Oxygen Forensic® Detective
Oxygen Forensic® Detective is all-in-one forensic software to extract and analyze data from multiple sources:
mobile devices, their backups, cloud services and call data records. Leading edge technologies deployed by Oxygen
Forensics allow the bypass of screen lock passcodes, locate passwords to encrypted backups, extract data from
secure applications as well as recover deleted information. Mobile device, cloud and CDR extractions are merged
together in a single intuitive GUI with rich analytical capabilities: determine common locations and contacts for
several devices, view all events in a chronological order and much more.
Mobile Data Extraction Cloud Data Extraction
Oxygen Forensic® Detective offers live data extraction Oxygen Forensic® Detective acquires data from more than
from over 11,000 unique devices running iOS, Android OS, 15 cloud storages: iCloud contacts and calendar, Google
Windows Phone OS, BlackBerry OS as well as Chinese and Drive, Google Location History, Live contacts and calendar,
feature phones. Device backups and images can be decoded: OneDrive, Dropbox and Box as well as from a wide range of
iTunes, Android and BlackBerry backups, Android and Windows social media including Twitter and Instagram.
Phone JTAG images, Blackberry 10 Chip-off image, etc. Forensic experts may utilize either account credentials or
Oxygen Forensic® Detective offers several methods to token to enter the cloud account to acquire the cloud data.
bypass or disable screen locks on the most popular mobile Extracted credentials and tokens from a mobile device are
devices. Passwords can be automatically found to encrypted organized and displayed in the Passwords section of Oxygen
device backups and images. Forensic® Detective.
Oxygen Forensic® Detective acquires the complete evidence After the cloud data is acquired it can be viewed in Oxygen
set from devices and backups: contacts, messages, calls, Forensic® Detective and merged with other extractions for deep
calendar, file system, data from applications (300 unique data analysis in Timeline, Social Graph and other analytical
apps and 1000 app versions) and recovers deleted data. tools.
www.oxygen-forensic.com
support@oxygen-forensic.com
Geo mapping Call Data Records import
Oxygen Forensic® Detective acquires geo coordinates from Oxygen Forensic® Detective allows the import of call data
all possible sources including mobile devices, cloud storage, records of any format received from wireless providers and
media cards, and imported images. Once analyzed, the data conveniently guides the expert through the process of CDR
can be viewed within both online or offline maps. The brand-new importing and field mapping, easily converting the data to
Oxygen Forensic® Maps offers advanced analytical capabilities Oxygen Forensic® Detective’s unified format.
for geo data including: Once converted, Oxygen Forensic® Detective allows forensic
• Identify device owner’s frequently visited places experts to analyze the processed CDR files and easily determine
• Visualize user’s movements within specified period of time direct and indirect links between selected callers in a visual
• Pinpoint common locations of several device users graph. The processed results can be saved as evidence for
• Smoothly work with large data sets of geo points further analysis.
Data Analysis Built-in Viewers
Oxygen Forensic® Detective includes a wide range of built-in Oxygen Forensic® Detective offers several included built-in
analytical tools: data viewers:
• Timeline - all device or case events in a chronological order. •Oxygen Forensic Viewer. A stand-alone tool for viewing and
• Social Graph - users’ social connections and common contacts. sharing data collected with other Oxygen Forensic® products.
• Aggregated Contacts - merged contacts from all case •Oxygen Forensic SQLite Viewer. It offers advanced
and/or device sources. functionality: built-in converter for dates and texts, deleted
• Watch Lists and Search - customized searching during records recovery, searching of the database, execute SQL
and after extraction. queries and much more.
• Key Evidence - bookmarking all important evidence. •Oxygen Forensic Plist Viewer. The tool allows to
• Data export to popular formats: PDF, RTF, XML, etc. conveniently examine Plist files.
Founded in 2000, Oxygen Forensics is the worldwide leading maker of the advanced forensic data examination tools for mobile devices. The company
is dedicated in delivering the most universal forensic solution covering the widest range of mobile devices running Android, iOS, Blackberry, Windows
Phone, Symbian and other operating systems. Oxygen Forensics customers include various US and European federal and state agencies, such as the IRS,
US Army, US Department of Defense (DOD), US Department of Justice, US Department of Homeland Security, US Department of Transportation, US Postal
Service, US Supreme Court, European Commission, London Metropolitan Police, French National Police and Gendarmerie, German Federal Criminal Police
Office, Italian Financial Guard, Spanish Civil Guard as well as Big Four companies, like PricewaterhouseCoopers, Ernst & Young and many others.
www.oxygen-forensic.com
support@oxygen-forensic.com
