Oxygen Forensics now supports GrayKey iPhone extractions, enhanced analysis of Wi-Fi and Bluetooth connections
Alexandria, VA – Aug. 8, 2018 – Oxygen Forensics, a leading global provider of digital forensic investigation software for government, law enforcement, and enterprise organizations, has released an update to its flagship product, Oxygen Forensic® Detective, introducing advanced features to support the extraction of data from locked smartphones, import of extractions performed from the popular GrayKey iPhone cracking software, and analysis of device logs including history of Bluetooth and Wi-Fi connections.
“If you’ve read any headlines lately about digital forensics, then you’ve heard of GrayKey,” stated Lee Reiber, chief operating officer of the D.C. area-based software company. “The team at Grayshift has built a great product to help law enforcement organizations access locked iPhones for examination, and we’re excited to support customers using this tool with advanced analytics.”
Oxygen Forensics products offer investigators the ability to access and extract data from thousands of smartphones, drones, cloud accounts, and Internet of Things (IoT) components; however, many investigations in recent years have been limited by security constraints on Apple devices. GrayKey has caught the attention of investigators due to its ability to work around these security constraints and grant access to locked iPhones.
Oxygen Forensics customers who are using its software to analyze data extracted from devices are now able to import device images from GrayKey to analyze the data and combine it with other digital evidence sources in their investigations.
Oxygen Forensic® Detective Version 10.4 Update Highlights
- Decrypt WhatsApp backup files using an account phone number or token
- Import iOS images extracted using GrayKey
- Acquire partial images of locked Samsung devices using MTP
- Identify photos with similar content using PhotoDNA hash sets
- Extract Wi-Fi hotspot access history with KeyScout
- Examine Bluetooth connection history
- Authenticate Google services using 2FA with Google Prompt
- Improved EDL method for extracting Qualcomm chip-based devices
Oxygen Forensics Introduces New Method of Decrypting WhatsApp Data With Release of Oxygen Forensic Detective 10.2
Alexandria, VA – May 8, 2018 — Oxygen Forensics is a worldwide developer and provider of advanced forensic data examination tools for mobile devices, cloud services and drones, announced today that Oxygen Forensic® Detective 10.2 can now acquire a WhatApp Cloud token from Android devices.
Two months ago, Oxygen Forensics announced Oxygen Forensic Detective 10.1 that featured the ability to help decrypt WhatsApp iCloud or Google backups with a token. Ifa key ?le that is required for backup decryption cannot be obtained, Oxygen Forensic Detective can create a WhatsApp authentication token and use it to decrypt backups stored within the iCloud and Google Cloud services.
Now, with Oxygen Forensic Detective 10.2, investigators can use a WhatApp Cloud token from an Androiddevice to decrypt WhatsApp backups from Android devices, WhatsApp Google Drive,as well as iCloud backups associated with the same phone number.
“Our product development team is constantly working on new features every single day,” said Lee Reiber, COO, Oxygen Forensics. “The new WhatsApp decryptionmethod leaves no digital trace and is a good alternative to the commonly used method with the key file. With this token, forensics experts can also acquire undelivered messages and unanswered calls directly from the WhatsApp Server, which can also help the investigators put the pieces together to solve crimes.”
Alexandria, VA – Dec. 19, 2017 — Oxygen Forensics, a worldwide developer and provider of advanced forensic data examination tools for mobile devices, drones and cloud services, today announced that it has seen double-digit growth in 2017 as it worked to increase its customer base with new customer additions in law enforcement, government and corporate spaces. Due to its growth, Oxygen relocated its headquarters in Alexandria, VA, and tripled the size of the office.
Oxygen has seen double-digit to triple-digit growth year over year since 2013. This past year the company focused on strategic expansion that produced an exceptional growth-to-revenue ratio that positioned Oxygen Forensics well for the future. Due to the historic growth over the past four years, Oxygen needed to move its headquarters to a larger space to add a classroom, forensics lab and more sales and technical support space for the growing staff.
“I am very excited for our corporate growth which led to the expansion of our training facilities worldwide, additional new certified trainer partnerships, and the increase of our valued resellers and distributors to better support our growing customer base,” said Lee Reiber, COO, Oxygen Forensics, Inc.
“The reason I joined Oxygen was because of the tremendous growth potential in the digital forensics market,” said Tim O’Rourke, VP of Sales, Oxygen Forensics, Inc. “Oxygen not only has a product that is an industry leader, but also a team of people that cares deeply for our customers and for those people that our products and our customers assist.”
Alexandria, VA – November 30, 2017 — Oxygen Forensics, a worldwide developer and provider of advanced forensic data examination tools for mobile devices, drones and cloud services, today announced that it has added almost 20 new features in its flagship product Oxygen Forensic® Detective X (version 10). Among the features, Oxygen has made its industry-leading Oxygen Forensic® Cloud Extractor even faster by using 64-bit database processing power that speeds up the entire data extraction process.
Oxygen Forensic Detective X enhances investigation abilities for forensic experts with the addition of these uniquely supported cloud services:
- Mi Cloud - Xiaomi phones are growing in popularity. The Oxygen Forensic Cloud Extractor offers the industry-first ability to extract all available information from Mi Cloud via login/password or token including contacts, calls, messages, calendar and other personal data.
- Samsung Cloud backup - Forensic experts can import and parse complete Samsung Cloud backups that can be accessed via login/password or token. Backups may contain contacts, calls, messages, calendars, files and Wi-Fi history.
- Samsung Cloud Gallery – Added the ability to extract live, trashed and deleted photos, videos and documents from Samsung Cloud. This data also contains geographical locations so experts can track the whereabouts of the Samsung device owner.
As announced earlier this month, Oxygen Forensic Detective X also includes enhanced WhatsApp data extraction including WhatsApp backup decryption with 2-step verification and data extraction from the WhatsApp server.
Other additions to Oxygen Forensic Detective X include unsupported apps parsing, drone support enhancements, selected physical extraction, screen lock bypass for Motorola devices, Huawei backups import ability (Detective X can find passwords for encrypted backups with the help of a built-in Passware module), predefined keyword list and an improved SQL editor. For an advanced explanation of all new features, please visit the Oxygen Forensic Detective X product page.
“We have been very excited to tell our customers and the world about all of the new additions to Oxygen Forensic Detective X,” said Lee Reiber, COO, Oxygen Forensics, Inc. “With our new cloud services additions, Oxygen now supports many cloud services, and we continue to lead the competition with two industry-first WhatsApp extraction capabilities. Our ability to keep providing new product improvements every single month speaks to the strength and determination of our entire product team as we help government, law enforcement and corporate forensics experts.”
Alexandria, VA – November 16, 2017 — Oxygen Forensics, a worldwide developer and provider of advanced forensic data examination tools for mobile devices, cloud services and drones, today announced that its new flagship product, Oxygen Forensic® Detective X (version 10), which contains the industry- leading Oxygen Forensic® Cloud Extractor, has added new WhatsApp extraction features.
Advanced WhatsApp Extractions
Oxygen Forensic Detective X has added two industry-first features in the algorithm of WhatsApp data extraction, including:
- WhatsApp backups decryption with 2-step verification - This verification is an optional feature that added to provide better security to the account. When enabled, any attempt to verify the phone number on a WhatsApp account needs to be accompanied by the six-digit PIN created by the user. The new Oxygen Forensic Cloud Extractor offers either the opportunity to enter the PIN (if it’s known) or several methods to deactivate it.
- Unique WhatsApp data from the server - Oxygen Forensics has added a special WhatsApp Cloud service that allows forensics experts to acquire undelivered messages, unanswered calls and information about groups and contacts directly from the WhatsApp server. This service is useful in specific cases with damaged or locked devices. When forensic experts use the WhatsApp Cloud service, they can even obtain access to the WhatsApp server without the phone.
For a full list of WhatsApp extraction capabilities, please visit this link.
“Since the middle of this year, we’ve been able to decrypt WhatsApp backups from Google Drive without an encryption key from the device. For the Oxygen Forensic Detective X release, our team has been strategically focused on supporting investigations by continuing to provide industry firsts such as WhatsApp extractions,” said Lee Reiber, COO, Oxygen Forensics, Inc. “With Oxygen’s Cloud Extractor, we can now decrypt devices with 2-step verification, and acquire data from the WhatsApp server. Both were greatly needed to keep pace with 3rd party mobile apps – and are more industry firsts.”