Oxygen Forensic® Detective is an all-in-one forensic software platform built to extract, decode, and analyze data from multiple digital sources: mobile and IoT devices, device backups, UICC and media cards, drones, and cloud services. Oxygen Forensic® Detective can also find and extract a vast range of artifacts, system files as well as credentials from Windows, macOS, and Linux machines.

The cutting edge and innovative technologies deployed in Oxygen Forensic® Detective include, but are not limited to, bypassing screen locks, locating passwords to encrypted backups, extracting and parsing data from secure applications and uncovering deleted data.

Furthermore, multiple extractions can be investigated in a single interface to gain a complete picture of the data. By using the integrated industry-leading analytical tools to find social connections, build timelines, and categorize images, law enforcement, corporate investigators and other authorized personnel can help make this world a safer place.

Oxygen Forensic® Detective is distributed in a USB dongle and is valid for a single user.

ACCOUNTS AND PASSWORDS

DECRYPT PASSWORDS AND AUTHENTICATION TOKENS TO USER ACCOUNTS IN SOCIAL NETWORKS, MESSENGERS AND EMAIL APPS. REVEAL PASSWORDS THAT WERE USED TO CONNECT TO WI-FI NETWORKS

ADVANCED PHYSICAL METHODS

PHYSICAL COLLECTION WHILE BYPASSING DEVICE SECURITY.

APPLICATIONS

EXTRACT, DECRYPT AND EXAMINE USER DATA FROM TODAY’S MOST POPULAR APPS.

BACKUP AND IMAGE IMPORT

IMPORT AND PARSE VARIOUS BACKUPS AND IMAGES MADE FROM TODAY’S DEVICES LIKE IOS, ANDROID, AND MORE AS WELL AS IMPORT FROM OTHER FORENSIC TOOLS LIKE CELLEBRITE AND MSAB.

CALLS

VIEW DIALED, ANSWERED AND FAILED CALLS INCLUDING DELETED ONES. APPLY FILTERS TO SHOW CALLS ONLY FOR A SPECIFIC PERIOD OF TIME

CDR ANALYSIS

PROCESS AND ANALYZE CALL DATA RECORDS OBTAINED FROM WIRELESS PROVIDERS. VISUALIZE GEO COORDINATES ON THE MAP AND IDENTIFY LINKS BETWEEN CALLERS

CLOUD DATA

GAIN ACCESS TO CLOUD SERVICES LIKE: WHATSAPP, TELEGRAM, ICLOUD, GOOGLE, SAMSUNG, MICROSOFT, FACEBOOK, INSTAGRAM, TWITTER AND MANY OTHER SOCIAL MEDIA CLOUD SERVICES.

CONTACTS

UNCOVER AND REVEAL NAMES, USERNAMES, EMAILS, AND MORE IN DIFFERENT SOURCES ON THE DEVICE.

CONTACTS

UNCOVER AND REVEAL NAMES, USERNAMES, EMAILS, AND MORE IN DIFFERENT SOURCES ON THE DEVICE.

DATA SEARCH

POWERFUL GLOBAL SEARCH OVER A SINGLE DEVICE, MULTIPLE DEVICES OR ENTIRE CASE.

DEVICE INFORMATION

VIEW THE DETAILED INFORMATION ABOUT THE DEVICE AND ITS OWNER

DRONE DATA

EXTRACT AND ANALYZE DRONE DATA FROM PHYSICAL DUMPS, DRONE LOGS AND MOBILE APPLICATIONS.

ENCRYPTED BACKUPS AND IMAGES IMPORT

FIND PASSWORDS TO ENCRYPTED BACKUPS AND IMAGES BY USING VARIOUS ATTACKS AND OPTIMIZE THE ATTACKS TO DELIVER UNRIVALED RESULTS IN RECORD SPEEDS.

FILES

ACCESS A DEVICES PHOTOS, AUDIO AND VIDEO FILES, DATABASES AND OTHER ACQUIRED EVIDENCE AT THE FILE-SYSTEM LEVEL. VIEW ANY FILE IN A RAW, HEX MODE, NATIVE VIEW.

GEO DATA

EXTRACT AND VIEW GEO COORDINATES FROM VARIOUS SOURCES: APPLICATIONS DATA, PHOTO AND VIDEO EXIF HEADERS, HISTORY OF WI-FI CONNECTIONS, ETC

IMAGE CATEGORIZATION

DETECT SIGNIFICANT IMAGES INCLUDING PORNOGRAPHY, EXTREMISM, DRUGS, GUNS, ETC WITH THE BUILT-IN IMAGE CATEGORIZATION ENGINE

IOT DEVICE SUPPORT

EXTRACT AND ANALYZE DATA FROM IOT DEVICES

KEY EVIDENCE

MARK IMPORTANT ENTRIES AS KEY EVIDENCE IN ANY PROGRAM SECTION AND VIEW THEM LATER IN A SINGLE LIST

KEYWORD SEARCH

CREATE AND USE KEYWORD LISTS TO QUICKLY FIND THE RELEVANT DATA DURING OR AFTER DATA EXTRACTION

LIVE DATA EXTRACTION

EXTRACT DATA FROM MOBILE DEVICES BASED ON IOS, ANDROID, WINDOWS PHONE, WINDOWS MOBILE, BLACKBERRY, BADA OS OR FEATURE PHONES. ADDITIONALLY, ACQUIRE DEVICE MEDIA AND SIM CARDS

LOCATIONS VISUALIZATION

OPEN GEO COORDINATES ON THE BUILT-IN MAPS, VISUALIZE USER’S MOVEMENTS, DETERMINE HIS FREQUENTLY VISITED PLACES AND FIND OUT IF SEVERAL PEOPLE WERE AT THE SAME TIME AT THE SAME PLACE

MESSAGES

GAIN ACCESS TO SMS, MMS, EMAIL AND IMESSAGE COMMUNICATIONS AND READ THEM EITHER IN TABLE OR CHATS VIEW

ORGANIZER

EXTRACT AND RECOVER USER’S CALENDARS, NOTES AND TASKS. DECODE IOS ENCRYPTED NOTES

PLIST VIEWER

OPEN AND EXAMINE. PLIST FILES FOUND IN IOS DEVICE EXTRACTIONS. USE CONVERTER PANEL TO CONVERT VALUES INTO A READABLE FORMAT

SOCIAL GRAPH

EXPLORE SOCIAL CONNECTIONS BETWEEN THE DEVICE OWNER AND HIS CONTACTS OR BETWEEN SEVERAL DEVICES BY ANALYZING CALLS, MESSAGES AND APP COMMUNICATION ACTIVITIES

STATISTICS

NAVIGATING THE ENORMOUS AMOUNT OF DATA EFFICIENTLY HAS ALWAYS BEEN OUR DEVELOPMENT OBJECTIVE. TO PROVE THIS POINT, WE HAVE INTRODUCED THE STATISTICS SECTION THAT OFFERS AN OVERVIEW OF THE ENTIRE EXTRACTION AND ALLOWS THE INVESTIGATOR TO QUICKLY IDENTIFY SECTIONS OF INTEREST.

SQLITE VIEWER

EXAMINE SQLITE DATABASES, RECOVER DELETED DATA, CONVERT VALUES, BUILD SQL QUERIES, PERFORM SEARCH AND EXPORT SELECTED ENTRIES TO REPORTS

TIMELINE

VIEW ALL EVENTS IN A CHRONOLOGICAL ORDER: CHATS, CALLS, VOICEMAILS, PHOTOS AND VIDEOS HISTORY, WI-FI CONNECTIONS, GEO FILES AND WEB CACHE

USER DATA COLLECTION ON COMPUTER

COLLECT CREDENTIALS AND PASSWORDS ON COMPUTER USING OXYGEN FORENSIC® KEYSCOUT

WEBKIT DATA

PARSE USER’S EMAILS FROM WEBMAIL INTERFACE AND CONTENT OF VISITED WEBPAGES. GAIN ACCESS TO EMAIL MESSAGES, WEB SEARCH HISTORY, LOCATIONS AND OTHER DATA STORED IN WEBKIT DATABASES