Oxygen Forensic® Detective v.17.2 introduces decryption of additional user data from Qualcomm devices and of DJI Avata drone logs, Android Agent support for Android OS 15, and more.
For a full list of updates, refer to the “What’s New” file in the Oxygen Forensic® Detective “Options” menu.
Mobile Forensic Updates
Selective app extraction for FFS extractions
Specific applications can now be selected when extracting the Full File System from Android devices, eliminating the need and time required to extract all applications. This feature is currently available only when using the CVE-2024-31317 exploit.
Decryption of additional user data from Qualcomm devices
We have added support for extracting encryption keys and decrypting user data for additional users on Android devices based on Qualcomm chipsets. Gaining access to encrypted additional user data can be crucial for investigators, as it may contain important data that the device owner chose to securely conceal from the investigation.
Android Agent supporting Android 15
We have enhanced the Android Agent functionality, allowing data extraction from devices running Android OS 15. Extending Android Agent support to Android OS 15 enables investigators to gather evidence from more devices, enhancing efficiency and expanding forensic capabilities.
Computer Artifacts Updates
New artifacts
The following new computer artifacts are supported for extraction:
- Passwords from Bitwarden Password Manager web extension used in Brave, Chromium, Google Chrome, Microsoft Edge, Opera, Vivaldi and Safari browsers from Windows, macOS and GNU/Linux
- Passwords from NordPass from Windows, macOS and GNU/Linux
- RustDesk data from Windows, macOS and GNU/Linux
- MetaMask web extension used in Brave, Brave Nightly, DuckDuckGo, Google Chrome, Microsoft Edge, Opera, Vivaldi browsers from Windows, macOS and GNU/Linux
- VMware Workstation data from Windows and GNU/Linux
- VirtualBox data from Windows, macOS and GNU/Linux
Additionally, we have introduced the ability to recognize virtual machines on target desktop devices.
Import Updates
Data Import via CLI
Introducing the ability to import single or multiple extractions of the same type via the command line. This ability can save time when importing multiple extractions into Oxygen Forensic® Detective simultaneously and enables seamless integration with other solutions.
Decryption of DJI Avata drone flight logs
You can now decrypt DJI Avata drone flight logs stored on the drone’s memory cards. Simply import the encrypted log into our software and follow the instructions.
Import of exported WhatsApp chats
Oxygen Forensic® Detective now supports importing exported WhatsApp chats and parsing messages with attachments and shared contacts. Providing an additional source of data from WhatsApp, one of the most widely used messaging platforms, is always valuable for investigations.
General
Speech and text recognition enhancements
You can now perform speech and text recognition on files in the Messages, Applications, Timeline, and Files sections. Simply right-click a file in the grid and select “Speech and Text Recognition.”
Export Updates
Updates to the Export engine include the ability to:
- Exclude messages based on tags when exporting from the Messages section.
- Export the Accounts and Passwords section data to JSON file format.
Interested in trying out Oxygen Forensic® Detective v.17.2?
About Oxygen Forensics
Oxygen Forensics is a global leader in digital forensics software, enabling law enforcement, government agencies, enterprises, law firms, and service providers to gain critical insights into their data faster than ever before. Specializing in remote and onsite access to digital data from cloud services, mobile and IoT devices, drones, device backups, UICC, and media cards, Oxygen Forensics provides the most advanced digital forensics data extraction capabilities, innovative analytics tools, and seamless collaborative analysis for criminal and corporate investigations to bring insight and truth to data.
