Oxygen Forensics Launches Oxygen Forensic Detective 12.0 - Powered by JetEngine

Alexandria, VA - October 8, 2019 - Oxygen Forensics, a global leader in digital forensics for law enforcement, federal, and corporate clients, today announced the release of Oxygen Forensic Detective 12.0, Powered by JetEngine. The new release completely overhauls the program’s interface, giving Oxygen Forensics’ flagship software a new look and feel—including a multi-tab interface to seamlessly handle multiple extractions—while retaining full functionality and ease of use. The redesign is coupled with several back-end improvements that will increase the speed of Oxygen Forensic Detective’s data processing and decoding capabilities threefold.

With this latest update, Oxygen Forensics becomes the first mobile forensic company to allow full utilization of system resources (RAM, processors) to parse and decode data. Oxygen Forensic Detective 12.0 now gives investigators the ability to view files taken from multiple devices simultaneously, allowing for deeper analysis. It also greatly expands device and cloud storage system compatibility, enabling users to extract data from all new sources, including the vast majority of popular cloud services available on the market today.

 Thanks to first-in-industry partnerships with organizations like RankOne and their continued partnership with Passware and others, Oxygen Forensic Detective 12.0 gives users enhanced image and video processing, categorization, and analysis capabilities—including best-in-class facial recognition and clustering software. With these advances, the software takes its place as the most powerful, all-in-one, turnkey mobile forensics platform on the market, no add-ons required.

“At Oxygen Forensics, we pride ourselves on providing our customers with the tools, resources, and support they need to extract data from hundreds of devices and thousands of applications. Now they will be able to do things faster than ever—more than three times as fast as our previous edition—with a new, easy-to-use interface,” said Lee Reiber, COO of Oxygen Forensics. “We’ve expanded our capabilities to include a bevy of new devices, apps, and cloud providers that are becoming increasingly popular, and which will soon dominate the world of digital data storage. And all of this is included: No add-ons, no extra fees, no packages. Oxygen Forensic Detective 12.0 is the undisputed all-in-one digital forensics software on the market.”

Oxygen Forensic Detective 12.0 now allows for the extraction of data from dozens of new devices, providing detailed, built-in analytics for them all. Users will be able to extract password tokens, images, contacts, geolocational data, attachments, calendars, phone call logs, device activity, and other data from LinkedIn (over 500 million users), Reliance JioPhone and JioCloud (serving over 320 million subscribers), Viber Cloud (over one billion registered users), KaiOS (operating on 100 million devices in 100 countries), and more.

The Oxygen Forensic Detective Suite is available to previously vetted and appropriately licensed law enforcement organizations. The suite is also available to private customers for investigations and corporate in-house analysis.

read more


Oxygen Forensics Announces Partnership with Rank One Computing

Myrtle Beach, SC - June 4, 2019 - Today, Oxygen Forensics, a leading global provider of digital forensic investigation software to law enforcement, government, and enterprise organizations, announced its strategic partnership with Rank One Computing, a leading provider of facial recognition and biometrics technology.

 Rank One’s facial recognition technology will be integrated into the Oxygen Forensics Detective solution as an included component for users to capture and analyze image and video data. Just as mobile devices, apps, and cloud services have already proven invaluable in modern criminal investigations, so too will facial recognition capabilities. Rank One is unique in its speed and accuracy thanks to a proprietary algorithm, and its software is already used by the Department of Defense and some of the country’s largest police departments.

 “Rank One is a perfect complement to our product, which can interact with and extract vital data from over 27,000 unique devices, most of which are equipped with cameras and produce copious visual data”, says Lee Reiber, COO of Oxygen Forensics. “The potential forinvestigators will be endless. They’ll spend less time looking throughthousands of photos or videos on a single device and be better equipped toanalyze the aggregated visual data from hundreds of devices, which is sometimes necessary during large-scale incidents to identify suspects.”

 “Oxygen Forensics’ platform is everything we’re looking for in a turnkey product partnership, because of the high computational workload required by their application, and the propensity to produce facial analysis insights that are meaningful and improve their user’s workflow. Our efficient and accurate face recognition engine coupled with their legacy of success in digital forensics makes for a highly compelling investigative tool,” says Brendan Klare, CEO of Rank One Computing.

 Rank One’s facial recognition component will be integrated into Oxygen Forensic Detective software and updated regularly at no additional cost to customers.

About Oxygen Forensics, Inc.:

Oxygen Forensics, Inc., is a leading global provider of software for digital forensic investigations involving mobile devices, drones, and cloud data. The company’s flagship software, Oxygen Forensic® Detective, enables law enforcement, defense, and enterprise organizations around the world to extract and examine data from thousands of device types and applications to build thorough digital evidence cases for legal and forensic proceedings.



Ian Martorana

[email protected]

read more


Oxygen Forensics Launches New Version of Detective with Improvements to Cloud Extractor, KeyScout, and JetEngine

Alexandria, VA - May 28, 2019 - Oxygen Forensics, a global leader in digital forensics for law enforcement, federal, and corporate clients, today announces the release of Oxygen Forensic® Detective 11.4, with improvements to its Cloud Extractor, KeyScout, and JetEngine utilities, including the ability to extract web browser data from Windows PCs.

Oxygen Forensic KeyScout adds the new ability to extract complete web browser data from Windows PCs. When launched on the target computer, KeyScout will collect complete browsing history, saved bookmarks, autofill data, and cookies. 

The collected data can be imported,  parsed, and analyzed within Oxygen Forensic® JetEngine. This innovative feature will help investigators with PC internet artifact discovery in addition to mobile, to round out the digital forensics ecosystem.

“Oxygen Forensics is committed to constantly updating and improving the solutions our customers need to keep the world safe,” Lee Reiber, COO of Oxygen Forensics, said. “The Oxygen Forensic® Detective 11.4 version adds capabilities and functionality that are unmatched in the digital forensics industry, and now, our customers will be able to extract complete browsing history and more from browsers including Google Chrome, Mozilla Firefox, and Microsoft Edge running on Windows computers.”

Oxygen Forensic® Detective 11.4 offers the ability within Cloud Extractor to obtain account information, trusted devices, logins, passwords, tokens and other data from iCloud Keychain, as well as the ability to extract account information, contacts, chats and calls from Wickr Me via password or token. Wickr Me is one of the many instant messaging apps that allows users to exchange end-to-end encrypted and content-expiring messages, including photos, videos, and file attachments and place end-to-end encrypted video conference calls.

Also, with this new version, Oxygen Forensic® JetEngine adds the ability to import and parse Parrot drone flight logs and Parrot physical dumps, which is a continuation of Oxygen Forensics’ effort to address today’s most unrealized threat—unmanned aircraft systems.

Oxygen Forensics regularly innovates and improves its offering because investigators need every valuable artifact from every available source in today’s criminal and corporate investigations.

read more


Oxygen Forensics Announces New Director of Training Hire

Alexandria, VA - April 16, 2019 - Today, Oxygen Forensics, a leading global provider of digital forensic investigation software to law enforcement, government and enterprise organizations, announced the hire of digital forensics expert, Keith Lockhart as its Director of Training.

 Lockhart previously served as Vice President of Strategic Programs for AccessData Group for 15 years, leading digital forensics training solutions for Local, State, Federal and International Law Enforcement agencies as well as worldwide corporate entities and law-firms involved in the prevention, investigation, and prosecution of high-technology crime.

 “We are thrilled to welcome Keith, a former law enforcement officer and expert in the digital forensics industry to Oxygen Forensics as our new Director of Training,” says Lee Reiber, COO of Oxygen Forensics. “Keith is a world-renowned trainer, bringing two decades of experience in digital forensics, e-Discovery, decryption, incident response, mobile device collection, and analysis to the company. His stellar background in training and bold ideas for the future will ensure that Oxygen Forensics clients have the best curriculum and resources in the industry for years to come.”

 Lockhart is a member of the High Technology Crime Investigation Association (HTCIA) and has served as the Director of Training and President for the International Association of Computer Investigative Specialists (IACIS) – from which he obtained Certification as a Forensic Computer Examiner. He has instructed at the FBI National Academy, the United States Secret Service, the Dutch National Police Academy, the National Center for Police Excellence in the United Kingdom, the London Metropolitan Police Anti-Terrorist Branch, the Canadian Police College, Australian Federal Police Headquarters and presents regularly for numerous law enforcement agencies and public / private sector organizations around the world.

 “I am proud to join Oxygen Forensics as it continues keeping the world safe by providing law enforcement, federal and corporate clients’ with cutting edge solutions to their toughest digital forensics needs,” says Keith Lockhart, Oxygen Forensics’ incoming Director of Training “As a former law enforcement officer, I know first hand the value add that Oxygen Forensics products bring to law enforcement officers across the country. This company is at the forefront of the mobile data forensics industry and it is my honor to join it as we transition to the next phase of mobile and data innovation.”

 As Oxygen Forensics Director of Training, Lockhart will be responsible for building a forward-looking training program for the company’s wide array of law enforcement, federal and corporate clients. He will be tasked with ensuring the company's training infrastructure remains ahead of technologies and trends in the market. 

read more


Oxygen Forensics Launches Industry Exclusive Drone Update

Alexandria, VA - April 2, 2019 - Oxygen Forensics, a global leader in digital forensics for law enforcement, federal, and corporate clients, today becomes the sole company in the industry to offer complete flight history extraction from my MyParrot cloud with the release of Oxygen Forensic Detective (11.3).

“Oxygen Forensics continues to ensure our customers have the solutions they need to keep the world safe,” Lee Reiber, COO of Oxygen Forensics, said. “Oxygen Forensic Detective 11.3 update will set the tone for the industry by offering full data access to the world’s second-leading drone, Parrot. As recreational drones grow in popularity, so will the need for our customers to access critical data on those devices. While our previous update (11.2) allowed users to import and parse Parrot’s flight logs extracted from an installed mobile app or a drone physical dump, 11.3 brings an industry exclusive ability to extract complete flight history from MyParrot cloud.”

Drone use presents unprecedented threats to national security, citizen privacy, and public safety. Evidence extracted from MyParrot cloud is extensive and includes information about the account, general information about the flight, and detailed flight history with metadata like speed, altitude, battery level, and more. Currently, this cloud method provides drone forensics experts with the most comprehensive flight history from Parrot drones on the market.

Oxygen Forensic Detective 11.3 offers access to MyParrot cloud via login/password or token entered in Oxygen Forensic Cloud Extractor. Oxygen Forensics’ KeyScout utility can detect a login and password if they were entered in a web browser on a computer. Oxygen Forensic Detective also automatically finds a token to MyParrot cloud in the installed FreeFlight Pro app in Apple iOS and Android devices.

Oxygen Forensic Detective now parses all available drone data from FreeFlight 6 mobile app from Apple iOS and Android devices.



read more


Oxygen Forensics introduces advanced support for Parrot drones and exclusively uncovers BlaBlaCar trips

Alexandria, VA – Feb. 13, 2019 – Oxygen Forensics, a leading global provider of digital forensic investigation software for government, law enforcement, and enterprise organizations, has released an update to its flagship product, Oxygen Forensic® Detective, introducing advanced features to support Parrot drone flight logs extracted from either an installed mobile app and even a physical dump along with the exclusive ability to extract and parse BlaBlaCar and CoverMe data.

The new release offers extraction of Apple Health data from the cloud account via login/password  or token and the ability to collectively analyze file systems from several extractions in a single view within Oxygen Forensics’ JetEngine.


“Keeping the world safe should be the subtitle of this release” says Lee Reiber, COO of Oxygen Forensics.  “With our continued innovation and support of the newest technologies being encountered by our customers daily we have risen to the challenge once again.  In 11.2 we released the first support for BlaBlaCar, a world-wide ridesharing program, as well as CoverMe, and app used to conceal data, often for nefarious reasons, along with unique support for Parrot drones and health apps.”  “Listening to our customers, and their operational needs, will continue to be a priority for us.  This commitment is what sets us apart in a growing industry”

Headlines around the world during the recent months have highlighted the growing danger caused by recreational drones. The Gatwick drone issue that grounded all the flights for several days is a good example of it. Oxygen Forensic Detective had previously released support for data parsing from FreeFlight Pro, the official piloting mobile app for Parrot drones. However, the new version now delivers the ability to import and parse Parrot’s flight logs. Now investigators can view geo coordinates containing timestamps along with metadata that includes: altitude, velocity, ground speed, Wi-Fi signal, battery level, current satellite numbers, and more. The extracted flight history can be visualized with our built-in Oxygen Maps. The ability to import DJI drone logs has been an included feature in Oxygen Forensic Detective, but with this release our JetEngine module will also support these valuable logs. Investigators now will be able to import DJI log flight logs and parse additional technical data, like drone acceleration, gyroscope and temperature details to name a few.

Oxygen Forensic® Detective Version 11.2 Update Highlights

·         The industry’s only method to extract data from BlaBlaCar via login/password and token.

·         Apple Health data extraction via login/password or token.

·         Additional data extraction from Telegram including calls, polls, bot messages and albums.

·         Ability to analyze and visualize the flight data of Parrot drones including the following models: Anafi, Bebop, Bebop 2 and Disco.

·         Decryption of physical dumps with the known password for Android devices based on Qualcomm Snapdragon MSM8909 chipset.

·         Significantly Improved EDL screen lock bypass method by identification of the device via chipset, not model.


read more


New Oxygen Forensics updates put one of the world’s fastest, most comprehensive digital forensic platforms in the hands of investigators

ALEXANDRIA, Va. – Dec. 6, 2018 – Oxygen Forensics, a global provider of digital forensic investigation software to law enforcement, government and enterprise organizations, introduced today an update to its product enabling forensic investigators to process and examine large volumes of data at record speed. The update, which includes a new module called Oxygen Forensic® JetEngine, not only makes Oxygen Forensic® Detective 11.1 one of the most comprehensive analysis tools on the market for examining data from mobile devices, cloud services, drones and IoT devices, but also one of the fastest in the world.

While smartphones represent the handheld key to an individual’s digital identity and activity, only a small portion of the data collected about a person is stored on the phone itself. Complemented by various network devices such as laptops, drones, health trackers and connected home assistants, and powered by cloud services, the amount of data about an individual relevant to an investigation grows exponentially over time.

“Analyzing a dozen or more cell phones from different individuals can lead to quite a volume of data – not just from the phones alone, but also from online data and accounts associated with the phones,” noted Bryan Neumeister, a court-certified forensic expert and CEO of USA Forensic. “JetEngine has given us the ability to bulk-download information from various websites and backup files and incorporate that into a case database quickly and effortlessly.”

The JetEngine module enables users to remove processing memory limitations by expanding or upgrading the hardware used in extracting and processing data. Many advanced forensic labs leverage multi-core processors or multiple configurations to examine many devices and accounts at once as part of one or more investigations. Now, these investigators can take full advantage of these hardware components by removing limitations of the software.

Lee Reiber, chief operating officer for Oxygen Forensics, commented, “Finding relevant evidence across multiple devices and accounts is already like finding a needle in a haystack and law enforcement officers face haystacks that grow bigger every day. We designed JetEngine specifically to help investigators tackle enormous amounts of data quickly and efficiently. For high-stakes criminal investigations such as murder cases and terrorist activity, cutting the time spent retrieving and sifting through data by 50 percent has the potential to save countless lives.”

Oxygen Forensic® JetEngine, along with several other new features including industry-exclusive support for Uber, Fitbit, Google Fit and Samsung Health, is available today for Oxygen Forensics customers to download and begin using. For more information regarding this update or Oxygen Forensic® Detective, visit

Oxygen Forensic® Detective Version 11.1 Update Highlights

  • Introducing Oxygen Forensic® JetEngine, a module enabling rapid parsing of large data sets 50% faster than competing platforms
  • Full support for extracting and examining cloud data from Fitbit, Google Fit and Samsung Health
  • Extract and examine data from Uber, including trip maps and driver details
  • Perform logical data extractions without a cable connection using an SD card (Android 4.0+)
  • Added support for more than 4,500 Android devices and 190 application versions
  • For full release update notes, visit our web site

read more


Oxygen Forensics enhances cloud and decryption capabilities

ALEXANDRIA, Va. – Oct. 11, 2018 – Oxygen Forensics, the D.C. area provider of software enabling law enforcement organizations to collect and examine evidence from digital devices, has released the latest version of its flagship product, Oxygen Forensic® Detective. The new set of features builds on 18 years of digital forensics capabilities to support the growing needs of investigators with expanded support for smartphones in addition to new tools to examine connected home devices, smartwatches, and encrypted cloud data when involved in criminal activity.

“Increasingly, the ‘eyes and ears’ of our personal digital networks – smartwatches, connected home devices, and other technologies that respond to our voices or movements – are the most reliable witnesses to a crime,” explained Lee Reiber, COO of Oxygen Forensics. “With this new version of Detective, we aim to empower investigators in solving their toughest cases using the most detailed data available by overcoming roadblocks and collecting more data from the central nervous system of these networks, the cloud.”

Headlines around the world during the recent years have highlighted the growing disparity between technology manufacturers and law enforcement, sparking debate regarding when and how data from smartphones and other devices can be secured for investigation. Similarly, law enforcement has been applauded for solving many high-profile crimes using data from these devices. Fitbit data retrieved through an Amazon Echo is currently being used in prosecution for the murder of Karen Navarra in San Jose, and the British government has begun pursuing organized crime rings through decryption of communications using WhatsApp.

Oxygen Forensic® Detective is leveraged by investigators in thousands of cases around the world to provide prosecutors with the digital evidence necessary to solve crimes like these and make the world a safer place. 

Oxygen Forensic® Detective Version 11.0 Update Highlights

  • Extract WhatsApp messages through the WhatsApp server using a QR code
  • Examine IoT connected home devices using Amazon Alexa and Google Assistant
  • Decrypt physical extractions of LG devices with brute force
  • Extract more than 30 different smartwatches using MediaTek chipsets
  • Discover additional authentication tokens on desktop using KeyScout
  • Updated DJI drone support for newest devices, as well as access to SkyPixel
  •  Acquire logical image of feature phones using MediaTek chips

read more


Oxygen Forensics now supports GrayKey iPhone extractions, enhanced analysis of Wi-Fi and Bluetooth connections

Alexandria, VA – Aug. 8, 2018 – Oxygen Forensics, a leading global provider of digital forensic investigation software for government, law enforcement, and enterprise organizations, has released an update to its flagship product, Oxygen Forensic® Detective, introducing advanced features to support the extraction of data from locked smartphones, import of extractions performed from the popular GrayKey iPhone cracking software, and analysis of device logs including history of Bluetooth and Wi-Fi connections.

“If you’ve read any headlines lately about digital forensics, then you’ve heard of GrayKey,” stated Lee Reiber, chief operating officer of the D.C. area-based software company. “The team at Grayshift has built a great product to help law enforcement organizations access locked iPhones for examination, and we’re excited to support customers using this tool with advanced analytics.”

Oxygen Forensics products offer investigators the ability to access and extract data from thousands of smartphones, drones, cloud accounts, and Internet of Things (IoT) components; however, many investigations in recent years have been limited by security constraints on Apple devices. GrayKey has caught the attention of investigators due to its ability to work around these security constraints and grant access to locked iPhones.

Oxygen Forensics customers who are using its software to analyze data extracted from devices are now able to import device images from GrayKey to analyze the data and combine it with other digital evidence sources in their investigations.

Oxygen Forensic® Detective Version 10.4 Update Highlights

  • Decrypt WhatsApp backup files using an account phone number or token
  • Import iOS images extracted using GrayKey
  • Acquire partial images of locked Samsung devices using MTP
  • Identify photos with similar content using PhotoDNA hash sets
  • Extract Wi-Fi hotspot access history with KeyScout
  • Examine Bluetooth connection history
  • Authenticate Google services using 2FA with Google Prompt
  • Improved EDL method for extracting Qualcomm chip-based devices

read more


Oxygen Forensics adds support for Samsung Secure Folder and lock screen bypass enhancements

Alexandria, VA – May 31, 2018 - Oxygen Forensics, has released an update to its popular mobile forensic software allowing investigators exclusive access to mobile devices, applications, and cloud data not previously accessible through software solutions.

The company’s flagship software, Oxygen Forensic® Detective, enables investigators to access and extract data from thousands of mobile devices, applications, and storage locations to build stronger cases with digital evidence. The update to version 10.3, which most notably includes access to cloud backups of the Samsung Secure Folder and Viber messaging app, as well as expanded support in extracting from locked Android devices, will allow for more detailed investigations by law enforcement and government defense groups in legal proceedings.

“Our commitment to supporting digital investigations requires constant innovation to ensure we quickly deliver the most updated solutions to meet ever-evolving technological needs and supporting popular applications,” commented Lee Reiber, Oxygen Forensics COO. “The sooner law enforcement and defense organizations have access to these features, the sooner they can begin holding wrongdoers legally accountable for their actions.”

The Samsung Secure Folder represents one of many roadblocks investigators face when collecting digital evidence for a case. Users of supported Samsung devices may store files separately from the phone’s primary storage, allowing them to protect information with a separate set of security standards and access credentials. Oxygen Forensics’ software allows investigators exclusive access to backups of these protected files through cloud extraction to retrieve data relevant to a case.

Oxygen Forensic® Detective version 10.3 supports more than 7,000 smartphone and drone operating systems and applications – the most of any forensic software currently on the market – through both device physical extractions and cloud backup access. For more information on Oxygen Forensics or this software update, visit

Oxygen Forensic® Detective version 10.3 Update Highlights

  • Industry First: Extract cloud backup of Samsung Secure Folder, including account details, contact and calendar cards, Application Package Kit (APK) file, and document revisions
  • Industry First: Extract data from Viber messenger app backed up to iCloud or Google Cloud
  • New Oxygen Forensic® KeyScout utility enables investigators to locate and retrieve tokens and passwords from a device’s associated PC for use in mobile investigations
  • Bypass lock screen on more than 430 Android devices built with Qualcomm chipsets
  • Support for full physical extraction on more than 100 new Spreadtrum Android devices with storage over 4 GB
  • Support for more than 430 smartphone app updates

read more


Oxygen Forensics Introduces New Method of Decrypting WhatsApp Data With Release of Oxygen Forensic Detective 10.2

Alexandria, VA – May 8, 2018Oxygen Forensics is a worldwide developer and provider of advanced forensic data examination tools for mobile devices, cloud services and drones, announced today that Oxygen Forensic® Detective 10.2 can now acquire a WhatApp Cloud token from Android devices.

Two months ago, Oxygen Forensics announced Oxygen Forensic Detective 10.1 that featured the ability to help decrypt WhatsApp iCloud or Google backups with a token. If a key file that is required for backup decryption cannot be obtained, Oxygen Forensic Detective can create a WhatsApp authentication token and use it to decrypt backups stored within the iCloud and Google Cloud services.

Now, with Oxygen Forensic Detective 10.2, investigators can use a WhatApp Cloud token from an Androiddevice to decrypt WhatsApp backups from Android devices, WhatsApp Google Drive,as well as iCloud backups associated with the same phone number.

“Our product development team is constantly working on new features every single day,” said Lee Reiber, COO, Oxygen Forensics. “The new WhatsApp decryptionmethod leaves no digital trace and is a good alternative to the commonly used method with the key file. With this token, forensics experts can also acquire undelivered messages and unanswered calls directly from the WhatsApp Server, which can also help the investigators put the pieces together to solve crimes.”

read more


Oxygen Forensics Continues Leadership Position on Drone Forensics by Adding Physical Extraction from DJI Drones

Alexandria, VA – April 10, 2018 - Oxygen Forensics, a worldwide developer and provider of advanced forensic data examination tools for mobile devices, cloud services and drones, announced today that its flagship software product, Oxygen Forensic® Detective v. 10.2, offers forensic detectives the industry-first ability to extract all information from a DJI drone with only a USB cable.

The new Oxygen Forensic® Detective v.10.2 allows forensics experts to connect the drone to their examination computer via USB cable and conduct a physical collection of the embedded storage chip. Once Oxygen Forensic® Detective recognizes the drone, a physical acquisition is available in only a few clicks that then reveals the drone’s complete flight history with GPS locations and metadata. This data includes valuable facts like speed, altitude, direction, and other evidentiary parameters. The drone flight path is then visualized in the built-in Oxygen Forensic® Maps (both online and offline) which gives a clear picture of where the drone has traveled.

“The number of recreational drones being used around the world is growing at an incredibly fast pace,” said Lee Reiber, COO, Oxygen Forensics. “It should come as no surprise that we’ll see the number of crimes involving drones also increasing exponentially. It has become essential for digital forensic experts to have a tool that combines automated extraction, parsing and analysis of drone data from all possible sources, and we’ve given our customers exactly that with more features expected in the weeks and months to come.”

In addition to the new ability to extract data with the physical drone and a USB cable, Oxygen Forensic® Detective (in version 10.1) also allows experts to extract drone data from DJI cloud, critical when the drone is damaged or cannot be acquired. With Oxygen Forensic® Cloud Extractor, forensics experts can analyze the user account information, the list of drones connected to this account, and the complete flight history of the drone(s), all from the DJI cloud.

Decryption of DJI Cloud Token

With Oxygen Forensic® Detective v.10.2, forensics experts can extract and decrypt the DJI cloud token directly from a mobile device (Apple iOS and Android) when the DJI GO or DJI GO 4 app is installed. A decrypted DJI token is shown in the Cloud Accounts section of Oxygen Forensic® Detective. The token is then used to access DJI cloud with just one click to reveal and extract the drone flight history. By using the token, experts leave no digital trace. DJI token extraction from a mobile device makes it possible to acquire all the vital drone information, even without the drone itself.

read more


Oxygen Forensics Doubles Down on Drone Forensics by Providing Industry-Exclusive Support for DJI Cloud

Alexandria, VA – March 01, 2018 - Oxygen Forensics, a worldwide developer and provider of advanced forensic data examination tools for mobile devices, cloud services and drones, announced today that its flagship software product, Oxygen Forensic® Detective v. 10.1 can now obtain data from the DJI cloud, which is the data repository for all DJI drones. Oxygen Forensics does this through Oxygen Forensic® Cloud Extractor.

With almost a million registered drones in the United States alone and much more all over the world, drones take pictures and video and even can transport packages. Law enforcement continues to review methods to acquire data from drones that are involved in illegal activities, especially GPS location data such as altitude, direction of travel, speed, and facial recognition data that can reveal the flight data of the drone. This information is sometimes stored on the drone itself, but in the case of drones manufactured by DJI, this digital information is also stored in the DJI cloud.

“Gathering data from the DJI cloud is a feature exclusive to Oxygen Forensics. From the DJI cloud, we can obtain important data from a drone that crashed or was physically damaged,” said Lee Reiber, COO, Oxygen Forensics, Inc. “The DJI cloud is critical since it stores all the serial numbers of the drones associated with an account holder. If we can match serial numbers from the cloud to a specific device, then the authorities can find information about the owner of the drone.”

Oxygen Forensic® Detective is the only tool that allows forensics professionals the ability to extract and decode drone data from all possible sources: drones, the cloud and apps associated with drones. Drone data is transmitted and stored in either the user’s online account, the drone manufacturer’s cloud, or in some cases both locations. The additional data within the cloud represents a separate challenge for a mobile data forensics expert since manual extractions can be extremely complicated or just simply not possible for various reasons. With the use of Oxygen Forensic® Detective, experts are now able to access the drone cloud and extract the information about the account, the drone serial number, the flight history, and other associated metadata.

read more


Oxygen Forensics Works to Fight Domestic and International Child Exploitation; Partners with Project VIC

Alexandria, VA – January 25, 2018 - Oxygen Forensics, a worldwide developer and provider of advanced forensic data examination tools for mobile devices, drones and cloud services, today announced that it is partnering and integrating its product and technology with Project VIC.

Project VIC is a coalition of law enforcement and private sector partners who champion a transformation in the approach to child exploitation investigations by developing innovative technologies and victim-centric methodologies. Law enforcement agencies worldwide use the technology developed by Project VIC’s partners in their pursuit rescue child victims, apprehend offenders and secure crime scenes. 

“Oxygen Forensics is committed to helping law enforcement fight child exploitation around the world, and we’re very proud of our partnership with Project VIC,” said Lee Reiber, COO, Oxygen Forensics, Inc. “Unfortunately, child exploitation happens all the time. Anything we can do to slow that down and bring those that abuse to justice is worth every ounce of effort we have as a company.”

Through Oxygen Forensics’ product functionality, users will be able to search child exploitation content by hash sets and other indicators via Project VIC as well as exporting extracted file information to the VIC-JSON format that is certified with Project VIC.

Mobile forensic experts can now download files from Project VIC’s extensive library of hash signatures and collaborate with the rest of the world on identifying if they have illegal or images of interest to the Global VIC Community. Any images found to be suspicious on seized mobile devices will be copied to the Project VIC section and classified according to the Project VIC Classification Standard

“Mobile devices have become weapons in the hands of individuals seeking to exploit our children,” said Richard Brown, Director of Project VIC. “Oxygen Forensics’ new technical capabilities will have a significant impact on efforts by law enforcement to rescue victims from abusers.”

read more


Oxygen Forensics Enjoys Double-Digit Growth in 2017

Alexandria, VA – Dec. 19, 2017 — Oxygen Forensics, a worldwide developer and provider of advanced forensic data examination tools for mobile devices, drones and cloud services, today announced that it has seen double-digit growth in 2017 as it worked to increase its customer base with new customer additions in law enforcement, government and corporate spaces. Due to its growth, Oxygen relocated its headquarters in Alexandria, VA, and tripled the size of the office.

Oxygen has seen double-digit to triple-digit growth year over year since 2013. This past year the company focused on strategic expansion that produced an exceptional growth-to-revenue ratio that positioned Oxygen Forensics well for the future. Due to the historic growth over the past four years, Oxygen needed to move its headquarters to a larger space to add a classroom, forensics lab and more sales and technical support space for the growing staff.

“I am very excited for our corporate growth which led to the expansion of our training facilities worldwide, additional new certified trainer partnerships, and the increase of our valued resellers and distributors to better support our growing customer base,” said Lee Reiber, COO, Oxygen Forensics, Inc.

“The reason I joined Oxygen was because of the tremendous growth potential in the digital forensics market,” said Tim O’Rourke, VP of Sales, Oxygen Forensics, Inc. “Oxygen not only has a product that is an industry leader, but also a team of people that cares deeply for our customers and for those people that our products and our customers assist.”

read more


Oxygen Forensics Adds Nearly 20 New Features to Launch Oxygen Forensic Detective X

Alexandria, VA – November 30, 2017 — Oxygen Forensics, a worldwide developer and provider of advanced forensic data examination tools for mobile devices, drones and cloud services, today announced that it has added almost 20 new features in its flagship product Oxygen Forensic® Detective X (version 10). Among the features, Oxygen has made its industry-leading Oxygen Forensic® Cloud Extractor even faster by using 64-bit database processing power that speeds up the entire data extraction process.

Oxygen Forensic Detective X enhances investigation abilities for forensic experts with the addition of these uniquely supported cloud services:

  • Mi Cloud - Xiaomi phones are growing in popularity. The Oxygen Forensic Cloud Extractor offers the industry-first ability to extract all available information from Mi Cloud via login/password or token including contacts, calls, messages, calendar and other personal data.
  • Samsung Cloud backup - Forensic experts can import and parse complete Samsung Cloud backups that can be accessed via login/password or token. Backups may contain contacts, calls, messages, calendars, files and Wi-Fi history.
  • Samsung Cloud Gallery – Added the ability to extract live, trashed and deleted photos, videos and documents from Samsung Cloud. This data also contains geographical locations so experts can track the whereabouts of the Samsung device owner.

As announced earlier this month, Oxygen Forensic Detective X also includes enhanced WhatsApp data extraction including WhatsApp backup decryption with 2-step verification and data extraction from the WhatsApp server.

Other additions to Oxygen Forensic Detective X include unsupported apps parsing, drone support enhancements, selected physical extraction, screen lock bypass for Motorola devices, Huawei backups import ability (Detective X can find passwords for encrypted backups with the help of a built-in Passware module), predefined keyword list and an improved SQL editor. For an advanced explanation of all new features, please visit the Oxygen Forensic Detective X product page.

“We have been very excited to tell our customers and the world about all of the new additions to Oxygen Forensic Detective X,” said Lee Reiber, COO, Oxygen Forensics, Inc. “With our new cloud services additions, Oxygen now supports many cloud services, and we continue to lead the competition with two industry-first WhatsApp extraction capabilities. Our ability to keep providing new product improvements every single month speaks to the strength and determination of our entire product team as we help government, law enforcement and corporate forensics experts.”

read more


Oxygen Forensic Detective X Launches with New WhatsApp Extraction Features

Alexandria, VA – November 16, 2017 — Oxygen Forensics, a worldwide developer and provider of advanced forensic data examination tools for mobile devices, cloud services and drones, today announced that its new flagship product, Oxygen Forensic® Detective X (version 10), which contains the industry- leading Oxygen Forensic® Cloud Extractor, has added new WhatsApp extraction features.

Advanced WhatsApp Extractions
Oxygen Forensic Detective X has added two industry-first features in the algorithm of WhatsApp data extraction, including:

  • WhatsApp backups decryption with 2-step verification - This verification is an optional feature that added to provide better security to the account. When enabled, any attempt to verify the phone number on a WhatsApp account needs to be accompanied by the six-digit PIN created by the user. The new Oxygen Forensic Cloud Extractor offers either the opportunity to enter the PIN (if it’s known) or several methods to deactivate it.
  • Unique WhatsApp data from the server - Oxygen Forensics has added a special WhatsApp Cloud service that allows forensics experts to acquire undelivered messages, unanswered calls and information about groups and contacts directly from the WhatsApp server. This service is useful in specific cases with damaged or locked devices. When forensic experts use the WhatsApp Cloud service, they can even obtain access to the WhatsApp server without the phone.

For a full list of WhatsApp extraction capabilities, please visit this link.

“Since the middle of this year, we’ve been able to decrypt WhatsApp backups from Google Drive without an encryption key from the device. For the Oxygen Forensic Detective X release, our team has been strategically focused on supporting investigations by continuing to provide industry firsts such as WhatsApp extractions,” said Lee Reiber, COO, Oxygen Forensics, Inc. “With Oxygen’s Cloud Extractor, we can now decrypt devices with 2-step verification, and acquire data from the WhatsApp server. Both were greatly needed to keep pace with 3rd party mobile apps – and are more industry firsts.”

read more