Oxygen Forensics releases a new version of its flagship forensic software, Oxygen Forensic® Detective v.9.4. The updated Oxygen Forensic® Detective offers two industry-first capabilities – data extraction from Samsung Cloud and WhatsApp backup decryption from Google Drive without the encryption key. Version 9.4 also allows to acquire Safari history and bookmarks from iCloud via login/password or token.

Moreover, our updated Oxygen Forensic® Extractor together with the built-in Passware Kit Mobile can now find the encryption key for the user partition allowing forensic experts to overcome Android full disc encryption and get a direct access to complete user data including an unallocated space. We’ve also added deleted databases recovery from the unallocated space of Android physical images to give an instant access to the vital apps data even if the information was previously deleted from the app or moreover the application itself is no longer on the mobile device.

View Oxygen Forensic® Detective release notes.

Watch Oxygen Forensic® Detective release video.

All registered customers may download the new version immediately from their personal customer area. Updated Oxygen Forensic® Analyst and Oxygen Forensic® Passware Analyst are also available for download.

New in Oxygen Forensic® Detective v.9.4:

  • Oxygen Forensic® Cloud Extractor. Added data extraction from Samsung Cloud. Forensic experts can now gain access to account details, device list, contacts, calls, messages, notes and browser data saved from Samsung Galaxy devices.
  • Oxygen Forensic® Cloud Extractor. Added the ability to decrypt WhatsApp backup from Google Drive without an encryption key from the device. The security code that decrypts the backup can be received via text message or phone call.
  • Oxygen Forensic® Cloud Extractor. Added the ability to extract Safari history and bookmarks from iCloud via login/password or token.
  • Oxygen Forensic® Extractor. Added the ability to find an encryption key for the user partition while using custom forensic recovery method and Passware Kit Mobile. The feature is available for Samsung Galaxy S5, Samsung Galaxy S6 and Samsung Galaxy Note 4 devices.
  • Oxygen Forensic® Extractor. Added the ability to recover deleted app databases from unallocated space of Android physical dumps.
  • Oxygen Forensic® Extractor. Added selective data reading from jailbroken iOS devices.
  • Oxygen Forensic® Extractor. Improved extraction of geodata from jailbroken iOS devices. The data is shown in Web Connections section on Locations tab.
  • Oxygen Forensic® Extractor. Improved parsing of .emlx files from jailbroken iOS devices. Extracted emails are shown in Messages section.
  • Event Log. Now voicemails are shown in Event Log. Previously they were shown only in Timeline.
  • Export. Added the ability to export all app data to one sheet of XLS or XLSX report.
  • Export. Added table of contents to the left sidebar of HTML reports.
  • Export. Passwords. Added the opportunity to include fields with timestamps into a report.
  • Applications. Added support for 300+ apps versions for iOS and Android devices.
  • Applications. Messengers. Added data parsing from Threema (3.14) from Android devices.
  • Applications. Messengers. Added data parsing from GroupMe (5.9.0) from iOS devices.
  • Applications. Messengers. Added data parsing from Skype Lite (1.8.0) from Android devices.
  • Applications. Messengers. Updated data parsing from Telegram (4.0.1) from Android devices and  Telegram (4.0) from iOS devices.
  • Applications. Messengers. Updated data parsing from Viber (6.8.8.5)  from Android devices and Viber (6.9.0) from iOS devices.
  • Applications. Messengers. Updated data parsing from Facebook Messenger (120.0.0.14.84) from Android devices.
  • Applications. Messengers. Updated data parsing from Kik Messenger (11.22.1.16008) from Android devices and Kik Messenger (11.21.0) from iOS devices.
  • Applications. Messengers. Updated data parsing from Google Duo (11.1) from Android devices and Google Duo (12.0) from iOS devices.
  • Applications. Messengers. Updated data parsing from WeChat (6.5.8) from iOS devices.
  • Applications. Messengers. Updated data parsing from WhatsApp (2.17.190) from iOS devices.
  • Applications. Messengers. Updated data parsing from Hangouts (20.0.1) from iOS devices.
  • Applications. Messengers. Updated data parsing from Signal Private Messenger (4.6.1) from Android devices.
  • Applications. Messengers. Updated data parsing from Android Messages (2.2.075) from Android devices.
  • Applications. Messengers. Updated data parsing from CoverMe (2.6.18) from Android devices.
  • Applications. Social Networks. Updated data parsing from Facebook (125.0.0.23.80) from iOS devices.
  • Applications. Social Networks. Updated data parsing from VK (2.13.1) from iOS devices.
  • Applications. Business. Updated data parsing from Evernote (8.2.1) from iOS devices.
  • Applications. Business. Updated data parsing from Google Translate (5.10.0) from iOS devices.
  • Applications. Web browsers. Updated data parsing from Safari (10.0) from iOS devices.
  • Added support for iOS 10.3.2.
  • Oxygen Forensic® Cloud Extractor. Fixed problem that occurred while getting access to Twitter account.