Difference between revisions of "Oxygen Forensic Suite 2"

From Forensics Wiki
Redirect page
Jump to: navigation, search
(Changing version info)
(Redirecting Oxygen Forensic Suite 2 to Oxygen Forensic Suite 2010)
 
(15 intermediate revisions by 4 users not shown)
Line 1: Line 1:
 +
#REDIRECT [[Oxygen Forensic Suite 2010]]
 
<table style="padding:0.3em; float:right; margin-left:15px; margin-bottom:8px; border:1px solid #A3B1BF; background:#f5faff; text-align:center; font-size:95%; line-height:1.5em;width:220px;">
 
<table style="padding:0.3em; float:right; margin-left:15px; margin-bottom:8px; border:1px solid #A3B1BF; background:#f5faff; text-align:center; font-size:95%; line-height:1.5em;width:220px;">
 
<tr>
 
<tr>
Line 5: Line 6:
 
<tr style="font-size:1em;">
 
<tr style="font-size:1em;">
 
   <td align="right"><b>Version Number:</b></td>
 
   <td align="right"><b>Version Number:</b></td>
−
   <td align="left">1.4</td>
+
   <td align="left">2.4.1</td>
 
</tr>
 
</tr>
 
<tr style="font-size:1em;">
 
<tr style="font-size:1em;">
 
   <td align="right" ><b>Date Released:</b></td>  
 
   <td align="right" ><b>Date Released:</b></td>  
−
   <td align="left">07 November 2008</td>
+
   <td align="left">01 October 2009</td>
 
</tr>
 
</tr>
 
<tr>
 
<tr>
Line 17: Line 18:
 
   <td colspan="2" align="left">
 
   <td colspan="2" align="left">
 
     <ul>
 
     <ul>
−
     <li>LifeBlog. Added feature to show geographical event position on a map (using Google Maps)
+
     <li>Significantly re-designed File Browser interface. Added flat files lists based on filters (Structure, Images, Melodies, Video, Documents, Applications, Other files, Geo files, Search).
−
     <li>File Browser. Pictures are now added to reports and export files
+
     <li>Added data export into XML format.
−
    </ul>
+
    <li>Added support for email messages reading from standard application for Nokia Series 40 3rd Edition mobile phones.
 +
    <li>Phone Activity. Now it is possible to view MMS messages attachments.
 +
  </ul>  
 
   </td>
 
   </td>
 
</tr>
 
</tr>
Line 27: Line 30:
 
<tr style="font-size:1em;">
 
<tr style="font-size:1em;">
 
   <td colspan="2" align="left">
 
   <td colspan="2" align="left">
−
[[Image:OFS2_02_EventLog.png|200px|thumb|center|Event log]]
+
[[Image:OFS2_05_PhoneActivity_Date.png|200px|thumb|center|Phone Activity]]
−
[[Image:OFS2_04_LifeBlog.png|200px|thumb|center|LifeBlog with GPS mapping]]
+
[[Image:OFS2_04_LifeBlog.png|200px|thumb|center|Geo event positioning (LifeBlog) data]]
−
[[Image:OFS2_05_FileBrowser.png|200px|thumb|center|File Browser with Hex viewer]]
+
[[Image:OFS2_12_CameraShots.png|200px|thumb|center|Camera shots with Geo data]]
 
[[Image:OFS2_08_MessagesExportPDF.png|200px|thumb|center|Sample report]]
 
[[Image:OFS2_08_MessagesExportPDF.png|200px|thumb|center|Sample report]]
 
[http://www.oxygen-forensic.com/en/screenshots/ More screenshots ... ]
 
[http://www.oxygen-forensic.com/en/screenshots/ More screenshots ... ]
Line 36: Line 39:
 
</table>
 
</table>
  
−
===Brief===
+
'''Oxygen Forensic Suite 2''' is a mobile forensic software for logical analysis of [[cell phones]], [[SmartPhones|smartphones]] and [[PDAs]] developed by [[Oxygen Software]]. The suite can extract device information, contacts, calendar events, [[SMS]] messages, event logs, and files. In addition, the vendor claims the suite can extract metadata related to the above. As of August 2009 the suite supported more than 1,450 devices, including [[Nokia]], [[Apple iPhone]] series, [[Apple iPod]] Vertu, [[Sony Ericsson]], Samsung, Motorola, [[BlackBerry|Blackberry]], Panasonic, Siemens, HTC, HP, E-Ten, Gigabyte, i-Mate and other mobile phones. The suite also supports devices running [[symbian|Symbian OS]] and [[Microsoft Windows Mobile|Windows Mobile 5/6]].
  
−
[http://www.oxygen-forensic.com/ Oxygen Forensic Suite 2] by [http://www.oxygen-software.com/ Oxygen Software] is a mobile forensic software for logical analysis of [[cell phones]], [[SmartPhones|smartphones]] and [[PDAs]]. The authors claim that using advanced data access protocols helps to extract much more data than usually.
+
== Forensic Soundness ==
  
−
===Regular data extraction===
+
The suite access devices using advanced proprietary protocols. Some devices like smartphones require an Agent installation. Of course, installing software onto the device being examined will impact the forensic soundness of the investigation. If such information is not obtainable by other means and the impact is documented, it may still be admissible under the [[Best Evidence Rule]].
−
Oxygen Forensic Suite 2 is able to extract general data like:
+
−
* device information (IMEI, SW and HW versions, operator, etc),
+
−
* contacts (names, phones, notes)
+
−
* calendar events,
+
−
* messages ([[SMS]]),
+
−
* log records (incoming/outgoing/missed).
+
−
* files (images, sounds, videos, documents, etc)
+
  
−
===Unique data extraction===
+
== Previous Names ==
−
Besides the general data usually extracted, Oxygen Forensic Suite 2 can extract a lot of unique information:
+
Oxygen Forensic Suite was previously marketed as "Oxygen Phone Manager II (Forensic Edition)".
−
* contacts (last date of contact modification, contacts photos, field labels, contact groups and speed dials)
+
−
* calendar events (last date of event modification, all event dates, alarm status, recurrences)
+
−
* messages (e-mails and MMS, messages from custom folders, message SMSC time stamp)
+
−
* log records ([[GPRS]], [[EDGE]], CSD, HSCSD and Wi-Fi session traffic and time, deleted SMS details)
+
−
* files (file system from phone memory and flash card)
+
−
* LifeBlog data (all main phone events like sms, photos, events '''with their geographical coordinates'''),
+
−
'''Important!''' The list of supported features depends on a certain phone model.
+
  
−
===Device coverage===
+
== External Links ==
−
By the October, 2008 Oxygen Forensic Suite 2 supports more than '''1100 devices''': [[Nokia]], Vertu, [[Sony Ericsson]], Samsung, Motorola, [[BlackBerry|Blackberry]], Panasonic, Siemens, HTC, HP, E-Ten, Gigabyte, i-Mate and other mobile phones.  
+
* [http://www.oxygen-forensic.com/ Official web site]
−
Oxygen Forensic Suite 2 has a strong support for [[symbian|Symbian OS]], [[symbian|Nokia S60]], Sony Ericsson UIQ, [[Microsoft Windows Mobile|Windows Mobile 5/6]] and [[BlackBerry|Blackberry]] [[SmartPhones|smartphones]] and communicators.
+
  
−
===Other===
+
[[Category:Windows Mobile]]
−
* The software access devices without using standard protocols like AT, OBEX or SyncML. The Agent installation is required to access smartphones and communicators.
+
[[Category:Mobile device tools]]
−
* The software is able to perform data search, to create and print reports.
+
−
* The software has a full support of Unicode standard. So the multilanguage information is read and shown correctly.
+
−
 
+
−
===History===
+
−
Oxygen Forensic Suite 2 is a third generation of forensic tools by Oxygen Software.
+
−
* 2004, March. Oxygen Phone Manager II for Nokia phones (Forensic Edition) is released.
+
−
* 2005, November. Oxygen Phone Manager II for Symbian OS smartphones is released.
+
−
* 2007, June. Oxygen Phone Manager II (Forensic Edition) becomes a stand alone project with new name "Oxygen Forensic Suite"
+
−
* 2008, May. Oxygen Forensic Suite 2 is released and presented at Mobile Forensics World 2008. 
+
−
 
+
−
===Links===
+
−
* [http://www.oxygen-forensic.com/ Official web site]
+
−
* [http://www.oxygen-software.com/ Oxygen Software web site]
+

Latest revision as of 07:32, 11 November 2009

#REDIRECTOxygen Forensic Suite 2010
Retrieved from "http://www.forensicswiki.org/w/index.php?title=Oxygen_Forensic_Suite_2&oldid=8859"