The latest update to our flagship solution is here, Oxygen Forensic® Detective v.18.0.
Top Updates
1. Multi-Source Extraction via Android Agent
What it is: Multiple third-party apps and other data types can be combined into one extraction using Android Agent. Different data categories (calls, contacts, calendars, and more) and multiple third-party apps can be selected, producing a single file and folder.
Value to investigators: Collecting multiple data sets in a single extraction simplifies and accelerates the workflow, allowing everything to be done in one step.
2. Search for a String in Multiple Languages at Once
What it is: Searches may now take place in multiple languages simultaneously – the search value is translated into the specified languages, after which the search is performed both for the original and the translated values.
Value to investigators: Multilingual data search improves evidence analysis efficiency and flexibility by providing results more quickly.
3. Support for MacOS 26
What it is: KeyScout can now run and collect data on macOS 26 Tahoe (beta 8).
Value to our customers: Supporting new operating systems is always beneficial, as it ensures the ability to collect complete evidence from them.
4. Parsing of Unsupported Apps by Parent App Parsing Rules
What it is: Data may be parsed from applications that are not officially supported but have parent applications that are. When an unsupported application is selected, a Select Parent Application button is enabled on the toolbar – pressing that button extracts and processes the data using the parent application’s parsing rules.
Value to Investigators: Parsing apps with a parent app template saves time by eliminating the need for manual app database analysis.
5. Parsing of the ChatGPT App
What it is: We have added support for ChatGPT app parsing from Android and iOS devices. Parsed data set will include accounts, projects, chats, cookies, drafts, cache, and other data.
Value to investigators: Adding parsing support for this popular AI app will accelerate data analysis and eliminate the need for manual database review.
Additional Updates
Mobile Forensic Updates
Automatic device detection improvements – Extended device information is now shown, with enhanced auto-detection of vulnerabilities in the full file system method. The most relevant exploit is prioritized to ensure the best extraction results.
checkm8 extraction updates – New device support includes iPad Pro 12.9” (1st gen), iPad Pro 9.7” (iOS 12.0–16.7.11), iPad 7th gen (iOS 18.0–18.6.2), and all supported iOS devices running iOS 12.0 and above.
Brute Force Module Updates
Adobe Acrobat PDF decryption – KeyDiver can now brute force encrypted PDF files. Supported Acrobat versions range from 2–11, including PDF 1.1–1.7 (Extension Levels 3 & 8).
1Password account brute force – New ability to recover 1Password account credentials by brute forcing known hashes.
Computer Artifacts Updates
File carving – JPEG and PDF files can now be extracted from unallocated space on NTFS partitions. Navigation has been simplified, with easier profile configuration for carving rules.
New artifacts – Support added for The Bat! (Windows), Battle.net (Windows), and Imo Messenger (macOS).
OS support – Added compatibility with macOS 26 Tahoe (beta 8).
Search Updates
Mnemonic phrase search – The Search section now includes a Mnemonic Phrase tab, where users can search for words from mnemonic (seed) phrases and view results as word lists of the defined length. Detect BIP39 phrases in 8 languages (Chinese, Czech, English, French, Italian, Japanese, Portuguese, Spanish) and SLIP39 in English.
Verizon CDR support – Users can now import Verizon call data records and cell tower libraries, with towers, sectors, and beamwidth displayed on Maps.
Applications
Android parsing updates – Improved parsing of telemetry and system information from Android devices, including app launches, usage history, granted permissions, power events, and default app settings.
If you use Oxygen Forensic® Detective, click here to read more or refer to the “What’s New” file in the “Options” menu for a full list of updates.
If you are not a customer and are interested in trying out Oxygen Forensic® Detective v.18.0, request a free trial.
Join Us for the Legacy & Logic Conference – 25 Years of Digital Discovery
Secure your place at this milestone event, where we’ll celebrate 25 years of digital discovery and explore what’s next for the industry. Agenda highlights include:
- Inspiring keynotes from global thought leaders
- Private and public sector expert-led sessions
- Hands-on opportunities with next-generation technology
- Networking with peers and partners from around the world
Review the full agenda today.
Don’t miss your chance; find out more and register now to be part of the conversation and the celebration.
Want to Share an Investigation With Us?
We’d love to hear from you and how our software supported you in solving your investigation. Please contact us at [email protected].
About Oxygen Forensics
Oxygen Forensics is a global leader in digital forensics software, enabling law enforcement, government agencies, enterprises, law firms, and service providers to gain critical insights into their data faster than ever before. Specializing in remote and onsite access to digital data from cloud services, mobile and IoT devices, drones, device backups, UICC, and media cards, Oxygen Forensics provides the most advanced digital forensics data extraction capabilities, innovative analytics tools, and seamless collaborative analysis for criminal and corporate investigations to bring insight and truth to data.
