±Your Account
Membership:
New Today: 4
New Yesterday: 10
Overall: 24370
Visitors: 41±Latest Articles
· Catching the ghost: how to discover ephemeral evidence with Live RAM analysis
· Geo-tagging & Photo Tracking On iOS
· KS – an open source bash script for indexing data
· Mobile Device Geotags & Armed Forces
· Categorization of embedded system forensic collection methodologies
· Interpretation of NTFS Timestamps
· What are ‘gdocs’? Google Drive Data – part 2
· What are ‘gdocs’? Google Drive Data
· Bad Sector Recovery
· Forensic Artifact: Malware Analysis in Windows 8
· Geo-tagging & Photo Tracking On iOS
· KS – an open source bash script for indexing data
· Mobile Device Geotags & Armed Forces
· Categorization of embedded system forensic collection methodologies
· Interpretation of NTFS Timestamps
· What are ‘gdocs’? Google Drive Data – part 2
· What are ‘gdocs’? Google Drive Data
· Bad Sector Recovery
· Forensic Artifact: Malware Analysis in Windows 8
±Follow Us
±Latest Jobs
Back to top
Skip to content
Skip to menu
Back to top
Back to main
Skip to menu
Oxygen Forensics
Oxygen Forensics
Posted: Wed Jan 16, 2013 5:36 pm
Looking for anyone who can provide some feedback on Oxygen Forensic Android Rooting Addon. Any luck recovering deleted SMS with it?
-

psl485 - Newbie
Re: Oxygen Forensics
Posted: Thu Jan 17, 2013 2:20 am
We have had oxygen in our laboratory for over 1 year and it has not benefited to our examinations as we expected.
Most of the time it has been problem to work with it. For instance when you connect the phone to the forensic workstation and operate the oxygen to examine the phone, it usually fails to recognize the phone, or gives too many error messages. You take the phone to anohter mobile forensics solution and it works just fine.
Some menus on oxygen are left untranslated - menus are left in Russian, which is an apparent lack of quality assurance.
It can not extract as much deleted information as other leading products. My assistants have tried to use it many times and they were always unhappy about the results from the oxygen.
Most of the time it has been problem to work with it. For instance when you connect the phone to the forensic workstation and operate the oxygen to examine the phone, it usually fails to recognize the phone, or gives too many error messages. You take the phone to anohter mobile forensics solution and it works just fine.
Some menus on oxygen are left untranslated - menus are left in Russian, which is an apparent lack of quality assurance.
It can not extract as much deleted information as other leading products. My assistants have tried to use it many times and they were always unhappy about the results from the oxygen.
-

yunus - Senior Member
Re: Oxygen Forensics
Posted: Thu Jan 17, 2013 12:13 pm
As much as I appreciated the free trial they offer, I found Oxygen to recover far less than other software based tools.
_________________
Why order a taco when you can ask it politely?
Alan B. "A man can live a good life, be honorable, give to charity, but in the end, the number of people who come to his funeral is generally dependent on the weather. "
_________________
Why order a taco when you can ask it politely?
Alan B. "A man can live a good life, be honorable, give to charity, but in the end, the number of people who come to his funeral is generally dependent on the weather. "
-

armresl - Senior Member
Re: Oxygen Forensics
Posted: Mon Jan 21, 2013 5:39 am
Recently Cellebrite has offered what I have found to be a reliable rooting function however it all depends on the version of Android that is running on the device. Another option to you is SuperOneClick however please bear in mind that this is not a 'forensic' tool and only supports older versions of the Android OS.
You will need to ensure you access the developer settings menu on the device and enable debugging mode otherwise you won't be able to do a whole lot.
You will need to ensure you access the developer settings menu on the device and enable debugging mode otherwise you won't be able to do a whole lot.
-

TomP - Member
Re: Oxygen Forensics
Posted: Mon Jan 21, 2013 6:23 pm
We have used Oxygen in our lab for a year now and am not too impressed with the rooting. I was really excited when we got it, the description made it out to be the fancy tool you could find all sorts of deleted information with. No such luck. The rooting is only good on devices up to a particular version (I want to say 2.x but I could be wrong) and even when we got a phone to use it on it didn't come up with anything extra. My advice is to try a different product. save yourself the hassle of this one.
-

sgreene2991 - Member
Re: Oxygen Forensics
Posted: Tue Jan 29, 2013 7:44 pm
Thanks for the input. Has anyone had much recovering deleted SMS on Droids? If so what tool was it?
-

psl485 - Newbie
Re: Oxygen Forensics
Posted: Mon Mar 04, 2013 2:54 am
Yes, you can find traces if deleted data in Android devices:
1. Information on deleted SMS messages is stored in the mmssms.db file that can be found in the File Browser section and opened with SQLite Database viewer. This database is accessible on rooted devices only.
2. Deleted Android device logs containing traces of SMS, MMS and application messages with names and phone numbers are stored in the logs.db file that can be opened with SQLite Database viewer in the File Browser section.
3. Traces of deleted data can be found in SQLite databases stored in the mobile device and recovered with SQLite Database viewer. F.ex., various applications deleted messages.
Oxygen Forensic Android Rooting Add-on supports devices running Android OS 1.6-2.3.4 and 3.0 - 4.0.4.
1. Information on deleted SMS messages is stored in the mmssms.db file that can be found in the File Browser section and opened with SQLite Database viewer. This database is accessible on rooted devices only.
2. Deleted Android device logs containing traces of SMS, MMS and application messages with names and phone numbers are stored in the logs.db file that can be opened with SQLite Database viewer in the File Browser section.
3. Traces of deleted data can be found in SQLite databases stored in the mobile device and recovered with SQLite Database viewer. F.ex., various applications deleted messages.
Oxygen Forensic Android Rooting Add-on supports devices running Android OS 1.6-2.3.4 and 3.0 - 4.0.4.
-

OxygenSoftware - Newbie
















