oxygen forensic®
detective
features



advanced Physical methods
Physical collection while bypassing device security.


aggregated contacts
Uncover and reveal names, usernames, emails, and more in different sources on the device.


android jet imager
Create full physical dumps from Android devices 25% faster than regular methods.


applications
Extract, decrypt and examine user data from today's most popular apps.


backup and image import
Import and parse various backups and images made from today's devices like iOS, Android, and more as well as import from other forensic tools like Cellebrite and MSAB.


cdr analysis
Process and analyze call data records obtained from wireless providers. Visualize geo coordinates on the map and identify links between callers


cloud data
Gain access to cloud services like: WhatsApp, Telegram, iCloud, Google, Samsung, Microsoft, Facebook, Instagram, Twitter and many other social media cloud services.


credentials collection on computer
Collect credentials and passwords on computer using Oxygen Forensic® KeyScout


data reports
Customize and generate data reports in many formats like PDF, XLS, RTF, XML and HTML.


data scout
Retrieve live subscriber information associated with the phone number including address, phone carrier, and other available data


data search
Powerful global search over a single device, multiple devices or entire case.


deleted data
Automatically recover deleted records and files: contacts, calls, messages, notes, photos, videos, SQLite databases and other vital evidence


device information
view the detailed information about the device and its owner


drone data
Extract and analyze drone data from physical dumps, drone logs and mobile applications.


encrypted backups and images import
Find passwords to encrypted backups and images by using various attacks and optimize the attacks to deliver unrivaled results in record speeds.


event log
View dialed, answered and failed calls including deleted ones. Apply filters to show calls only for a specific period of time


file browser
Access a devices photos, audio and video files, databases and other acquired evidence at the file-system level. View any file in a raw, hex mode, native view.


geo data
Extract and view geo coordinates from various sources: applications data, photo and video EXIF headers, history of Wi-Fi connections, etc


iot device support
Extract and analyze data from IoT devices


key evidence
Mark important entries as key evidence in any program section and view them later in a single list


keyword search
Create and use keyword lists to quickly find the relevant data during or after data extraction


link analysis
Explore social connections between the device owner and his contacts or between several devices by analyzing calls, messages and app communication activities


live data extraction
Extract data from mobile devices based on iOS, Android, Windows Phone, Windows Mobile, Blackberry, Bada OS or feature phones. Additionally, acquire device media and SIM cards


locations visualization
Open geo coordinates on the built-in Maps, visualize user’s movements, determine his frequently visited places and find out if several people were at the same time at the same place


messages
Gain access to SMS, MMS, Email and iMessage communications and read them either in Table or Chats view


organizer
Extract and recover user’s calendars, notes and tasks. Decode iOS encrypted notes


passwords
Decrypt passwords and authentication tokens to user accounts in Social Networks, Messengers and Email apps. Reveal passwords that were used to connect to Wi-Fi networks


phonebook
View all phonebook information including names, phone numbers, email addresses, notes, birthdays, creation and modification dates


plist viewer
Open and examine. plist files found in iOS device extractions. Use Converter panel to convert values into a readable format


sqlite viewer
Examine SQLite databases, recover deleted data, convert values, build SQL queries, perform search and export selected entries to reports


screen lock disabler
Get access to the critical data by disabling screen lock on LG Android devices with one click


spyware
Discover spyware that might be running on mobile devices and analyze its logs and configuration files


timeline
View all events in a chronological order: chats, calls, voicemails, photos and videos history, wi-fi connections, geo files and web cache


web connections
Find out when and where the device owner used Internet access and gather information about frequent locations of iOS users


webkit data
Parse user’s emails from webmail interface and content of visited webpages. Gain access to email messages, web search history, locations and other data stored in WebKit databases