Oxygen Forensic Detective 13.7 Introduces Discord Cloud Data Extraction Via QR Code

Oxygen Forensic® Detective 13.7 is now available! Extract Viber chats and calls via OxyAgent, acquire Discord cloud data via QR code, and export evidence to Consilio XML.

Viber Extraction via OxyAgent

Oxygen Forensic® Detective v.13.7, introduces a new extraction method for Viber. Now, Viber user data can be collected from any unlocked Android device using OxyAgent. Install it on a device, select the Viber artifacts that need to be collected, and once the extraction is done, import it into Oxygen Forensic® Detective. The evidence set will include account info, contacts, chats, and calls. Please note that our software also collects Viber data from computers and the cloud.

Device and Case Descriptions

We’ve added the ability to add custom fields for device and case descriptions. Click the “Add a field” button on the General Info tab in the Device or Case Information window to create new fields or hide/display existing ones.

Cloud Extractor Enhancements

We’ve made several enhancements to the Oxygen Forensic® Cloud Extractor. Investigators will now be able to:

  • Extract Discord data via login credentials and token as well as by scanning a QR code from a mobile app. Artifacts will include account info, contacts, private and group chats and channels
  • Extract iCloud backups made from Apple iOS 15 beta devices using login credentials.
  • We’ve also improved support for WhatsApp Google Backups and the WhatsApp QR code method, as well as decryption of WhatsApp backups in crypt14 format.

KeyScout Enhancements

The following updates have been implemented to our KeyScout utility:


Get The Latest DFIR News

Join the Forensic Focus newsletter for the best DFIR articles in your inbox every month.


Unsubscribe any time. We respect your privacy - read our privacy policy.

  • Our software now supports Deflate64 format, enabling the import of images created by the KAPE (Kroll Artifact Parser and Extractor) utility.
  • Added ability to extract passwords saved in Microsoft Edge.
  • Updated support for Telegram Desktop on Windows, macOS, and Linux.
  • Improved the parsing of Jump Lists and extraction of LNK files.
  • New options and tabs are added to the KeyScout Options menu.

Export Enhancements

We’ve made several enhancements to our export process, allowing investigators to:

  • Export extracted evidence to Consilio XML format. Exported datasets include contacts, calls, messages and general information about extraction. *This comes with a Load File Export license
  • Export identified face sets to popular file formats while in the Search section
  • Export data from the Faces section in XML format

New App Support

Oxygen Forensic® Detective v.13.7 introduces support for 5 new apps and updates data parsing for 700+ app versions. Our new apps include Google Pay, SuperNote, Twist, Chatwork, and the dating app, Coffee Meets Bagel.

 

Leave a Comment

Latest Videos

Digital Forensics News Round Up, February 28 2024 #digitalforensics #dfir

Forensic Focus 29th February 2024 4:58 pm

Digital Forensics News Round-Up, February 21 2024 #digitalforensics #dfir

Forensic Focus 21st February 2024 6:19 pm

Alan Platt, Professional Services Consultant at MSAB, discusses his experience as a former UK police officer working in digital forensics. He talks about the different levels of digital forensics capabilities within police forces and how MSAB products like XAMN and XEC Director are used by frontline officers versus lab analysts. 

The discussion covers how MSAB partners with law enforcement to develop custom workflows for mobile device acquisitions that facilitate ISO compliance. Alan explains MSAB's managed service offering, where approved MSAB staff can remotely access a customer's XEC Director server to assist with software updates and troubleshooting. He emphasizes the strict data segregation policies enforced by customers to prevent MSAB from accessing any sensitive case data.

Looking ahead, Alan mentions MSAB's new CEO and hints at some exciting developments coming down the pipeline. He spotlights recent enhancements to XEC Director's speed and database functionality for managing large estates of networked Kiosks. Alan also plugs the new XEC Director training he created to help users fully leverage the platform's capabilities.

00:00 – Introduction to Alan Platt
07:00 – Training
12:00 – Workflows
17:20 – Ensuring a secure environment
19:45 – Customer training
20:35 – Helping customers comply with ISO accreditation
25:00 – Validation and verification
27:30 – ISO standards
30:00 – MSAB’s pipeline plans
32:40 – XEC Director 
43:45 – Privacy of user data

Alan Platt, Professional Services Consultant at MSAB, discusses his experience as a former UK police officer working in digital forensics. He talks about the different levels of digital forensics capabilities within police forces and how MSAB products like XAMN and XEC Director are used by frontline officers versus lab analysts.

The discussion covers how MSAB partners with law enforcement to develop custom workflows for mobile device acquisitions that facilitate ISO compliance. Alan explains MSAB's managed service offering, where approved MSAB staff can remotely access a customer's XEC Director server to assist with software updates and troubleshooting. He emphasizes the strict data segregation policies enforced by customers to prevent MSAB from accessing any sensitive case data.

Looking ahead, Alan mentions MSAB's new CEO and hints at some exciting developments coming down the pipeline. He spotlights recent enhancements to XEC Director's speed and database functionality for managing large estates of networked Kiosks. Alan also plugs the new XEC Director training he created to help users fully leverage the platform's capabilities.

00:00 – Introduction to Alan Platt
07:00 – Training
12:00 – Workflows
17:20 – Ensuring a secure environment
19:45 – Customer training
20:35 – Helping customers comply with ISO accreditation
25:00 – Validation and verification
27:30 – ISO standards
30:00 – MSAB’s pipeline plans
32:40 – XEC Director
43:45 – Privacy of user data

YouTube Video UCQajlJPesqmyWJDN52AZI4Q_ifoHVkjJtRc

How MSAB Is Managing The Digital Forensics Challenges Of Frontline Policing

Forensic Focus 21st February 2024 3:07 pm

This error message is only visible to WordPress admins

Important: No API Key Entered.

Many features are not available without adding an API Key. Please go to the YouTube Feed settings page to add an API key after following these instructions.

Latest Articles