Oxygen Forensic® Detective v.16.3.1 is live!
Mobile Forensic Updates
Support for the MT6767, MT6797, and MT6891 chipsets We’ve added support for screen-locked Android devices based on the MT6767, MT6797, and MT6891 chipsets running Android OS 10 and higher. This update covers Android devices of various manufacturers.
Improvements for WhatsApp extractions now provide two improvements via Android Agent. You can now extract:
• the OS version and the last activity time of the devices authorized in WhatsApp and WhatsApp Business accounts
• avatars of group chats and chats within communities of WhatsApp and WhatsApp Business
Extended iOS Agent support
Oxygen has added the ability to extract the full file system and keychain via iOS Agent from iOS devices
Cloud Forensic Updates
WhatsApp extraction enhancements
Now “Share live location” data can be extracted from WhatsApp Cloud. Information will include shared geo coordinates, comments to them, and data of the time they were shared.
Computer Artifacts Extraction of BlueStacks emulator data
Now you can extract data of BlueStacks emulator from Windows computers. This popular emulator is often used on desktop computers for messaging and running apps from Google Play Store.
Import Updates
Oxygen Forensic® Detective v.16.3.1 brings several enhancements to the import engine:
• iCloud backups within Apple Warrant Returns can be imported and parsed.
• Snapchat My Data backups in HTML format can be imported and parsed.
• Oxygen also significantly improved import and decryption of physical dumps made from MTK- and UNISOC-based Android devices.
General Updates
Saving video frames as images Video frames can now be saved to PNG and JPG formats and used for later analysis. Video frames can be saved in the Files or the Key Evidence sections by right-clicking on a video frame and choosing the relevant option in the menu.
For more info please click here.
Stay up to date! Check Oxygen’s page here.