Oxygen Forensics

Cloud Data Extraction

Oxygen Forensic® Detective acquires data from more than 40 cloud sources: iCloud, Google, Microsoft, Huawei, E-Mail (IMAP) Server, various social media and cloud storages.

The full list of supported cloud sources: 

  • iCloud Applications, Contacts, Calendars, Drive, Photos, Photo Stream, WhatsApp backup 
  • Google Bookmarks, Contacts, Calendar, Chrome, Drive, Keep, Location History, Mail, My Activity, Photos, Tasks, WhatsApp backup 
  • Microsoft Сontacts, Сalendar, OneDrive 
  • Huawei cloud data 
  • Social Media: Facebook, Instagram, Swarm, Twitter, Vkontakte 
  • Cloud storages: Box, Dropbox 
  • E-mail Servers (IMAP): Google, Hotmail, Yandex, Yahoo, etc 

Oxygen Forensic® Detective can also import and parse the whole iCloud and Windows Phone backups from cloud. 

Forensic experts may utilize either account credentials or token to enter the cloud account to acquire the cloud data. Extracted credentials and tokens from a mobile device are organized and displayed in the Cloud Accounts section of Oxygen Forensic® Detective.

After the cloud data is acquired it can be viewed in Oxygen Forensic® Detective and merged with other extractions for deep data analysis in Timeline, Social Graph and other analytical tools.