Oxygen Forensic® Detective is an all-in-one forensic software platform built to extract, decode, and analyze data from multiple digital sources: mobile and IoT devices, device backups, UICC and media cards, drones, and cloud services. Oxygen Forensic® Detective can also find and extract a vast range of artifacts, system files as well as credentials from Windows, macOS, and Linux machines.

The cutting edge and innovative technologies deployed in Oxygen Forensic® Detective include, but are not limited to, bypassing screen locks, locating passwords to encrypted backups, extracting and parsing data from secure applications and uncovering deleted data.

Furthermore, multiple extractions can be investigated in a single interface to gain a complete picture of the data. By using the integrated industry-leading analytical tools to find social connections, build timelines, and categorize images, law enforcement, corporate investigators and other authorized personnel can help make this world a safer place.

Oxygen Forensic® Detective is distributed in a USB dongle and is valid for a single user.

CHARACTERISTICS

PASSWORDS

Crack passwords and authentication tokens for user accounts in social networks, messaging and email applications. Reveal passwords that were used to connect to WI-FI networks.

ADVANCED PHYSICAL METHODS

Physical collection while passing device security.

APPLICATIONS

Extract, decrypt and examine user data from today’s most popular applications.

IMPORT BACKUPS AND IMAGES

Import and parse various backups and images from iOS, Android, Windows phone and Blackberry devices.

EVENT LOG

View dialed, answered and failed calls, including deleted calls. Apply filters to display calls only during a specific time period.

CDR ANALYSIS

Process and analyze call data records obtained from cellular service providers. Visualize geographic coordinates on the map and identify links between callers.

CLOUD DATA

Access cloud services such as: WhatsApp,Telegram, iCloud, Google, Samsung, Microsoft, Facebook, Instagram, Twitter and many other social media cloud services.

AGGREGATED CONTACTS

Discover and reveal names, usernames, emails and more in different device sources.

DATA REPORTS

Customize and generate data reports in PDF, XLS, RTF, XML and other popular file formats.

DATA SEARCH

Powerful global search on a single device, multiple devices or an entire case.

DEVICE INFORMATION

View detailed information about the device and its owner.

DRONE DATA

EXTRACT AND ANALYZE DRONE DATA FROM PHYSICAL DUMPS, DRONE LOGS AND MOBILE APPLICATIONS.

ENCRYPTED BACKUPS AND IMAGE IMPORTING

Find passwords for encrypted backups and images using various attacks and optimize attacks to deliver unparalleled results at record speeds.

FACIAL RECOGNITION

Use the most innovative and powerful capability to classify human faces at no additional charge.

FILE EXPLORER

Access device photos, audio and video files, databases and other evidence acquired at the file system level. View any raw file, in hexadecimal mode, in native view.

GEO DATA

Extract and view geographic coordinates from various sources: application data, photo and video exif headers, WI-FI connection history, etc.

IMAGE CATEGORIZATION

Detect significant images including pornography, extremism, drugs, guns, etc with the built-in image categorization engine.

SUPPORT FOR IOT DEVICES

Extract and analyze data from IoT devices.

KEY EVIDENCE

Mark important entries as key evidence in any section of the program and view them later in one single list.

KEYWORD SEARCH

Create and use keyword lists to quickly find relevant data during or after data extraction.

EXTRACT DATA IN REAL TIME

Extract data from mobile devices based on iOS, Android, Windows phone, Windows mobile, Blackberry, Bada os or feature phones. Additionally acquire media from devices and SIM cards.

VISUALIZATION OF LOCATIONS

Open geographic coordinates on built-in maps, visualize user’s movements, determine frequently visited places and find out if several people were at the same place at the same time.

MESSAGES

Access SMS, MMS, email and iMessage communications and read them in table or chat view.

OCR

Automatically convert text on photos into machine-encoded text.

ORGANIZER

Extract and retrieve user’s calendars, notes and tasks. Decode iOS encrypted notes.

LIST VIEWER

Open and browse. Plist found on iOS device extractions. Use the conversion panel to convert values to a readable format.

LINK ANALYSIS

Explore social connections between the device owner and his contacts or between multiple devices by analyzing calls, messages and app communication activities.

STATISTICS

Navigating the enormous amount of data efficiently has always been our development objective. To prove this point, we have introduced the statistics section that offers an overview of the entire extraction and allows the investigator to quickly identify sections of interest.

SQLITE VIEWER

Browse SQLite databases, recover deleted data, convert values, build SQL queries, perform searches and export selected entries to reports.

TIMELINE

View all events in a chronological order: chats, calls, voicemails, photo and video history, wi-fi connections, geo files and web cache.

COMPUTER CREDENTIALS COLLECTION

Collects credentials and passwords on the computer using oxygen forensic® keyscout.

WEBKIT DATA

Parse user emails from the webmail interface and the content of web pages visited. Gain access to email messages, web search history, locations and other data stored in webkit databases.

WEB CONNECTIONS

Find out when and where the device owner used internet access and get information about frequent locations of iOS users.