The built-in Oxygen Forensic® Cloud Extractor allows investigators to gain access to a tremendous amount of cloud services that include iCloud, Google, Microsoft, Samsung, Huawei, Mi Cloud accounts, E-mail server, Amazon Alexa and other services, like Facebook, Twitter, Instagram, Dropbox, WhatsApp, Telegram, WickrMe, etc. The Cloud Extractor also offers the exclusive ability to access WhatsApp and Viber servers, quickly extract Messenger data via QR code as well as decrypt WhatsApp backups.
Oxygen Forensic® Detective offers data extraction from Apple iOS, Android devices, feature phones, media, and SIM cards as well as smartwatches. Oxygen Forensic® Detective imports numerous backups and images, including iTunes, Android backups, GrayKey, JTAG, Chip-off, UFED, XRY images, and more. The software uses proprietary methods to bypass screen locks on various Android devices. Oxygen Forensic® Detective can ﬁnd passwords to encrypted iTunes backups and Android images.
Oxygen Forensic® KeyScout utility focuses on extracting passwords, tokens, and user data both from web browsers and desktop apps, like Messengers and Email clients, as well as locating iTunes backups and ﬁnding Wi-Fi hotspot passwords on PCs. Collected tokens and passwords can be immediately used for cloud data extraction while extracted user data can be imported into Oxygen Forensic® Detective software for further analysis and analytics with mobile data artifacts in one case.
Oxygen Forensic® Detective enables data parsing and analysis from drone dumps, ﬂight logs, mobile apps and cloud services. Oxygen Forensic® Detective can parse GPS locations showing valuable route data as well as device telemetry to include: speed, direction, altitude, temperature, and more. Currently, various models of DJI and Parrot drones are supported. Data parsing from drone applications as well as data extraction from DJI, SkyPixel or My Parrot clouds are also available.
Oxygen Forensic® Detective includes a wide range of built-in analytical tools like Timeline, Social Graph, Facial and Image Recognition that allow investigators to determine common contacts for one or several extractions, view all events in a chronological order, and detect similar faces. Moreover, the software offers Key Evidence section with the ability to filter data by tags and Advanced Search section that provides a wide range of search criteria to include: keywords, regular expressions, ﬁle hashes including Project VIC, etc.
Oxygen Forensic® Detective acquires geo coordinates from all possible sources including mobile devices, drones, cloud storages, media cards, etc. Once analyzed, the data can be viewed within our Oxygen Forensic® Maps either online or ofﬂine. The Maps module includes the ability to Identify a device’s frequently visited places, visualize device’s movements within speciﬁed period of time, pinpoint common locations of several devices and play an animated route showing the direction of travel.