Difference between revisions of "Oxygen Forensic Suite 2"

From ForensicsWiki
Jump to: navigation, search
(Wikified content, noted soundness issues)
(Version update.)
Line 5: Line 5:
 
<tr style="font-size:1em;">
 
<tr style="font-size:1em;">
 
   <td align="right"><b>Version Number:</b></td>
 
   <td align="right"><b>Version Number:</b></td>
   <td align="left">1.6</td>
+
   <td align="left">2.1</td>
 
</tr>
 
</tr>
 
<tr style="font-size:1em;">
 
<tr style="font-size:1em;">
 
   <td align="right" ><b>Date Released:</b></td>  
 
   <td align="right" ><b>Date Released:</b></td>  
   <td align="left">12 February 2009</td>
+
   <td align="left">23 March 2009</td>
 
</tr>
 
</tr>
 
<tr>
 
<tr>
Line 17: Line 17:
 
   <td colspan="2" align="left">
 
   <td colspan="2" align="left">
 
     <ul>
 
     <ul>
     <li>Added Web browsers cache analyzer
+
     <li>Added support for more than 70 Motorola phones
     <li>Added support for 200+ Samsung phones
+
     <li>Added To-Do list/Tasks extraction
 +
    <li>Added extraction of E-mail and MMS attachments
 +
    <li>Added extraction of Web browser bookmarks
 
     </ul>
 
     </ul>
 
   </td>
 
   </td>
Line 28: Line 30:
 
   <td colspan="2" align="left">
 
   <td colspan="2" align="left">
 
[[Image:OFS2_02_EventLog.png|200px|thumb|center|Event log]]
 
[[Image:OFS2_02_EventLog.png|200px|thumb|center|Event log]]
[[Image:OFS2_04_LifeBlog.png|200px|thumb|center|LifeBlog with GPS mapping]]
+
[[Image:OFS2_04_LifeBlog.png|200px|thumb|center|Geo event positioning (LifeBlog) data]]
 
[[Image:OFS2_05_FileBrowser.png|200px|thumb|center|File Browser with Hex viewer]]
 
[[Image:OFS2_05_FileBrowser.png|200px|thumb|center|File Browser with Hex viewer]]
 
[[Image:OFS2_08_MessagesExportPDF.png|200px|thumb|center|Sample report]]
 
[[Image:OFS2_08_MessagesExportPDF.png|200px|thumb|center|Sample report]]
Line 36: Line 38:
 
</table>
 
</table>
  
'''Oxygen Forensic Suite 2''' is a mobile forensic software for logical analysis of [[cell phones]], [[SmartPhones|smartphones]] and [[PDAs]] developed by [[Oxygen Software]]. The suite can extract device information, contacts, calendar events, [[SMS]] messages, event logs, and files. In addition, the vendor claims the suite can extract metadata related to the above. As of October 2008 the suite supported more than 1,300 devices, including [[Nokia]], Vertu, [[Sony Ericsson]], Samsung, Motorola, [[BlackBerry|Blackberry]], Panasonic, Siemens, HTC, HP, E-Ten, Gigabyte, i-Mate and other mobile phones. The suite also supports devices running [[symbian|Symbian OS]].
+
'''Oxygen Forensic Suite 2''' is a mobile forensic software for logical analysis of [[cell phones]], [[SmartPhones|smartphones]] and [[PDAs]] developed by [[Oxygen Software]]. The suite can extract device information, contacts, calendar events, [[SMS]] messages, event logs, and files. In addition, the vendor claims the suite can extract metadata related to the above. As of March 2008 the suite supported more than 1,350 devices, including [[Nokia]], Vertu, [[Sony Ericsson]], Samsung, Motorola, [[BlackBerry|Blackberry]], Panasonic, Siemens, HTC, HP, E-Ten, Gigabyte, i-Mate and other mobile phones. The suite also supports devices running [[symbian|Symbian OS]] and [[Microsoft Windows Mobile|Windows Mobile 5/6]].
  
 
== Forensic Soundness ==
 
== Forensic Soundness ==
  
The suite access devices without using standard protocols like AT, OBEX or SyncML {{fact}}. Instead users must install an Agent to the device. Of course, installing software onto the device being examined will impact the forensic soundness of the investigation. If such information is not obtainable by other means and the impact is documented, it may still be admissible under the [[Best Evidence Rule]].
+
The suite access devices using advanced proprietary protocols. Some devices like smartphones require an Agent installation. Of course, installing software onto the device being examined will impact the forensic soundness of the investigation. If such information is not obtainable by other means and the impact is documented, it may still be admissible under the [[Best Evidence Rule]].
  
 
== Previous Names ==
 
== Previous Names ==
Oxygen Forensic Suite was previously marketed as "Oxygen Phone Manager II"
+
Oxygen Forensic Suite was previously marketed as "Oxygen Phone Manager II (Forensic Edition)"
  
 
== External Links ==
 
== External Links ==
Line 49: Line 51:
  
 
[[Category:Windows Mobile]]
 
[[Category:Windows Mobile]]
 +
[[Category:Mobile device tools]]

Revision as of 07:23, 23 March 2009

Current version
Version Number: 2.1
Date Released: 23 March 2009
Recent changes
  • Added support for more than 70 Motorola phones
  • Added To-Do list/Tasks extraction
  • Added extraction of E-mail and MMS attachments
  • Added extraction of Web browser bookmarks
Screenshots
Event log
Geo event positioning (LifeBlog) data
File Browser with Hex viewer
Sample report

More screenshots ...

Oxygen Forensic Suite 2 is a mobile forensic software for logical analysis of cell phones, smartphones and PDAs developed by Oxygen Software. The suite can extract device information, contacts, calendar events, SMS messages, event logs, and files. In addition, the vendor claims the suite can extract metadata related to the above. As of March 2008 the suite supported more than 1,350 devices, including Nokia, Vertu, Sony Ericsson, Samsung, Motorola, Blackberry, Panasonic, Siemens, HTC, HP, E-Ten, Gigabyte, i-Mate and other mobile phones. The suite also supports devices running Symbian OS and Windows Mobile 5/6.

Forensic Soundness

The suite access devices using advanced proprietary protocols. Some devices like smartphones require an Agent installation. Of course, installing software onto the device being examined will impact the forensic soundness of the investigation. If such information is not obtainable by other means and the impact is documented, it may still be admissible under the Best Evidence Rule.

Previous Names

Oxygen Forensic Suite was previously marketed as "Oxygen Phone Manager II (Forensic Edition)"

External Links