Oxygen Forensics

Oxygen Forensic® Suite 2014 version 6.2 Introduces Data Acquisition from My Windows Phone Cloud

Oxygen Forensics, Inc. updates its flagship mobile forensic product, Oxygen Forensic® Suite 2014, to version 6.2, introducing industry-first  forensic analysis of data stored in My Windows Phone Cloud. The new release also offers investigators applications data analysis for BlackBerry 10 devices, adds new Activity Matrix in Timeline, improves map tools and deleted data analysis. Total number of supported devices is more than 8000 now!

All registered customers may download the new version immediately from their personal customer area.

New in Oxygen Forensic® Suite 2014 v.6.2 (build 256):

  • Updated verification of data integrity in File Browser section.

New in Oxygen Forensic® Suite 2014 v.6.2:

  • Industry first! Contacts and Messages extraction from Windows Phone devices. This unique feature enables forensic experts to extract data from WP7 and WP8 devices using My Windows Phone cloud and acquire contacts, messages and general device information. My Windows Phone credentials are required to obtain access to the cloud data. Physical access to the original Windows Phone device is not required.
  • Industry first! Blackberry 10. Forensic access to BB10 applications data.
  • Industry first! Blackberry 10. Applications. User data parsing from Viber (1.0.037) and WhatsApp (2.11.325.2).  
  • Industry first! Blackberry 10. Applications. User data parsing from Facebook (10.2.2.8) and Foursquare (10.4.1.1708).
  • Industry first! Blackberry 10. Applications. User data parsing from Default Web Browser (10.2.1.91).
  • Industry first! Blackberry 10. Applications. User data parsing from Evernote (5.2.1.394).  
  • Industry first! Blackberry 10. Applications. User data parsing from encrypted WhatsApp messages backup (2.11.325.2).
  • Industry first! Blackberry 10. Organizer. Added extraction of Calendar, Notes and Tasks data.
  • Oxygen Forensic® Extractor. Added data parsing of Cellebrite Advanced Logical backups.
  • Timeline. Added Activity matrix that allows to analyze the most active periods of device usage. Applying various filters allows to view activity statistics for a particular remote party or time period.
  • Timeline. Added ability to select in what time zone to display data in the section. By default device time is used.
  • General. Added ability to manually set a time zone for the data extracted from devices that store no information about their current time zones.
  • Passwords. Added keychain file parsing from Elcomsoft DMG images of Apple iOS 7 devices.
  • Export. Now Oxygen Forensic® Suite .xml reports are supported by Nuix v.5.2.
  • Oxygen Forensic® SQLite Viewer. Added data filter in All Deleted Data view mode.
  • Added support for Apple iOS 7.1.
  • Added support for 350+ new Android OS devices: Samsung Galaxy Grand Duos (GT-i9118), Samsung Galaxy Note 8.0 LTE (SGH-i467M), Samsung Galaxy Tab 3 7.0 3G (SM-T211),Sony Mobile Xperia M2 Dual (D2302), Sony Mobile Xperia Z2 LTE-A (SO-03F), etc. The total number of supported devices exceeds 8000.
  • Applications. Messengers. Added data parsing from Voxer (2.7.5) for iOS devices and Voxer (1.5.2) for Android OS devices.
  • Applications. Social Networks. Added data parsing from Snapchat (6.1.2) for iOS devices.
  • Applications. Messengers. Added data parsing from Facebook Messenger (4.1) for iOS devices.
  • Applications. Web Browsers. Added web history parsing from Safari for iOS 7 devices.  
  • Applications. Social Networks. Updated support for Pinterest (3.5) for iOS devices.
  • Applications. Social Networks. Updated support for Twitter (6.2.1) for iOS devices.
  • Applications. Productivity. Updated support for Google Drive (1.2.563.31) for Android OS devices.
  • Applications. Social Networks. Updated support for Facebook (7.0.0.26.28) for Android OS devices.
  • Applications. Messengers. Updated support for Facebook Messenger (4.0.0.8.1) for Android devices.
  • Applications. Messengers. Updated support for Viber (4.3.0.712) for Android devices.
  • Timeline. Now a double-click on the event in the grid opens a card with details about the event.
  • Timeline, Web Connections and Location Services, File Browser, Applications. Now when a geo point  is selected on the map the details about the location are shown in the hint.
  • Timeline, Web Connections and Location Services, File Browser, Applications. Other small interface improvements for the functionality of showing coordinates on Google Maps and OpenStreetMaps.
  • Aggregated Contacts. Now a recycle bin icon shows that the contact is taken from a recovered call or message.
  • File Browser. Now modified date is shown for files extracted from Android zip/tar and Android folder images.
  • General. Improved quick data filtering in all the sections.
  • Search, File Browser. Small interface improvements.
  • Applications. Navigation. Accelerated Google Maps section loading.
  • Timeline. Accelerated section loading if there are many images with EXIF headers in it.
  • Oxygen Forensic® Extractor. Fixed problem when logical data extraction from Android OS devices did not start automatically after other acquisition methods failed.  
  • Oxygen Forensic® Extractor. Accelerated data extraction process. Now geo data (coordinates and maps) is received not during data acquisition but in Oxygen Forensic® Suite sections after extraction.
  • Oxygen Forensic® Extractor. Fixed problem that sometimes occurred when importing Decrypted Elcomsoft DMG images.
  • Oxygen Forensic® Extractor. Fixed problem when progress bars were not displayed correctly.
  • Oxygen Forensic® Extractor. Fixed problem with Android backup decryption in case of specific parameter values.
  • File Browser. Fixed problem when file dates were parsed incorrectly from Blackberry 10 backups.
  • File Browser, Applications. Fixed problem with displaying Hex Viewer and Details panels.
  • File Browser. Fixed problem that sometimes occurred when entering the section.
  • Aggregated Contacts. Fixed problem when contacts to whom the same message was sent were aggregated.
  • Aggregated Contacts. Fixed problem when in some cases manual merges could not be undone

Stay tuned to smartphone forensics! Stay tuned to success with Oxygen Forensics, Inc!