Installation of the new E3 Mobile Driver Pack
  5. Activation of the E3:DS package

Requesting DS to E3:DS Migration Upgrade:

  1. E-mail Paraben’s Support Center (forensics@paraben.com) with a request to upgrade from DS to E3:DS. Specify the following information:
    • Your Paraben account ID or dongle number
    • Your current activation type (dongle or license key)
      Please note that you can also request to change your activation type to Internet license to get the ability to use your E3:DS on multiple machines with an easy rotation without having to move a dongle.
  2. Once you get an upgrade confirmation from Paraben’s Support Center, you can uninstall DS and the DS Driver Pack and start the E3:DS installation.

Installing E3

To install E3:DS:

  1. Download the E3 installation file from http://download.paraben.com.
  2. Run the E3 installation file.
  3. The Paraben’s E3 Installation wizard opens. On the Welcome page, click Next.
  4. Read the License Agreement carefully and select I accept the terms of License Agreement if you accept the terms. Click Next.
  5. Select the Installation folder and click Next.
  6. If you are ready to begin the installation, click Install.
  7. The installation process starts. It may take some time.
  8. When the installation process finishes, the last page of the Installation wizard is displayed. Select the Open the E3 Driver Pack download page checkbox and click Finish to exit the wizard.
    Please note that E3 installation does not include mobile drivers. All the drivers for E3 are included in the E3 Mobile Driver Pack.
  9. E3 is installed and you can proceed to installing the E3 Mobile Driver Pack and activating your package.

Installing E3 Mobile Driver Pack

To install the E3 Mobile Driver Pack:

  1. Download the E3 Mobile Driver Pack at the end of the E3 installation or from http://download.paraben.com.
  2. Run the E3 Mobile Driver Pack installation file.
  3. The E3 Mobile Driver Pack Installation wizard opens. On the Welcome page, click Next.
  4. Read the License Agreement carefully and select I accept the terms of License Agreement if you accept the terms. Click Next.
  5. On the Customize Setup page, select the way the drivers and tools will be installed and click Next.
  6. On the Ready to Install page, click Install if you are ready to begin the installation.
  7. The installation process starts. It may take some time.
  8. When the driver installation is completed, click Finish to exit the wizard.

Activating E3:DS Package

To activate your E3:DS package with a dongle:

  1. Plug the dongle into your computer, start Dongle Manager and update the dongle.
    Please note: if you cannot find Dongle Manager on your machine, download it from http://download.paraben.com and install it.
  2. Install the Dongle Manager on the computers where E3:DS will be used.
  3. Plug in the dongle and start Electronic Evidence Examiner (E3).

To activate your E3:DS package with a license key over the Internet:

  1. Start Electronic Evidence Examiner (E3) and click Activate in the dialog displayed on start.
  2. In the Activation wizard, select Direct Machine License and click Activate.
  3. On the next page of the wizard, select the Over the Internet activation type and click Next.
  4. On the Enter Your Product ID (PID) page, click Add and enter the Product ID you want to activate. Then click Activate. Your PID is found in your registration account located in our new Customer Zone at https://www.paraben.com/customer-zone.
  5. After the package is activated, the last page of the Activation wizard will be displayed. Click Finish to exit the wizard.
  6. Your E3:DS package is activated and you can begin using E3.

To activate your E3:DS package with a license key by telephone:

  1. Start your E3 software and click Activate in the dialog displayed on start.
  2. In the Activation wizard, select Direct Machine License and click Activate.
  3. On the next page of the wizard, select the By Telephone activation type and click Next.
  4. The Phone Activation page opens.
  5. Follow the steps described on the page: call the support center and dictate the Product ID (PID) and the Registration key displayed on the Phone Activation page.
  6. When you receive the Activation key, enter it in the corresponding field and click Activate.
  7. After the package is activated, you will see the last page of the Activation wizard.
  8. Click Finish to exit the wizard.
  9. Your E3:DS package is activated and you can begin using E3.

To activate your E3:DS package using the Internet license:

  1. Start E3 and click Activate in the dialog displayed on start.
  2. The Activation wizard opens.
  3. In the Activation wizard, select the Internet License option (selected by default) and click Activate.
  4. The Connect to Web License Server dialog is displayed.
  5. Enter your Paraben user login and password and click Connect.
  6. E3 connects to the web license server. Wait while it is checking whether there are any available E3 packages assigned to your account.
  7. Your E3:DS package becomes activated. You can start working with it.

Working with E3:DS

The E3:DS interface allows the most convenient navigation around the case.

There are no major differences between DS and E3:DS in regards to the process of data acquisition, import, or cloud import. However, the process of saving acquired or imported data and working with mobile data cases is different in E3:DS.

Saving Acquired Data to Cases

Cases created in E3 (*.e3 files) can store not only acquired/imported mobile data but also other types of data added as evidence.

Acquired/imported mobile data is saved as an E3 mobile data case, which is a *.ds file stored in the same folder as the E3 case to which the data was acquired or imported. The E3 mobile data case file name has the following structure:

<Name of E3Case>_<Type of data acquisition (Acquisition, Import, or Cloud Import)>_<Date of acquisition/import/cloud import>_<Time of acquisition/import/cloud import>

For example, an E3 mobile data case attached to an E3 case named Case (1).e3 will have the following name: Case_(1)_Acquisition_11-01-2016_13-57-30.ds

A new E3 mobile data case is created at the end of each acquisition/import/cloud import procedure. Thus, an E3 case can have multiple E3 mobile data cases attached to it.

Opening E3 Mobile Data Case/DS Case Files

To view an E3 mobile data case (*.ds file), you need to open the E3 case to which it is attached. For example, if you want to view the Case_(1)_Acquisition_11-01-2016_13-57-30.ds file, you need to open the Case (1).e3 file with Electronic Evidence Examiner (E3).

Adding E3 Mobile Data Case/DS Case File as Evidence

You can add E3 mobile data cases created in E3 or DS case files created in Paraben's DS as evidence. You can add as many as you want to one .e3 case.

Unavailable Options

You can find some unavailable options in the E3:DS interface. For example, adding certain types of evidence, like Logical/Physical Drives, E-mail Databases, etc. If you are interested in using these options, you can purchase a E3:P2C package (for computer forensic analysis) or upgrade your package to E3:Universal. Contact sales@paraben.com for specials with the release.



Attachments 
 
 upgrading ds to e3 ds.pdf (2.48 MB)
(0 vote(s))
Helpful
Not helpful

Comments (0)