Connecting People, Technology, and the Truth.

Oxygen Forensics version 13.3 Sony MTK Dump MOBILE FORENSICS Oxygen Forensic® Detective 13.3 implements a new extraction method entitled “Sony MTK Dump”. This method allows investigators to bypass the screen lock and create a full physical dump of Sony devices based on MTK chipsets with Full Disk Encryption (FDE). If Secure Startup is enabled, investigators can use the built-in brute force module to find the user passcode. Supported devices include Sony XA1, Sony L1, Sony L2, and Sony L3. New Method for Qualcomm Devices MOBILE FORENSICS This update also offers a new method of extraction for Android devices based on Qualcomm chipsets. If a device is unlocked and has Security Patch Level (SPL) no later than February 2020, investigators can apply a built-in exploit to gain temporary root rights and perform a file system acquisition. This method covers multiple devices based on over 25 variations of Qualcomm chipsets running Android...

New release of Belkasoft X Belkasoft announces a new release of Belkasoft X, the flagship digital forensics and incident response product by Belkasoft. In the version 1.2 you will find: Logical acquisition of rooted Android devices. Before, Belkasoft X was able to extract only physical dump, what makes less sense nowadays due to encryption. The possibility to acquire a logical image in case of a rooted phone or tablet helps to avoid encryptionFull file system iOS acquisition using checkm8 method updated for iOS 14.3 and 14.4iOS СhatSecure application analysis supportNotifications and netconfig analysis for macOSA number of issues fixed and improvements made Please review the complete 'What's New' at https://belkasoft.com/new. More on the new product: https://belkasoft.com/x Call for papers for BelkaDay Europe Belkasoft team is happy to announce that our second online DFIR conference is coming soon. This year we invite you to share your expertise on digital forensics and incident response with your colleagues from all over the world. We welcome...

Oxygen Forensics news vol. 14 It’s officially 2021! We hope you enjoyed the holidays, but now it’s time to get back to business! Here’s what we’ve been up to since the start of the new year. New blog post Oxygen Forensic® Detective v.13.2 introduced the ability to import, decrypt, and parse data from Samsung Smart Switch backups. Our latest blog outlines how to use this tool to extract more device data than ever before. Knowledge Nuggets Our latest Knowledge Nugget guides you through the improved OxyAgent presented in Oxygen Forensic® Detective v.13.2. This short video covers, step-by-step, how to extract file system data, as well as APK files. New 2021 Training Offering! As an industry, we remain hopeful that change is around the corner and we can begin gathering again. As environmental challenges continue, so do the day-to-day needs of our users. Based on popular demand, we have added some...

Today, we’re happy to announce the release of Analyze 20.4. This release includes important stability updates to the new GID, which we’ve now also implemented into Analyze CS Operations, as well as new updates and features for the video player. Not to mention a range of other usability improvements across the platform. Release of Analyze 20.4 Stability. Usability. Performance. Revamped and more robust GID: Now available in both Analyze DI and CS Operations In the previous release there was a big upgrade to the GID (Griffeye Intelligence Database) in Analyze DI. In this release, we have followed that up by not only implementing GID into Analyze CS Operations but also by making significant stability improvements. These improvements have been made in close collaboration with our GID User Group. After gathering feedback and input we tested and tweaked several parameters of the GID to finally make it as robust as it’s intended to be. As part of these updates, we have also significantly improved the matching performance for PhotoDNA in GID—which is now...

Throughout the past year, the BlackBag and Cellebrite teams joined as one to focus on delivering you the best experience, technology, support, and services in the industry. We are excited to reveal new improvements coming very soon to the Cellebrite computer access and analysis suite of products. We hope you’ll see these as a reflection of our collective growth and shared commitment to providing examiners and investigators the best solutions available.Introducing: Digital CollectorDigital Collector, previously known as MacQuisition, will now allow users to triage and collect from both Mac and Windows Systems – a one of a kind offering in the industry. Formerly an acquisition tool that only imaged Macs, we have decided to rename it to Digital Collector to reflect the product’s evolution and innovation in the digital intelligence space.Digital Collector version 3.1 will be released in the next several weeks. To learn more about Digital Collector and see...