Oxygen Forensic Detective updates

[device-forum.com]

Oxygen Forensic Detective 14.6 (July 2022):

Oxygen Forensic® Extractor. Added the ability to extract the full file system and keychain data via checkm8 vulnerability from Apple iOS devices running iOS 15.6 Beta.
Oxygen Forensic® Extractor. Added the ability to extract the full file system and keychain data via checkm8 vulnerability from iPhone 8, iPhone 8 Plus, and iPhone X running iOS 16.0 Beta.
Oxygen Forensic® Extractor. Added the ability to extract and decrypt data from Xiaomi devices based on the MT6765 chipset and having FBE (File-Based Encryption). Passcode brute force is available.
Oxygen Forensic® Extractor. Added the ability to extract the full file system via iOS Agent from unlocked Apple devices with the iOS versions 15.0 - 15.1.1.
Oxygen Forensic® Extractor. Added selective chat extraction from WhatsApp and WhatsApp Business from unlocked Android devices via Android Agent.
Oxygen Forensic® Extractor. Added the Notifications panel.
Oxygen Forensic® Extractor. Added the Tools menu.
Oxygen Forensic® Extractor. Added the ability to launch an old version of Oxygen Forensic® Extractor from a new Oxygen Forensic® Device Extractor.
Oxygen Forensic® Extractor. Redesigned the method of Android extraction via Wi-Fi.
Oxygen Forensic® Extractor. Redesigned the method of physical extraction of memory cards.
Oxygen Forensic® Extractor. Redesigned the method of DJI drone extraction.
Oxygen Forensic® Extractor. Updated the ability to extract Telegram data from unlocked Android devices via Android Agent.
Oxygen Forensic® Extractor. Updated the ability to extract Line data from unlocked Android devices via Android Agent.
Oxygen Forensic® Cloud Extractor. Added the ability to extract OnlyFans data.
Oxygen Forensic® Cloud Extractor. Added the information about available backups in the WhatsApp Google Backup service.
Oxygen Forensic® Cloud Extractor. Updated the ability to extract Telegram data.
Oxygen Forensic® Cloud Extractor. Updated the extraction algorithm for Samsung Health.
Oxygen Forensic® Cloud Extractor. Updated the authorization algorithm for AirBnB.
Oxygen Forensic® Cloud Extractor. Updated the extraction algorithm for Yandex Taxi.
Oxygen Forensic® KeyScout. Added the ability to parse UserAssist artifact from Windows.
Oxygen Forensic® KeyScout. Added the ability to parse Most recently used (MRU) artifact from Windows.
Oxygen Forensic® KeyScout. Added the ability to parse RDP Cache artifact from Windows.
Oxygen Forensic® KeyScout. Added the ability to extract Telegram for macOS data encrypted with a known passcode.
Oxygen Forensic® KeyScout. Updated the ability to parse setupapi.dev.log artifact from Windows.
Oxygen Forensic® KeyScout. Updated the ability to parse Event Log from Windows.
Oxygen Forensic® KeyScout. Updated the ability to parse Jump lists and LNK files from Windows.
Oxygen Forensic® KeyScout. Updated the ability to collect Mozilla ThunderBird data from Windows, macOS and Linux.
Oxygen Forensic® KeyScout. Updated the ability to collect Opera data from Windows, macOS and Linux.
General. Added the new version of Passware Kit Mobile 2022.1.1.2832.
Import. Added the ability to brute force passcodes of MTK-based Android device extractions with FBE (File-Based Encryption).
Import. Added the ability to import and parse WonderShare MobileGo and MobileTrans backups made from Apple iOS and Android devices.
Import. Added the ability to import and parse Facebook account copy in JSON format.
Import. Updated the ability to decrypt keychain data from UFED extractions.
User searches. Added the new section that shows user searches from all the extracted applications.
Files. Added the ability to create custom filters.
Files. Added the ability to view XPC and IPTC data of media files.
Export. Added the following data to RSMF reports: Participants - account_id, Events - direction, reactions and read_receipts. For Telegram read_receipts and reactions are now available.
Export. Redesigned the layout of a PDF report for Applications.
Applications. Added data parsing from over 2300 new app versions from Apple iOS and Android devices. The total number of supported versions exceeds 33100.
Applications. Messengers. Added data parsing from TigerConnect (9.11.2) from Android devices and TigerConnect (9.11.7) from Apple iOS devices.
Applications. Social Networks. Added data parsing from Skout (6.49.0) from Android devices and Skout (6.49.0) from Apple iOS devices.
Applications. Social Networks. Added data parsing from Omlet Arcade (1.93.3) from Android devices and Omlet Arcade (1.95.0) from Apple iOS devices.
Applications. Business. Added data parsing from Google Meet (2022.05.31.452076471.Release) from Android devices and Google Meet (92.0.0) from Apple iOS devices.
Applications. Business. Added data parsing from KiteTech Notepad Notes (1.80.149) from Android devices.
Applications. Messengers. Updated data parsing from WhatsApp (2.22.10.73) from Android devices and WhatsApp (2.22.13.74) from Apple iOS devices.
Applications. Messengers. Updated data parsing from WhatsApp Business (2.22.10.73) from Android devices and WhatsApp Business (22.10.78) from Apple iOS devices.
Applications. Messengers. Updated data parsing from Viber (17.9.0.0) from Android devices and Viber (17.9.0) from Apple iOS devices.
Applications. Messengers. Updated data parsing from CoverMe (2.8.67) from Android devices.
Applications. Messengers. Updated data parsing from Facebook Messenger (361.1) from Apple iOS devices.
Applications. Messengers. Updated data parsing from Signal (5.44) from Apple iOS devices.
Applications. Messengers. Updated data parsing from Telegram (8.3) from Apple iOS devices.
Applications. Social Networks. Updated data parsing from TikTok (24.6.3) from Android devices and TikTok (24.6.0) from Apple iOS devices.
Applications. Social Networks. Updated data parsing from Grindr (8.12.1) from Android devices and Grindr (8.12.0) from Apple iOS devices.
Applications. Social Networks. Updated data parsing from Instagram (241.1.0.18.114) from Android devices and Instagram (241.1) from Apple iOS devices.
Applications. Social Networks. Updated data parsing from LinkedIn (4.1.698) from Android devices and LinkedIn (9.1.276) from Apple iOS devices.
Applications. Social Networks. Updated data parsing from Twitter (9.48.0-release.0) from Android devices and Twitter (9.15) from Apple iOS devices.
Applications. Social Networks. Updated data parsing from VK (7.31) from Android devices and VK (7.31) from Apple iOS devices.
Applications. Social Networks. Updated data parsing from OK (22.6.14) from Android devices.
Applications. Web Browsers. Updated data parsing from Firefox (102.1.1) from Android devices and Firefox (102.0) from Apple iOS devices.
Applications. Web Browsers. Updated data parsing from Google Chrome (102.0.5005.99) from Android devices and Google Chrome (102.0.5005.87) from Apple iOS devices.
Applications. Web Browsers. Updated data parsing from Yandex (22.52) from Android devices.
Applications. Business. Updated data parsing from Gmail (2022.05.28.452658383.Release) from Android devices and Gmail (6.0.220516) from Apple iOS devices.
Applications. Business. Updated data parsing from Outlook (4.2220.0) from Android devices and Outlook (4.2221.1) from Apple iOS devices.
Applications. Business. Updated data parsing from Speedtest (4.7.18) from Android devices and Speedtest (4.4.2) from Apple iOS devices.
Applications. Business. Updated data parsing from OneDrive (6.59) from Android devices.
Applications. Business. Updated data parsing from Digital Wellbeing (1.0.444508425 (9382837)) from Android devices.

 

[device-forum.com]

Oxygen Forensic Detective 15.0 (September 2022):

Oxygen Forensic® Extractor. Added the ability to extract and decrypt data from Xiaomi devices based on the Helio G88 (MT6768) chipset and having FBE (F2FSCrypt). Passcode brute force is available.
Oxygen Forensic® Extractor. Added the ability to extract and decrypt data from Xiaomi devices based on the Helio G90T (MT6785) chipset and having FBE (Ext4Crypt). Passcode brute force is available.
Oxygen Forensic® Extractor. Added the ability to extract encryption keys stored in the Android Keystore of Huawei devices based on the Qualcomm chipsets: MSM8917, MSM8937, and MSM8940.
Oxygen Forensic® Extractor. Added the ability to extract Kik Messenger data from unlocked Android devices via Android Agent.
Oxygen Forensic® Extractor. Added the ability to extract the full file system and keychain data via checkm8 vulnerability from unlocked Apple iOS devices running iOS 15.7.
Oxygen Forensic® Extractor. Added the ability to extract the full file system and keychain data via checkm8 vulnerability from unlocked iPhone 5S, iPhone 6, iPhone 6 Plus, iPad Air running iOS 12.5.6.
Oxygen Forensic® Extractor. Added the ability to extract the full file system via iOS Agent from unlocked iPhone 7 and iPhone 7 Plus with the iOS versions 15.0 - 15.1.1.
Oxygen Forensic® Extractor. Improved selective extraction from iOS devices using the checkm8, iOS Agent and SSH methods. Now any installed app can be chosen for selective extraction.
Oxygen Forensic® Extractor. Redesigned the SIM card extraction method.
Oxygen Forensic® Cloud Extractor. Updated data extraction from Box.
Oxygen Forensic® Cloud Extractor. Updated the authorization algorithm in OnlyFans.
Oxygen Forensic® Cloud Extractor. Updated extraction of Lists from Twitter.
Oxygen Forensic® KeyScout. Added the ability to extract the list of network connections from Windows volatile memory.
Oxygen Forensic® KeyScout. Added the ability to extract the list of loaded modules from Windows volatile memory.
Oxygen Forensic® KeyScout. Added the ability to extract the list of open files from Windows volatile memory.
Oxygen Forensic® KeyScout. Added the ability to extract pre-installed apps from macOS 13.
Oxygen Forensic® KeyScout. Added the ability to extract Stage Manager from macOS 13.
Oxygen Forensic® KeyScout. Added the ability to extract CryptnetURLCache from Windows.
Oxygen Forensic® KeyScout. Added the ability to extract WMI persistence from Windows.
Oxygen Forensic® KeyScout. Updated the ability to collect Microsoft Edge data from Windows.
Oxygen Forensic® KeyScout. Updated the ability to collect Tor Browser data from Windows, macOS and Linux.
Oxygen Forensic® KeyScout. Updated the program interface.
Import. Added the ability to decrypt physical dumps of Xiaomi devices based on the MT6768 and MT6785 chipsets.
Import. Added the ability to decrypt physical dumps of Oppo devices based on the MT6765 chipset.
Import. Added parsing of Semantic Location History from Google Takeout.
Faces. Added the ability to add faces from video frames from the File section to face sets.
Faces. Added multithread facial categorization using GPU and CPU.
Timeline. Added the ability to compare device call and message logs with CDR data.
Files. Added extraction and visualization of metadata from MS Office, OpenOffice and PDF files.
File Viewer. Added the ability to open archive files of RAR, ZIP, 7Z, TAR and other formats.
Search. Added the ability to search in file metadata.
General. Added the ability to select the path to the device database and temporary files storage at the program installation.
General. Added the ability to hide tags from the Add tag form.
Export. Added the ability to export metadata from MS Office, OpenOffice and PDF files to data reports.
Export. Added the ability to export chats from the main Export menu.
Export. Added the ability to export SVG images from the Snapshots and Social Graph sections to HTML and PDF formats.
Applications. Added data parsing from over 600 new app versions from Apple iOS and Android devices. The total number of supported versions exceeds 33800.
Applications. Added the ability to decrypt Signal, Silent Phone and ProtonMail data with the encryption keys from the Android Keystore of Huawei devices based on the Qualcomm chipsets: MSM8917, MSM8937, and MSM8940.
Applications. Business. Added data parsing from Temp Mail (3.08) from Android devices and Temp Mail (3.07) from Apple iOS devices.
Applications. Business. Added data parsing from Huawei Notes (9.1.5.360) from Android devices.
Applications. Business. Added data parsing from Calculator+ (3.0) from Apple iOS devices.
Applications. Business. Added data parsing from Calculator# (3.2.10) from Apple iOS devices.
Applications. Social Networks. Added data parsing from Bigo Live (5.28.0) from Apple iOS devices.
Applications. Messengers. Added data parsing from Phone by Google (84.0.458363558) from Android devices.
Applications. Messengers. Added data parsing from WhatsApp backup (crypt15) from Android devices and WhatsApp (2.22.15.74) from Android devices.
Applications. Messengers. Updated data parsing from Zalo (22.06.02) from Android devices and Zalo (22.07.02) from Apple iOS devices.
Applications. Messengers. Updated data parsing from Facebook Messenger (375.0.0.6.104) from Android devices and Facebook Messenger (375.0) from Apple iOS devices.
Applications. Messengers. Updated data parsing from Skype (8.86.0.407) from Android devices.
Applications. Messengers. Updated data parsing from Rocket.Chat (4.29.0) from Apple iOS devices.
Applications. Messengers. Updated data parsing from Signal (5.49) from Apple iOS devices.
Applications. Messengers. Updated data parsing from Skype (8.87) from Apple iOS devices.
Applications. Messengers. Updated data parsing from TamTam (3.8) from Apple iOS devices.
Applications. Messengers. Updated data parsing from Anonchat (4.12.0) from Apple iOS devices.
Applications. Messengers. Updated data parsing from Discord (141.0) from Apple iOS devices.
Applications. Messengers. Updated data parsing from Google Chat (1.0.170) from Apple iOS devices.
Applications. Messengers. Updated data parsing from GroupMe (5.57.1) from Apple iOS devices.
Applications. Social Networks. Updated data parsing from Grindr (8.15.1) from Android devices and Grindr (8.16.0) from Apple iOS devices.
Applications. Social Networks. Updated data parsing from Instagram (249.0.0.20.105) from Android devices and Instagram (249.0) from Apple iOS devices.
Applications. Social Networks. Updated data parsing from OK (22.8.29) from Android devices and OK (9.46) from Apple iOS devices.
Applications. Social Networks. Updated data parsing from Snapchat (11.88.0) from Apple iOS devices.
Applications. Social Networks. Updated data parsing from VK (7.35) from Android devices.
Applications. Business. Updated data parsing from Google Tasks (2022.08.15.467567646.0-release) from Android devices and Google Tasks (1.61) from Apple iOS devices.
Applications. Business. Updated data parsing from Google Keep (2.2022.32201) from Apple iOS devices.
Applications. Business. Updated data parsing from Craigslist (1.16.6) from Apple iOS devices.
Applications. Business. Updated data parsing from Gallery Vault (2.5.7) from Apple iOS devices.
Applications. Business. Updated data parsing from GMail (6.0.220801) from Apple iOS devices.
Applications. Business. Updated data parsing from Google Voice (22.31) from Apple iOS devices.
Applications. Business. Updated data parsing from Microsoft OneDrive (6.62.1) from Android devices.
Applications. Business. Updated data parsing from Microsoft Teams (4.14.0) from Apple iOS devices.
Applications. Web Browsers. Updated data parsing from Google Chrome (104.0.5112.99) from Apple iOS devices and Google Chrome (102.0.5005.99) from Android devices.
Applications. Multimedia. Updated data parsing from Google Photos (6.4) from Apple iOS devices.
Applications. Drones. Updated data parsing from Litchi for DJI Drones (2.14.2) from Apple iOS devices.

 

[device-forum.com]

Oxygen Forensic Detective 15.1 (November 2022):

Oxygen Forensic® Extractor. Added the ability to bypass screen lock and decrypt data from Android devices having TEE Trusty, File-Based-Encryption (FBE) and based on the following MTK chipsets: MT6765, MT6580.
Oxygen Forensic® Extractor. Added the ability to bypass screen lock and decrypt data from MTK-based Android devices having TEE Kinibi and full-disk encryption (FDE).
Oxygen Forensic® Extractor. Added the ability to extract encryption keys stored in the Android Keystore of Android devices based on the Qualcomm chipsets: MSM8917, MSM8937, MSM8940, MSM8953.
Oxygen Forensic® Extractor. Added the ability to extract data from iPhone 14, iPhone 14 Plus, iPhone 14 Pro and iPhone 14 Pro Max via iTunes backup procedure.
Oxygen Forensic® Extractor. Added the interface improvements to the selective extraction of iOS devices using the checkm8, iOS Agent and SSH methods.
Oxygen Forensic® Extractor. Added selective chat extraction from Discord via Android Agent.
Oxygen Forensic® Extractor. Redesigned the extraction method for Spreadtrum-based Android devices.
Oxygen Forensic® Extractor. Updated the ability to extract keychain from Apple iOS devices with versions 14.0-14.3 via iOS Agent.
Oxygen Forensic® Extractor. Updated data extraction from Discord via Android Agent.
Oxygen Forensic® Extractor. Updated WhatsApp files extraction via Android Agent.
Oxygen Forensic® Extractor. Updated the ability to extract the full file system and keychain via checkm8 from iOS devices with iOS versions 12-14.
Oxygen Forensic® Cloud Extractor. Added the ability to extract the last view date of Google Drive files.
Oxygen Forensic® Cloud Extractor. Added the ability to set the path to OCB files in the Account owner information window.
Oxygen Forensic® Cloud Extractor. Updated the Help menu.
Oxygen Forensic® KeyScout. Added the ability to decrypt passwords, tokens and cookies collected from other user profiles and computer images.
Oxygen Forensic® KeyScout. Added the ability to select drives and partitions for live extraction.
Oxygen Forensic® KeyScout. Added the ability to view extended information about data collection and saving.
Oxygen Forensic® KeyScout. Improved the interface of data search settings.
Oxygen Forensic® KeyScout. Improved the interface of the log window.
Oxygen Forensic® KeyScout. Added the ability to collect the Windows Diagnostic Infrastructure (WDI) artifact on Windows.
Oxygen Forensic® KeyScout. Added the ability to collect Systemd logs on Linux.
Oxygen Forensic® KeyScout. Added the ability to collect Microsoft To Do app on Windows.
Oxygen Forensic® KeyScout. Added the ability to collect Mail and Calendar app on Windows.
Oxygen Forensic® KeyScout. Updated the ability to collect the Most Recently Used (MRU) artifact on Windows.
Oxygen Forensic® KeyScout. Updated the ability to collect the WMI persistence artifact on Windows.
Oxygen Forensic® KeyScout. Updated the ability to collect the System events artifact on macOS.
Oxygen Forensic® KeyScout. Updated the ability to collect Microsoft Outlook app on Windows.
Oxygen Forensic® KeyScout. Updated the ability to collect Signal app on Windows, macOS and Linux.
Import. Added the ability to import and parse Microsoft Outlook Data Files of .pst/.ost formats.
Import. Added the ability to import and parse Snapchat My Data.
Import. Added the ability to import and parse a new format of Snapchat Warrant Returns.
Import. Added the ability to brute force the passcode for the additional MainSpace of Huawei devices based on Kirin chipsets.
Import. Added the ability to decrypt images of Android devices based on the Mediatek MT 6580 and MT6765 chipsets and having ТЕЕ Trusty and F2FSCrypt.
Import. Added the ability to decrypt images of Android devices based on the Mediatek MT6739 chipset and having TEE Kinibi and full-disk encryption (FDE).
Import. Added the ability to decrypt images of Xiaomi and Poco devices based on the Mediatek MT6769T chipset and having file-based encryption (FBE).
Faces. Added the ability to categorize faces from video frames in the Files section.
Faces. Added the ability to selectively categorize faces in the Files section.
Oxygen Forensic® Viewer. Added the ability to assign Project VIC categories to files and search by Project VIC hash sets.
Export. Added the ability to export metadata to Load file format from the Files section.
Applications. Added data parsing from over 400 new app versions from Apple iOS and Android devices. The total number of supported versions exceeds 34300.
Applications. Added the ability to decrypt Briar, Signal, Silent Phone and ProtonMail data with the encryption keys from the Android Keystore of Android devices based on the Qualcomm chipsets: MSM8917, MSM8937, MSM8940, and MSM8953.
Applications. Messengers. Added data parsing from Briar (1.2.7) from Android devices.
Applications. Messengers. Added data parsing from JusTalk (8.5) from Apple iOS devices.
Applications. Social Networks. Added data parsing from IRL (4.38.0) from Apple iOS devices.
Applications. Business. Added data parsing from Zoho Mail (2.4.33) from Android devices and Zoho Mail (2.7.6) from Apple iOS devices.
Applications. Business. Added data parsing from AppLock (5.5.2) from Android devices.
Applications. Business. Added data parsing from FileSafe (1.4) from Android devices.
Applications. Multimedia. Added data parsing from Default Sound Recorder (10.0.1.560) from Android devices.
Applications. Multimedia. Added data parsing from Shazam (15.21) from Apple iOS devices.
Applications. Web Browsers. Added data parsing from Microsoft Bing (7.0.9) from Apple iOS devices.
Applications. Messengers. Updated data parsing from Telegram (9.0.2) from Apple iOS devices and Telegram (9.0.2) from Android devices.
Applications. Messengers. Updated data parsing from Brosix (4.7.2) from Android devices and Brosix (4.7.3) from Apple iOS devices.
Applications. Messengers. Updated data parsing from Viber (18.6.0) from Apple iOS devices and Viber (18.6.1.0) from Android devices.
Applications. Messengers. Updated data parsing from KakaoTalk (9.8.8) from Android devices and KakaoTalk (9.9.7) from Apple iOS devices.
Applications. Messengers. Updated data parsing from WhatsApp (22.21.75) from Apple iOS devices.
Applications. Messengers. Updated data parsing from Signal (5.57) from Apple iOS devices.
Applications. Messengers. Updated data parsing from ChatSecure (5.0.4) from Apple iOS devices.
Applications. Social Networks. Updated data parsing from Facebook (384.0) from Apple iOS devices.
Applications. Social Networks. Updated data parsing from Instagram (255.1) для Apple iOS devices.
Applications. Social Networks. Updated data parsing from Clubhouse (22.09.29) from Apple iOS devices.
Applications. Business. Updated data parsing from Gmail (2022.10.02.480729202.Release) from Android devices and Gmail (6.0.220918) from Apple iOS devices.
Applications. Business. Updated data parsing from Google Keep (5.22.402.02.90) from Android devices and Google Keep (2.2022.40201) from Apple iOS devices.
Applications. Business. Updated data parsing from Google Translate (6.46.0) from Apple iOS devices
Applications. Business. Updated data parsing from Yahoo Mail (7.0.1) from Apple iOS devices.
Applications. Business. Updated data parsing from Box (5.7.9) from Apple iOS devices.
Applications. Web Browsers. Updated data parsing from Google Chrome (106.0.5249.79) from Android devices and Google Chrome (106.0.5249.92) from Apple iOS devices.
Applications. Web Browsers. Updated data parsing from Brave Browser (1.42) from Apple iOS devices.
Applications. Multimedia. Updated data parsing from Google Photos (6.11.0.480209282) from Android devices and Google Photos (6.11) from Apple iOS devices.

 

[device-forum.com]

Oxygen Forensic Detective 15.2 (December 2022):

Oxygen Forensic® Extractor. Added the ability to brute force passcodes to decrypt physical dumps of Samsung Exynos devices with Android OS 10-11 and File-Based Encryption (FBE).
Oxygen Forensic® Extractor. Added the ability to extract hardware keys and decrypt physical dumps of Xiaomi Redmi 6 and Xiaomi Redmi 6A devices.
Oxygen Forensic® Extractor. Added the ability to extract full file system and keychain from iOS devices with versions 14.4 - 14.5.1 via iOS Agent.
Oxygen Forensic® Extractor. Added the ability to extract full file system and keychain via checkm8 from iPhone 6s and iPhone SE devices without disabling the screen lock.
Oxygen Forensic® Extractor. Updated the ability to extract full file system and keychain from iPhone 5s and iPad Air devices with iOS versions 12.2 - 12.5.6.
Oxygen Forensic® Extractor. Added the ability to extract Firefox from unlocked Android devices via Android Agent.
Oxygen Forensic® Extractor. Added the ability to extract RCS messages from unlocked Android devices via Android Agent.
Oxygen Forensic® Extractor. Added the Desktop.
Oxygen Forensic® Extractor. Extended the Tools menu.
Oxygen Forensic® Extractor. Updated the ability to extract Viber calls from unlocked Android devices via Android Agent.
Oxygen Forensic® Cloud Extractor. Added the ability to extract data from Runtastic.
Oxygen Forensic® Cloud Extractor. Added the ability to decrypt WhatsApp.crypt15 backups.
Oxygen Forensic® Cloud Extractor. Added the ability to calculate OCB backup hash after extraction.
Oxygen Forensic® Cloud Extractor. Updated the ability to authorize in Telegram via tokens extracted from Android devices.
Oxygen Forensic® Cloud Extractor. Updated the ability to authorize in Runkeeper via login and password.
Oxygen Forensic® KeyScout. Added the Encrypted data tab.
Oxygen Forensic® KeyScout. Added display of privilege levels on macOS.
Oxygen Forensic® KeyScout. Added the ability to extract DPAPI keys of the authorized user from Windows volatile memory.
Oxygen Forensic® KeyScout. Added the ability to collect DNS cache from Windows during live data extraction.
Oxygen Forensic® KeyScout. Added the ability to collect ARP cache from Windows during live data extraction.
Oxygen Forensic® KeyScout. Added the ability to extract Firewall rules on Windows.
Oxygen Forensic® KeyScout. Added support for XFS file system.
Oxygen Forensic® KeyScout. Added the ability to extract Cron tasks from Linux.
Oxygen Forensic® KeyScout. Added the ability to extract SSH keys from macOS and Linux.
Oxygen Forensic® KeyScout. Added the ability to extract information about system accounts and groups from Linux.
Oxygen Forensic® KeyScout. Added the ability to extract extended system information about Linux.
Oxygen Forensic® KeyScout. Added the extended information about data saving.
Oxygen Forensic® KeyScout. Updated the ability to extract Google Chrome browser from Windows, macOS and Linux.
Oxygen Forensic® KeyScout. Updated the ability to extract cache from apps based on the Blink engine.
Oxygen Forensic® KeyScout. Updated the ability to extract Facebook Messenger from Windows and macOS.
Import. Added the ability to import and decrypt physical dumps of Android devices with the MT6737 chipset, TEE Trusty and having FDE.
Import. Added the ability to import and decrypt physical dumps of Android devices with the MT6765 chipset, TEE Microtrust and having FDE.
Import. Added the ability to import UFDR-protected and password protected UFDR backups with the known password.
Import. Significantly accelerated import of 7z archives.
Export. Added the ability to set a time zone for all the devices in one case.
Export. Added the ability to export metadata from Search section.
Export. Added the ability to export general information about apps.
Export. Significantly accelerated data export to RSMF format.
General. Added the ability to sort data by several columns.
Applications. Added data parsing from over 300 new app versions from Apple iOS and Android devices.
The total number of supported versions exceeds 34,600.
Applications. Business. Added data parsing from Xiaomi Notes (5.1.9) from Android devices.
Applications. Business. Added data parsing from SafeCalc (2.2.0) from Apple iOS devices.
Applications. Messengers. Added data parsing from Xabber Beta (3.0.2(824)) from Android devices.
Applications. Messengers. Added data parsing from JusTalk (8.6.2) from Android devices.
Applications. Social Networks. Added data parsing from IRL (4.34.0) from Android devices.
Applications. Social Networks. Added data parsing from Life360 (22.12.1) from Apple iOS devices.
Applications. Messengers. Updated data parsing from Facebook Messenger (384.0.0.18.104) from Android devices and Facebook Messenger (339.0) from Apple iOS devices.
Applications. Messengers. Updated data parsing from WhatsApp (22.16.77) from Apple iOS devices and WhatsApp backup from Android devices.
Applications. Messengers. Updated data parsing from TamTam (2.31.1) from Android devices and TamTam (3.9) from Apple iOS devices.
Applications. Messengers. Updated data parsing from Viber (18.9.2.0) from Android devices and Viber (18.9.0) from Apple iOS devices.
Applications. Messengers. Updated data parsing from Telegram (9.1.3) from Android devices.
Applications. Messengers. Updated data parsing from Telegram X (0.25.1.1560) from Android devices.
Applications. Messengers. Updated data parsing from Plus Messenger (9.0.2.0) from Android devices.
Applications. Messengers. Updated data parsing from ICQ (22.10.2(824797)) from Android devices.
Applications. Social Networks. Updated data parsing Instagram (261.0.0.21.111) from Android devices and Instagram (261.0) from Apple iOS devices.
Applications. Social Networks. Updated data parsing Twitter (9.61.0-release.0) from Android devices and Twitter (9.34.6) from Apple iOS devices.
Applications. Social Networks. Updated data parsing from OK (22.11.28) from Android devices and OK (9.58) from Apple iOS devices.
Applications. Social Networks. Updated data parsing from VK (8.7) from Android devices.
Applications. Social Networks. Updated data parsing Zenly (5.7.0) from Apple iOS devices.
Applications. Web Browsers. Updated data parsing from Microsoft Edge (103.0.1264.77) from Apple iOS devices.
Applications. Web Browsers. Updated data parsing from Google Chrome (106.0.5249.92) from Apple iOS devices.
Applications. Business. Updated data parsing from GMail (2022.10.30.488439685.Release) from Android devices and GMail (6.0.221030) from Apple iOS devices.
Applications. Fitness. Updated data parsing from Apple Health (12.5.6) from Apple iOS devices.
Applications. Multimedia. Updated data parsing from Apple Photos (16.0.2) from Apple iOS devices.

 

[device-forum.com]

Oxygen Forensic Detective 15.3 (February 2023):

Oxygen Forensic® Extractor. Added the ability to extract hardware keys and decrypt data from Samsung devices based on the Mediatek Helio G80 chipset and having TEE TEEGRIS.
Oxygen Forensic® Extractor. Added the ability to extract hardware keys and decrypt data from Huawei devices based on the Mediatek MT6765 chipset and running Android OS 10.
Oxygen Forensic® Extractor. Added the ability to extract hardware keys and decrypt data from Motorola devices based on the MediaTek MT6765 chipset, having FBE and running Android OS 10-12.
Oxygen Forensic® Extractor. Added the ability to extract hardware keys and decrypt data from Huawei devices based on the Qualcomm SDM450 chipset.
Oxygen Forensic® Extractor. Added the ability to extract the full file system and keychain via iOS Agent from iOS devices running iOS versions 15.0 - 15.4.1.
Oxygen Forensic® Extractor. Added the ability to extract the full file system and keychain via checkm8 from Apple iOS devices based on the A10 chipset and running iOS 14 and 15 without disabling the screen lock.
Oxygen Forensic® Extractor. Added the ability to extract the full file system and keychain via checkm8 from Apple iOS devices based on the A7-A10 chipsets and running iOS versions 12.5.7 and 15.7.3.
Oxygen Forensic® Extractor. Added the ability to extract additional information from Firefox browser via Android Agent: collections, saved cards, logins and passwords and addresses.
Oxygen Forensic® Extractor. Added the ability to extract Telegram group chats with enabled topics via Android Agent.
Oxygen Forensic® Extractor. Added the dark theme.
Oxygen Forensic® Cloud Extractor. Added the ability to extract data from LastPass via login and password or token.
Oxygen Forensic® Cloud Extractor. Updated the ability to authorize in Huawei services.
Oxygen Forensic® Cloud Extractor. Updated the ability to authorize in MiFit.
Oxygen Forensic® Cloud Extractor. Updated data extraction from Google Chrome.
Oxygen Forensic® Cloud Extractor. Updated data extraction from Google Home.
Oxygen Forensic® Cloud Extractor. Updated data extraction from Google My Activity.
Oxygen Forensic® Cloud Extractor. Updated extraction of Wi-Fi points from Android Cloud Data.
Oxygen Forensic® KeyScout. Added extended analysis of live RAM that now includes memory pages from pagefiles.
Oxygen Forensic® KeyScout. Added the extended information about data search progress.
Oxygen Forensic® KeyScout. Added the ability to extract Background Intelligent Transfer Service (BITS) data on Windows.
Oxygen Forensic® KeyScout. Added the ability to collect diagnostic data from Windows.
Oxygen Forensic® KeyScout. Added the ability to collect the information about running processes on macOS and Linux during live system extraction.
Oxygen Forensic® KeyScout. Added the ability to collect ARP cache on macOS and Linux during live system extraction.
Oxygen Forensic® KeyScout. Added the ability to extract Dock elements from macOS.
Oxygen Forensic® KeyScout. Added the ability to extract the history of commands entered in the terminal on Linux.
Oxygen Forensic® KeyScout. Added the ability to extract the history of apt usage on Linux.
Oxygen Forensic® KeyScout. Added the ability to extract the history of Vim usage on Linux.
Oxygen Forensic® KeyScout. Added the ability to extract Brave data from Windows, macOS and Linux.
Oxygen Forensic® KeyScout. Added the ability to extract encrypted messages from WhatsApp Web used in Google Chrome, Microsoft Edge and Opera browsers from Windows, macOS and Linux.
Oxygen Forensic® KeyScout. Updated the search profiles.
Oxygen Forensic® KeyScout. Updated the ability to extract the information about email recipients from Microsoft Exchange Server on Windows.
Oxygen Forensic® KeyScout. Updated the ability to extract Microsoft Teams data on Windows.
Oxygen Forensic® KeyScout. Updated the ability to extract Viber data on Windows, macOS and Linux.
Oxygen Forensic® KeyScout. Updated the ability to extract Apple Messages data on macOS.
Import. Added the ability to import and parse Tinder archives.
Import. Added the ability to import and decrypt physical dumps of Huawei devices based on the Mediatek MT6765 chipset.
Import. Added the ability to import and decrypt physical dumps of Huawei devices based on the Qualcomm Snapdragon 450 (SDM450) chipset.
Import. Added the ability to import and decrypt physical dumps of Samsung having TEE TEEGRIS.
Import. Significantly accelerated import of DAR archives.
Export. Added the ability to export email messages to RSMF format.
Export. Added the ability to export contact avatars to RSMF format.
Export. Added the ability to exclude file duplicates based on hash values.
Export. Added the ability to convert exported files to the following JPEG formats: HEIC, KTX, RAW, PSD.
General. Updated the ability to decrypt Signal backups from Android devices including backups extracted via Android Agent.
General. Added the ability to add links to other fields and categories in Applications.
Applications. Added data parsing from over 500 new app versions from Apple iOS and Android devices. The total number of supported versions exceeds 35200.
Applications. OS Artifacts. Added data parsing from Apple iOS devices from the following folder:/private/var/mobile/Library/Biome/streams/public.
Applications. Messengers. Added data parsing from BOTIM (2.15.1) from Android devices and BOTIM (2.12.0) from Apple iOS devices.
Applications. Messengers. Added data parsing from GB WhatsApp (17.10) from Android devices.
Applications. Messengers. Added data parsing from OB WhatsApp (38) from Android devices.
Applications. Messengers. Added data parsing from FM WhatsApp (9.45) from Android devices.
Applications. Social Networks. Added data parsing from BeReal (0.27.0) from Apple iOS devices.
Applications. Social Networks. Added data parsing from Moj (23.1.0) from Apple iOS devices.
Applications. Social Networks. Added data parsing from Tiki (3.16.0) from Apple iOS devices.
Applications. Web Browsers. Added data parsing from Microsoft Bing (23.8.40122730) from Android devices.
Applications. Messengers. Updated data parsing from ICQ (22.10.2(824797)) from Android devices and ICQ (22.10.0) from Apple iOS devices.
Applications. Messengers. Updated data parsing from iMe Messenger (9.0.2) from Android devices and iMe Messenger (9.0.2) from Apple iOS devices.
Applications. Messengers. Updated data parsing from Viber (19.3.1.0) from Android devices and Viber (19.3.1) from Apple iOS devices.
Applications. Messengers. Updated data parsing from Skype (8.93.0.404) from Android devices and Skype (8.93.1) from Apple iOS devices.
Applications. Messengers. Updated data parsing from Apple Messages (16.0.2) from Apple iOS devices.
Applications. Messengers. Updated data parsing from WhatsApp (22.23.77) from Apple iOS devices.
Applications. Messengers. Updated data parsing from Discord (162.0) from Apple iOS devices.
Applications. Social Networks. Updated data parsing from SKOUT (6.57.0) from Android devices and SKOUT (6.57.0) from Apple iOS devices.
Applications. Social Networks. Updated data parsing from Zenly (5.9.0) from Android devices and Zenly (5.8.2) from Apple iOS devices.
Applications. Social Networks. Updated data parsing from Twitter (9.73.0-release.0) from Android devices.
Applications. Social Networks. Updated data parsing from Life360 (22.11.1) from Android devices.
Applications. Business. Updated data parsing from Email.cz (2.4.13) from Android devices and Email.cz (4.15.0) from Apple iOS devices.
Applications. Business. Updated data parsing from Gmail (2023.01.08.501398065.Release) from Android devices and Gmail (6.0.230109) from Apple iOS devices.
Applications. Business. Updated data parsing from Yahoo Mail (7.6.1) from Apple iOS devices.
Applications. Web Browsers. Updated data parsing from Firefox (106) from Apple iOS devices.
Applications. Web Browsers. Updated data parsing from Brave (1.45) from Apple iOS devices.

 

[device-forum.com]

Oxygen Forensic Detective 15.3.1 (March 2023):

Oxygen Forensic® Extractor. Added the ability to extract the full file system via iOS Agent from iOS devices running versions 15.0 - 15.7.1 and 16.0 - 16.1.2.
Oxygen Forensic® Cloud Extractor. Updated the authorization algorithm in WhatsApp QR Multi-device.
Oxygen Forensic® Cloud Extractor. Updated the ability to extract attachments from WhatsApp QR Multi-device.
Oxygen Forensic® Cloud Extractor. Updated the ability to authorize in WhatsApp Cloud.
Import. Added the ability to decrypt physical dumps of devices based on the MT6739 chipset and having TEE Trusty and F2FSCrypt.
Import. Added the ability to decrypt physical dumps of devices based on the MT6739 chipset and having TEE Kinibi and F2FSCrypt.
Oxygen Forensic® KeyScout. Added the ability to extract KnownDLLs from Windows.
Oxygen Forensic® KeyScout. Added the ability to extract MUICache from Windows.
Oxygen Forensic® KeyScout. Added the ability to extract Vivaldi data from Windows, macOS and Linux.

 

[device-forum.com]

Oxygen Forensic Detective 15.4 (April 2023):

Oxygen Forensic® Extractor. Added the ability to brute force passcodes to decrypt physical dumps of Samsung Exynos devices with the pre-installed Android OS 9 and Full-Disk Encryption (FDE).
Oxygen Forensic® Extractor. Added the ability to extract Google Chrome browser data via Android Agent from unlocked Android devices.
Oxygen Forensic® Extractor. Added the ability to extract the full file system and keychain via checkm8 from Apple iOS devices with version 15.7.4.
Oxygen Forensic® Extractor. Added the ability to select different exploits for the data extraction via iOS Agent.
Oxygen Forensic® Extractor. Added the Favourites section.
Oxygen Forensic® Extractor.The old version of Extractor is removed from the installation package. Now it can be found only in the customer area.
Oxygen Forensic® Cloud Extractor. Added the ability to extract Huawei Health data.
Oxygen Forensic® Cloud Extractor. Added the ability to extract recent actions of Telegram group chats available to the group admins.
Oxygen Forensic® Cloud Extractor. Added the ability to extract Telegram group chats with enabled topics.
Oxygen Forensic® Cloud Extractor. Added the ability to extract collectible usernames from Telegram.
Oxygen Forensic® Cloud Extractor. Updated the ability to extract Telegram tokens from Apple iOS devices.
Oxygen Forensic® Cloud Extractor. Updated the ability to authorize in Slack.
Oxygen Forensic® Cloud Extractor. Updated the ability to authorize in Discord via QR code.
Oxygen Forensic® Cloud Extractor. Updated the ability to authorize in Viber Cloud.
Oxygen Forensic® KeyScout. Added the ability to analyze Windows RAM images in padded RAW and Crash Dump (DMP) formats while analyzing drives or drive images.
Oxygen Forensic® KeyScout. Added the ability to extract data from drives and images having the Logical Volume Manager partitions.
Oxygen Forensic® KeyScout. Added the ability to extract and filter files by size.
Oxygen Forensic® KeyScout. Added the ability to extract a web version of WhatsApp from Chromium, Microsoft Edge, Brave and Vivaldi browsers from Windows, macOS and Linux.
Oxygen Forensic® KeyScout. Added the ability to extract a web version of Slack from Chromium, Brave and Vivaldi browsers from Windows, macOS and Linux.
Oxygen Forensic® KeyScout. Added the ability to extract a web version of Instagram from Chromium, Microsoft Edge, and Brave browsers from Windows, macOS and Linux.
Oxygen Forensic® KeyScout. Added the ability to extract AnyDesk data from Windows, macOS and Linux.
Oxygen Forensic® KeyScout. Added the ability to extract Find My data from macOS.
Oxygen Forensic® KeyScout. Added the ability to extract the list of system user accounts and groups from macOS.
Oxygen Forensic® KeyScout. Added the ability to extract VPN connection settings from Windows.
Oxygen Forensic® KeyScout. Updated the ability to extract Amazon Photos from Windows and macOS.
Oxygen Forensic® KeyScout. Updated the ability to extract the information about Bluetooth devices from macOS.
Import. Added the ability to import and parse iFlight drone logs.
Import. Added the ability to import and parse Berla iVe backups.
Import. Added the ability to import and parse MD-Next physical extractions of Android devices.
Import. Added the ability to import and decrypt dumps made from Samsung devices based on the MT6769V chipset.
Import. Added the ability to import and decrypt dumps made from devices based on the MT6765 chipset, having TEE Kinibi and F2FS.
Import. Added the ability to import and decrypt dumps made from devices based on the MT6765 chipset, having TEE Microtrust and F2FSCrypt with metadata_encryption.
Import. Added the ability to import and decrypt dumps of MTK devices having FDE and the xchacha12,aes-adiantum-plain64 algorithm.
General. Added the ability to import the list of values for ignored labels in the Contacts section.
Export. Added the ability to enter file signatures while filtering files.
Applications. Added data parsing from over 1000 new app versions from Apple iOS and Android devices. The total number of supported versions exceeds 36300.
Applications. Messengers. Added data parsing from Session (1.16.1) from Android devices.
Applications. Messengers. Added data parsing from Telegram Web (9.5.6) from Android devices.
Applications. Business. Added data parsing from iScanner (3.87.7) from Android devices and iScanner (5.8) from Apple iOS devices.
Applications. Business. Added data parsing from Notion (1.7.96) from Apple iOS devices.
Applications. Messengers. Updated data parsing from Zalo (23.02.02) from Android devices and Zalo (23.23.01) from Apple iOS devices.
Applications. Messengers. Updated data parsing from WhatsApp (2.23.4.79) from Android devices and WhatsApp (22.24.81) from Apple iOS devices.
Applications. Messengers. Updated data parsing from Telegram (9.5.6) from Android devices and Telegram (9.3.2) from Apple iOS devices.
Applications. Messengers. Updated data parsing from Viber (19.5.1) from Apple iOS devices and Viber (19.5.4.0) from Android devices.
Applications. Messengers. Updated data parsing from Skype (8.95.0.412) from Android devices Skype (8.95.1) from Apple iOS devices.
Applications. Messengers. Updated data parsing from JusTalk (8.7.5) from Android devices and JusTalk (8.7.3) from Apple iOS devices.
Applications. Messengers. Updated data parsing from Facebook Messenger Lite (329.0.0.8.106) from Android devices.
Applications. Messengers. Updated data parsing from Phone By Google (99.0.512778607) from Android devices.
Applications. Messengers. Updated data parsing from BOTIM (2.15.4) from Android devices.
Applications. Messengers. Updated data parsing from Briar (1.4.20) from Android devices.
Applications. Social Networks. Updated data parsing from Facebook (405.0.0.23.72) from Android devices and Facebook (396.0) from Apple iOS devices.
Applications. Social Networks. Updated data parsing from Tinder (14.5.0) from Android devices and Tinder (14.4.0) from Apple iOS devices.
Applications. Social Networks. Updated data parsing from Skout (6.59.0) from Android devices.
Applications. Social Networks. Updated data parsing from Twitter (9.73.0-release.0) from Android devices.
Applications. Social Networks. Updated data parsing from Zenly (5.9.1) from Android devices.
Applications. Social Networks. Updated data parsing from Twitter (9.42) from Apple iOS devices.
Applications. Social Networks. Updated data parsing from LinkedIn (9.1.299) from Apple iOS devices.
Applications. Business. Updated data parsing from Gmail (2023.03.05.518353126.Release) from Android devices and Gmail (6.0.230305) from Apple iOS devices.
Applications. Business. Updated data parsing from Temp Mail (3.13) from Android devices and Temp Mail (3.1.0) from Apple iOS devices.
Applications. Web Browsers. Updated data parsing from Firefox (106.0) from Apple iOS devices.
Applications. Web Browsers. Updated data parsing from Google Chrome (110.0.5481.154) from Android devices.

 

[device-forum.com]

Oxygen Forensic Detective 15.5 (May 2023):

Oxygen Forensic® Extractor. Added the ability to extract hardware keys and decrypt physical dumps of Android OS devices based on the UNISOC T610/T618/T700 chipsets, running Android OS 10-13 and having File-Based Encryption (FBE).
Oxygen Forensic® Extractor. Added the ability to extract hardware keys and decrypt physical dumps of Android OS devices based on the MT6761 chipsets and having File-Based Encryption (FBE).
Oxygen Forensic® Extractor. Added the ability to brute force passwords to decrypt physical dumps of Samsung Exynos devices with Full-Disk Encryption (FDE) and upgraded from Android OS 9 to 10-11.
Oxygen Forensic® Extractor. Added the ability to extract keychain via iOS Agent from Apple iOS devices with iOS versions 15.0 - 15.5.
Oxygen Forensic® Extractor. Extended the ability to extract file system via iOS Agent from Apple iOS devices with iOS versions 15.0 - 15.7.1 and 16.0 - 16.1.2.
Oxygen Forensic® Extractor. Added the ability to extract the full file system and keychain via checkm8 from Apple iOS devices with iOS version 15.7.5.
Oxygen Forensic® Extractor. Added the ability to scale the interface.
Oxygen Forensic® Extractor. Updated the ability to extract WhatsApp and WhatsApp Business data via Android Agent.
Oxygen Forensic® Extractor. Updated the ability to extract Twitter data via Android Agent.
Oxygen Forensic® Extractor. Updated the ability to extract Viber data via Android Agent.
Oxygen Forensic® Cloud Extractor. Added the ability to extract the information about the Premium account, group and channel join requests, reactions, and blocked users from Telegram.
Oxygen Forensic® Cloud Extractor. Added free space check before data extraction.
Oxygen Forensic® Cloud Extractor. Updated the ability to extract avatars from Telegram.
Oxygen Forensic® Cloud Extractor. Updated the ability to extract Facebook data.
Oxygen Forensic® Cloud Extractor. Updated the ability to authorize in Tinder.
Oxygen Forensic® KeyScout. Added the ability to analyze Windows hibernation files.
Oxygen Forensic® KeyScout. Added the ability to extract BitLocker keys from Windows RAM.
Oxygen Forensic® KeyScout. Added the ability to analyze Windows drive partitions protected with BitLocker.
Oxygen Forensic® KeyScout. Added the ability to search files by their content using text strings, hex values and regular expressions.
Oxygen Forensic® KeyScout. Added the ability to extract known network connections from Windows.
Oxygen Forensic® KeyScout. Added the ability to extract saved pop-up notifications from macOS.
Oxygen Forensic® KeyScout. Added the ability to extract the information about the installed Debian Package/Advanced Packaging Tool packages from Linux.
Oxygen Forensic® KeyScout. Added the ability to extract Briar data from Windows and Linux.
Oxygen Forensic® KeyScout. Added the ability to extract Notepad++ from Windows and Linux.
Oxygen Forensic® KeyScout. Extended the ability to extract Telegram data from macOS.
Oxygen Forensic® KeyScout. Updated the ability to extract user credentials from Windows Credential Manager.
Oxygen Forensic® KeyScout. Updated the ability to extract Viber data on Windows, macOS and Linux.
Oxygen Forensic® KeyScout. Updated the ability to extract WhatsApp data on Windows and macOS.
Import. Added the ability to import and parse Telegram Exported Data.
Import. Added the ability to decrypt physical dumps of Android OS devices based on the UNISOC T610/T618/T700 chipsets
Import. Added the ability to decrypt physical dumps of Android OS devices based on the MT6761 chipset.
Import. Added the ability to decrypt physical dumps of Huawei devices based on the MT6765 chipset and having TEE TRUSTEE and F2FSCrypt.
Import. Added the ability to decrypt physical dumps of Samsung devices based on the MT6765 chipset having F2FSCrypt and TEE Kinibi.
Import. Added the ability to decrypt physical dumps of Samsung devices based on the MT6765 chipset having F2FSCrypt and TEE TEEGRIS.
Export. Added the ability to export the supported devices list.
Export. Added the ability to exclude media file previews in the section export settings.
Export. Extended search by file signatures.
Export. Fixed the issues that occurred during export of geo coordinates to KML and GPX.
General. Added the integrity check run at the program start.
Applications. Added data parsing from over 2000 new app versions from Apple iOS and Android devices. The total number of supported versions exceeds 38500.
Applications. Business. Added data parsing from Samsung Customization Service (2.9.10.0) from Android devices.
Applications. Business. Added data parsing from Hide It Pro (8.7.1) from Android devices.
Applications. Business. Added data parsing from Notepad Vault-AppHider (3.2.0_250ba0164) from Android devices.
Applications. Business. Added data parsing from Notion (0.6.1121) from Android devices.
Applications. Business. Added data parsing from Tappsk (2.2.50) from Apple iOS devices.
Applications. Messengers. Updated data parsing from Signal (5.44.3) from Android devices and Signal (6.19) from Apple iOS devices.
Applications. Messengers. Updated data parsing from Telegram (9.6.5) from Android devices and Telegram (9.4.3) from Apple iOS devices.
Applications. Messengers. Updated data parsing from Line (13.5.0) from Android devices and Line (13.5.1) from Apple iOS devices.
Applications. Messengers. Updated data parsing from Zalo (23.04.01) from Android devices and Zalo (23.04.01) from Apple iOS devices
Applications. Messengers. Updated data parsing from JusTalk (8.8.5) from Android devices and JusTalk (8.7.9) from Apple iOS devices.
Applications. Messengers. Updated data parsing from Messages from Android devices.
Applications. Social Networks. Updated data parsing from Facebook (413.0.0.30.104) from Android devices and Facebook (414.0) from Apple iOS devices.
Applications. Social Networks. Updated data parsing from LinkedIn (4.1.807) from Android devices and LinkedIn (9.1.315) from Apple iOS devices.
Applications. Social Networks. Updated data parsing from Instagram (261.0) from Apple iOS devices.
Applications. Business. Updated data parsing from Zoho Mail (2.6.4) from Android devices and Zoho Mail (2.8.6) from Apple iOS devices.
Applications. Business. Updated data parsing from Calculator# (3.3.5) from Apple iOS devices.
Applications. Business. Updated data parsing from Gmail (2023.04.16.527073575.Release) from Android devices and Gmail (6.0.230417) from Apple iOS devices.
Applications. Web Browsers. Updated data parsing from Phoenix Browser (12.8.2.4423) from Android devices.
Applications. Multimedia. Updated data parsing from Shazam (15.32) from Apple iOS devices.

 

[device-forum.com]

Oxygen Forensic Detective 15.5.0.200 (June 2023):

General. Fixed the issue with opening OCPK files.
Oxygen Forensic® KeyScout. Fixed the issue when WhatsApp encryption keys were not extracted if several WhatsApp accounts were found on the same computer.
Oxygen Forensic® KeyScout. Fixed the issue when custom paths were ignored during Windows live data collection with the escalated system privileges and unencrypted drives.

 

[device-forum.com]

Oxygen Forensic Detective 15.5.1 (July 2023):

Oxygen Forensic® Extractor. Added the ability to extract hardware keys and decrypt physical dumps of Android devices based on the MT6833 chipsets, running Android OS 10-13 and having File-Based Encryption (FBE).
Oxygen Forensic® Extractor. Added the ability to extract the full file system and keychain via checkm8 from Apple iOS devices with iOS version 15.7.7.
Oxygen Forensic® Extractor. Updated the ability to extract the full file system and keychain via iOS Agent from Apple iOS devices with versions 15.0-15.4.1.
Oxygen Forensic® Extractor. Updated the ability to extract Kik Messenger via Android Agent from Android devices.
Oxygen Forensic® Extractor. Updated the ability to extract Discord via Android Agent from Android devices.
Oxygen Forensic® Extractor. Updated the ability to extract data via Android Agent from Huawei devices running HarmonyOS.
Oxygen Forensic® Cloud Extractor. Updated the ability to authorize in Twitter.
Oxygen Forensic® Cloud Extractor. Updated the ability to authorize in Google.
Oxygen Forensic® KeyScout. Added the ability to choose encoding for file names for ZIP archives.
Oxygen Forensic® KeyScout. Added the ability to download the debugging symbols from the Internet and use them to analyze RAM Memory of unsupported Windows OS versions.
Oxygen Forensic® KeyScout. Added the ability to collect ICQ data from Windows, macOS and Linux.
Oxygen Forensic® KeyScout. Added the ability to collect FileZilla data from Windows, macOS and Linux.
Oxygen Forensic® KeyScout. Added the ability to collect Spark data from Windows.
Oxygen Forensic® KeyScout. Added the ability to collect Discord data from Linux.
Oxygen Forensic® KeyScout. Added the ability to collect Discord messages and cookies from Windows and macOS.
Oxygen Forensic® KeyScout. Added the ability to collect permissions given by macOS applications.
Oxygen Forensic® KeyScout.Added the ability to collect background application activity from Windows.
Oxygen Forensic® KeyScout. Added the ability to collect the history of recently opened files from Linux.
Oxygen Forensic® KeyScout. Added the ability to collect the secret DPAPI password from Windows accounts linked to the Microsoft accounts.
Oxygen Forensic® KeyScout. Updated the ability to collect Spark data from macOS.
Oxygen Forensic® KeyScout. Updated the ability to collect data about network interfaces from Windows.
Oxygen Forensic® KeyScout. Expanded the ability to collect Event logs from Windows. Now data about VPN, BITS, DPAPI, BitLocker and Network Profile can be collected.
Oxygen Forensic® KeyScout. Improved support for DPAPI of Windows accounts linked to the Microsoft accounts.
Import. Added the ability to decrypt physical dumps of Android OS devices based on the MT6833 chipset and having TEE Microtrust and F2FSCrypt.
Import. Added the ability to decrypt physical dumps of Android OS devices based on the MT6833 chipset and having TEE TEEGRIS and F2FSCrypt.
Import. Added the ability to decrypt physical dumps of Android OS devices based on the MT6768 chipset and having F2FSCrypt and hybrid TEE Kinibi + TEEGRIS.
Import. Added the ability to decrypt physical dumps of Android OS devices based on the MT6580 chipset and having TEE T6, F2FSCrypt and metadata encryption.
Import. Added the ability to import and parse UFED backups of CLBX format.
Maps. Added the Activity Matrix for geo coordinates.
Timeline. Added a new smart filter that allows showing the events within the timeframe that happened before and after the events with tags.
Timeline. Added the ability to filter by seconds, minutes and hours in the time filter.
Applications. Added data parsing from over 1200 new app versions from Apple iOS and Android devices. The total number of supported versions exceeds 39900.
Applications. Messengers. Added data parsing from AWS Wickr (6.12.4) from Android devices and AWS Wickr (6.14.3) from Apple iOS devices.
Applications. Web Browsers. Added data parsing from Vivaldi Browser (6.1.3035.110) from Android devices.
Applications. Business. Added data parsing from Samsung Email (6.1.75.0) from Android devices.
Applications. Messengers. Updated data parsing from Viber (20.4.3.0) from Android devices and Viber (20.3.1) from Apple iOS devices.
Applications. Messengers. Updated data parsing from Telegram X (0.25.6.1624) from Android devices.
Applications. Messengers. Updated data parsing from Wickr Me (6.4.2) from Apple iOS devices.
Applications. Social Networks. Updated data parsing from Twitter (9.85.0-release.0) from Android devices.
Applications. Social Networks. Updated data parsing from Instagram (284.0.0.22.85) from Android devices and Instagram (283.0) from Apple iOS devices.
Applications. Social Networks. Updated data parsing from JusTalk (8.8.10) from Android devices and JusTalk (8.7.25) from Apple iOS devices.
Applications. Social Networks. Updated data parsing from Facebook (421.0.0.33.47) from Android devices and Facebook (421.0) from Apple iOS devices.
Applications. Social Networks. Updated data parsing from LinkedIn (4.1.828.1) from Android devices.
Applications. Social Networks. Updated data parsing from Omlet Arcade (1.111.9) from Android devices.
Applications. Web Browsers. Updated data parsing from Safari (14.0) from Apple iOS devices.
Applications. Web Browsers. Updated data parsing from Firefox (115.0) from Android devices and Firefox (114.4) from Apple iOS devices.
Applications. Web Browsers. Updated data parsing from Google Chrome (114.0.5735.60) from Android devices and Google Chrome (114.0.5735.124) from Apple iOS devices.
Applications. Business. Updated data parsing from Gmail (6.0.230611) from Apple iOS devices and Gmail (2023.06.11.542368486) from Android devices.
Applications. Business. Updated data parsing from Google Keep (5.23.242.01.90) from Android devices and Google Keep (2.2023.24201) from Apple iOS devices.

 

[device-forum.com]

Oxygen Forensic Detective 16.0 (September 2023):

Oxygen Forensic® Extractor. Added the ability to extract hardware keys and decrypt physical dumps of devices based on the UNISOC T606, T616, T612 and T310 chipsets and running Android OS 10 - 13.
Oxygen Forensic® Extractor. Added the ability to extract hardware keys and decrypt physical dumps of Xiaomi Redmi 7A/8/8A devices based on the Qualcomm SDM439 chipset.
Oxygen Forensic® Extractor. Added the ability to extract app data from Android devices with OS 12-13 using the APK Downgrade method.
Oxygen Forensic® Extractor. Added the ability to extract the file system and keychain via iOS Agent from iOS devices running iOS 14.6 - 14.8.1, 15.6 - 15.7.1, and 16.0 - 16.5.
Oxygen Forensic® Extractor. Added the ability to extract the full file system and keychain via checkm8 from Apple iOS devices with iOS version 15.7.8.
Oxygen Forensic® Extractor. Added the ability to extract and analyze iTunes backups made from iOS 17 Beta devices.
Oxygen Forensic® Extractor. Added the ability to extract Samsung Browser data from Android devices via Android Agent.
Oxygen Forensic® Extractor. Added the ability to brute force passcodes for Briar app in the Full File System extraction method for Android devices.
Oxygen Forensic® Extractor. Added the information about keychain extraction via iOS agent in the Devices section.
Oxygen Forensic® Extractor. Added the Themes Editor.
Oxygen Forensic® Cloud Extractor. Added the ability to extract data from Clubhouse.
Oxygen Forensic® Cloud Extractor. Added the ability to extract data from Bumble.
Oxygen Forensic® Cloud Extractor. Added the ability to extract data from Google Messages.
Oxygen Forensic® Cloud Extractor. Added the ability to extract new artifacts from Facebook.
Oxygen Forensic® Cloud Extractor. Updated the ability to authorize in Viber Cloud.
Oxygen Forensic® Cloud Extractor. Updated the ability to authorize in WhatsApp Cloud.
Oxygen Forensic® Cloud Extractor. Updated the ability to extract attachments from Discord.
Oxygen Forensic® Cloud Extractor. Updated the ability to authorize in Google.
Oxygen Forensic® Cloud Extractor. Updated the ability to authorize in Runkeeper.
Oxygen Forensic® KeyScout. Added the ability to extract VeraCrypt keys from Windows RAM.
Oxygen Forensic® KeyScout. Added the ability to decrypt and analyze VerCrypt containers.
Oxygen Forensic® KeyScout. Added the ability to recover deleted files from FAT16, FAT32 and exFAT file systems.
Oxygen Forensic® KeyScout. Added the ability to set automatic saving and import of extracted data.
Oxygen Forensic® KeyScout. Added support for macOS 14 Sonoma (beta 4).
Oxygen Forensic® KeyScout. Added the ability to decrypt Viber databases from macOS.
Oxygen Forensic® KeyScout. Added the ability to decrypt WhatsApp databases from Windows images.
Oxygen Forensic® KeyScout. Added the ability to extract NordVPN from Windows, macOS and GNU/Linux.
Oxygen Forensic® KeyScout. Added the ability to extract PureVPN from Windows, macOS and GNU/Linux.
Oxygen Forensic® KeyScout. Added the ability to extract Telegram stories from macOS.
Oxygen Forensic® KeyScout. Added the ability to extract VLC Media Player from Windows, macOS and GNU/Linux.
Oxygen Forensic® KeyScout. Added the ability to extract a paid version of ViPole from Windows, macOS and GNU/Linux.
Oxygen Forensic® KeyScout. Added the ability to extract installed Homebrew packages from macOS.
Oxygen Forensic® KeyScout. Added the ability to extract Shim Cache from Windows.
Oxygen Forensic® KeyScout. Added the ability to extract information about permissions that were given to applications on Windows.
Oxygen Forensic® KeyScout. Improved Interface scaling.
Import. Added selective data analysis of imported Oxygen Forensic® KeyScout extractions.
Import. Added the ability to brute force passcodes for Apple Notes.
Import. Added the ability to decrypt physical dumps of Xiaomi Redmi 7A/8/8A based on the Qualcomm SDM439 chipset.
Import. Added the ability to decrypt physical dumps of Unisoc T606/T616/T612 and T310 chipsets.
Import. Added the ability to import and analyze XRY backups of versions 10.3.1 and newer (formats 11 and 12).
Image Categorization. Added the ability to categorize images by new threats: medical, meme, offensive gesture, and schematic.
Timeline. Added a new smart filter that allows showing events before and after the events marked with a particular tag.
Files. Added the ability to add extensions to the names of saved files that have no extension.
Contacts. Added the ability to filter by common contacts in a case.
Oxygen Forensic® Viewer. Added the ability to search data across all the extractions.
Oxygen Forensic® Maps. Added the ability to merge layers.
Export. Added the ability to set a passcode to a PDF report.
Export. Updated support for HTML format.
Applications. Social Networks. Added data parsing from Threads (294.0.0.27.110) from Android devices and Threads (295.0) from Apple iOS devices.
Applications. Social Networks. Added data parsing from TanTan (5.8.6.1) from Android devices and TanTan (5.9.7) from Apple iOS devices.
Applications. Social Networks. Added data parsing from TikTok Lite (30.3.4) from Android devices.
Applications. Business. Added data parsing from 1Password (8.10.7) from Android devices and 1Password (8.10.9) from Apple iOS devices.
Applications. Messengers. Updated data parsing from Slack (23.07.20.0) from Android devices and Slack (23.08.30) from Apple iOS devices.
Applications. Messengers. Updated data parsing from Threema (5.2.1) from Apple iOS devices.
Applications. Messengers. Updated data parsing from Verizon Messages (9.4.1) from Android devices.
Applications. Messengers. Updated data parsing from Facebook Messenger (416.0.0.9.76) from Android devices.
Applications. Social Networks. Updated data parsing from GroupMe (6.61.2) from Android devices and GroupMe (6.61) from Apple iOS devices.
Applications. Business. Updated data parsing from Xiaomi Notes (6.0.7) from Android devices.

 

[device-forum.com]

Oxygen Forensic Detective 16.0.1 (October 2023):

Oxygen Forensic® Extractor. Added the ability to extract public data via iOS Agent from Apple iOS devices.
Oxygen Forensic® Extractor. Added the animated instructions for the checkm8 method.
Oxygen Forensic® Extractor. Added the ability to extract Apple iOS 17 devices via iTunes backup procedure.
Oxygen Forensic® Extractor. Added the ability to extract data via iTunes backup procedure from iPhone 15, iPhone 15 Plus, iPhone 15 Pro and iPhone 15 Pro Max.
Oxygen Forensic® Extractor. Added the ability to extract the full file system and keychain from iPhone 6s and iPhone 7 devices running iOS version 15.7.9.
Oxygen Forensic® Extractor. Added the ability to conduct logical extraction, make screenshots and video recordings of data via Android Agent from Android OS 14 devices.
Oxygen Forensic® Extractor. Added the ability to extract Android KeyStore from devices with the pre-installed Android OS 13.
Oxygen Forensic® Extractor. Updated the ability to extract WhatsApp and WhatsApp Business via Android Agent.
Oxygen Forensic® Extractor. Updated the ability to extract Discord via Android Agent.
Oxygen Forensic® Extractor. Updated the ability to extract Viber via Android Agent.
Oxygen Forensic® Extractor. Updated the ability to extract Google Chrome via Android Agent.
Oxygen Forensic® Extractor. Updated the ability to extract X (Twitter) via Android Agent.
Oxygen Forensic® Extractor. Updated the ability to extract Telegram via Android Agent.
Oxygen Forensic® Extractor. Updated the ability to extract Kik via Android Agent.
Oxygen Forensic® Extractor. Added the ability to re-extract data protected with the screen lock passcode if the first attempt to extract it via Android Agent method failed.
Oxygen Forensic® Extractor. Redesigned the selective data extraction window in the Android Agent.
Oxygen Forensic® Cloud Extractor. Added support for CAPTCHA for WhatsApp cloud.
Oxygen Forensic® Cloud Extractor. Updated the ability to extract data from WhatsApp QR Multi-device.
Oxygen Forensic® Cloud Extractor. Updated the ability to authorize in Huawei Cloud Data.
Oxygen Forensic® KeyScout. Added the ability to decrypt VeraCrypt containers with keyfiles.
Oxygen Forensic® KeyScout. Added the ability to decrypt user passwords extracted from FileZilla Client.
Oxygen Forensic® KeyScout. Added the ability to decrypt logins and passwords saved in the system VPN client.
Oxygen Forensic® KeyScout. Added the ability to extract serial numbers of macOS computers.
Oxygen Forensic® KeyScout. Added data parsing from VeraCrypt app from Windows, macOS and GNU/Linux.
Oxygen Forensic® KeyScout. Added data parsing from IrfanView app from Windows.
Oxygen Forensic® KeyScout. Added data parsing from KMPlayer from Windows.
Oxygen Forensic® KeyScout. Added the ability to extract Dropbox from GNU/Linux.
Oxygen Forensic® KeyScout. Added the ability to extract the creation and modification dates of APFS partitions.
Oxygen Forensic® KeyScout. Added the ability to extract the history of the user logins from Apple System Logs (ASL) from macOS.
Oxygen Forensic® KeyScout. Added the ability to extract the information about documents printed with CUPS (Common UNIX Printing System) from macOS and GNU/Linux.
Oxygen Forensic® KeyScout.Added the ability to extract the information about trusted documents and locations stored in MS Office apps.
Oxygen Forensic® KeyScout. Added the information about bookmarks and sessions of web browsers based on the Blink engine.
Oxygen Forensic® KeyScout. Added the ability to import the list of search paths and excluded file paths.
Oxygen Forensic® KeyScout. Updated the ability to extract Dropbox from Windows and macOS.
Oxygen Forensic® KeyScout. Extended the information extracted from the cache of apps based on the Blink engine from Windows, macOS andGNU/Linux.
Oxygen Forensic® KeyScout. Extended the ability to generate a report about performed operations.
Oxygen Forensic® KeyScout. Improved the ability to download symbols from Windows Server.
Oxygen Forensic® KeyScout. Improved the overall functionality and UI.
Import. Added the ability to decrypt physical images of Honor 7S and Huawei Y5 devices.
Import. Added the ability to extract file metadata from UFED extractions of CLBX format.
Import. Updated support for Mediatek-based Android devices having TEE T6.
Import. Updated support for UNISOC-based Android devices having TEE Trusty.
Contacts. Added deduplication of events in the Contacts card and Communications panel.
File Viewer. Added the ability to open binary XML files.
Export. Added the ability to export email messages to MSG format of Microsoft Outlook.
Export. Added the ability to export contacts to VCF format.
Export. Excluded .SMIL files from reports.
Export. Improved the Reports section.
Applications. Added the ability to filter by missing attachments.
Applications. Added data parsing from over 2500 new app versions from Apple iOS and Android devices. The total number of supported versions exceeds 43800.
Applications. Social Networks. Added data parsing from Bumble (5.339.1) from Android devices and Bumble (5.306.0) from Apple iOS devices.
Applications. Business. Added data parsing from Todoist (v11034) from Android devices and Todoist (23.9.15) from Apple iOS devices.
Applications. Business. Added data parsing from Samsung My Files (10.1.13.391) from Android devices.
Applications. Business. Added data parsing from Gmail Go (2022.10.10.480125827) from Android devices.
Applications. Messengers. Updated data parsing from Facebook Messenger (423.0.0.25.113) from Android devices and Facebook Messenger (422.0) from Apple iOS devices.
Applications. Messengers. Updated data parsing from Telegram (10.0.2) from Android devices and Telegram (10.1.2) from Apple iOS devices.
Applications. Messengers. Updated data parsing from WhatsApp (2.23.19.84) from Android devices and WhatsApp (23.20.1) from Apple iOS devices.
Applications. Messengers. Updated data parsing from Skype (8.104.0.208) from Android devices and Skype (8.99.1) from Apple iOS devices.
Applications. Messengers. Updated data parsing from Viber (21.1.0.0) from Android devices and Viber (21.1.0) from Apple iOS devices.
Applications. Messengers. Updated data parsing from ICQ (23.1.1(10011564)) from Android devices and ICQ (23.1.1) from Apple iOS devices.
Applications. Social Networks. Updated data parsing from Instagram (297.0.0.40.109) from Android devices and Instagram (303.3) from Apple iOS devices.
Applications. Social Networks. Updated data parsing from JusTalk (8.8.26) from Android devices and JusTalk (8.7.44) from Apple iOS devices.
Applications. Social Networks. Updated data parsing from X (Twitter) (10.7) from Apple iOS devices and X (Twitter) X (10.10.0-release.0) from Android devices.
Applications. Social Networks. Updated data parsing from Facebook (428.0) from Apple iOS devices and Facebook (435.0.0.42.112) from Android devices.
Applications. Social Networks. Updated data parsing from Snapchat (11.65.1.32) from Android devices.
Applications. Social Networks. Updated data parsing from Moj (23.16.1) from Apple iOS devices.
Applications. Business. Updated data parsing from Gmail (2023.08.20.561750975) from Android devices and Gmail (6.0.230723) from Apple iOS devices.
Applications. Business. Updated data parsing from TempMail (3.36) from Android devices and TempMail (3.1.1) from Apple iOS devices.
Applications. Business. Updated data parsing from Xiaomi Notes (6.0.9) from Android devices.
Applications. Web Browsers. Updated data parsing from Google Chrome (118.0.5993.48) from Android devices and Google Chrome (118.0.5993.585) from Apple iOS devices.
Applications. Web Browsers. Updated data parsing from Samsung Internet Browser (22.0.6.9) from Android devices.
Applications. Web Browsers. Updated data parsing from Vivaldi Browser (6.2.3110.86) from Android devices.

 

[device-forum.com]

Oxygen Forensic Detective 16.1 (December 2023):
Oxygen Forensic® Extractor. Added the ability to extract hardware keys and decrypt physical dumps of Android OS devices based on the UNISOC SC9863A chipset, running Android OS 10-13 and having File-Based Encryption (FBE).
Oxygen Forensic® Extractor. Added the ability to extract hardware keys and decrypt physical dumps of Android OS devices based on the MT6893 and MT6853 chipsets.
Oxygen Forensic® Extractor. Added the ability to extract the full file system from unlocked Android devices that have the SPL no later than October 2022.
Oxygen Forensic® Extractor. Added the ability to extract Opera Browser data via Android Agent from unlocked Android devices.
Oxygen Forensic® Extractor. Oxygen Forensic® Extractor. Added the ability to extract the full file system and keychain via iOS Agent from iPads based on the A8 - A15, M1, and M2 chipsets and running iPadOS 15.0 - 15.7.3, and 16.1 - 16.5.
Oxygen Forensic® Extractor. Added the ability to extract the full file system and keychain via iOS Agent from iPhones based on the A9 - A11 chipsets and running iOS versions 15.0 - 15.7.3, 16.0 - 16.5.
Oxygen Forensic® Extractor. Updated the ability to extract Zoom data via Android Agent from unlocked Android devices.
Oxygen Forensic® Extractor. Updated the ability to extract contacts from Silent Phone via Android Agent from unlocked Android devices.
Oxygen Forensic® Extractor. Updated the ability to extract contacts from Line via Android Agent from unlocked Android devices.
Oxygen Forensic® Extractor. Extended the list of applications supported by the APK Downgrade method.
Oxygen Forensic® Extractor. Now the list of supported applications can be seen on the main window of the APK Downgrade method.
Oxygen Forensic® Extractor. Added the device cards with the detailed device information.
Oxygen Forensic® Extractor. Improved the stability of the iOS Agent method.
Oxygen Forensic® Cloud Extractor. Added the ability to authorize in the WhatsApp QR Multi-Device service via phone number.
Oxygen Forensic® Cloud Extractor. Added the ability to extract Facebook data via iOS token.
Oxygen Forensic® Cloud Extractor. Updated the ability to extract Discord tokens from Android devices.
Oxygen Forensic® Cloud Extractor. Updated the ability to extract Discord data.
Oxygen Forensic® Cloud Extractor. Updated the ability to authorize in Amazon Alexa via login and password.
Oxygen Forensic® KeyDiver. Added the ability to brute force passwords to decrypt partitions protected with BitLocker, and FileVault 2.
Oxygen Forensic® KeyDiver. Added the ability to brute force passwords to decrypt encrypted ZIP files.
Oxygen Forensic® KeyDiver. Added the ability to brute force passwords to decrypt Telegram Desktop.
Oxygen Forensic® KeyDiver. Added the ability to brute force passwords to decrypt Apple Notes.
Oxygen Forensic® KeyDiver. Added the ability to find passcodes using the personal data from extractions.
Oxygen Forensic® KeyScout. Added the ability to import and parse computer images of AFF4 format.
Oxygen Forensic® KeyScout. Added the ability to import and parse computer images of VHDX format.
Oxygen Forensic® KeyScout. Added the ability to recover deleted files from NTFS while running live extraction, importing computer images or connecting external drives.
Oxygen Forensic® KeyScout. Added the ability to export the list of files without saving their content.
Oxygen Forensic® KeyScout. Added support for macOS based on the ARM processors without Rosetta installed.
Oxygen Forensic® KeyScout. Added the ability to extract the information about recently used applications, documents, servers, partitions and other objects of macOS.
Oxygen Forensic® KeyScout. Added the ability to extract LibreOffice data from Windows, macOS and GNU/Linux.
Oxygen Forensic® KeyScout. Added the ability to extract Exodus data from Windows, macOS and GNU/Linux.
Oxygen Forensic® KeyScout. Added the ability to extract Todoist data from Windows, macOS and GNU/Linux.
Oxygen Forensic® KeyScout. Added the ability to extract stories of public channels and quoted messages from Telegram for macOS.
Oxygen Forensic® KeyScout. Updated the ability to extract OneDrive data from Windows and macOS.
Oxygen Forensic® KeyScout. Updated the ability to extract Slack data from Windows, macOS and GNU/Linux.
General. Added the ability to translate extracted data.
General. Added the ability to manually or automatically delete deleted extraction files from the repository.
Import. Added the ability to import Instagram account copy.
Import. Added the ability to import and parse logical FFS extractions of MDF(MD-Next).
Import. Added the ability to decrypt physical images of Android devices based on the UNISOC SC9863A chipset.
Import. Added the ability to decrypt physical images of Android devices based on the MT6893 and MT6853 chipsets.
Import. Added the ability to select the keychain file during import.
Import. Now data from the UFD manifest file is shown in the Extraction Info and Device Info.
Statistics. Added the First Contacted information.
Export. Added the ability to export translated data.
Export. Added the ability to split the reports while exporting chats.
Export. Fixed the issues that occurred while exporting the Search section data.
Applications. Added data parsing from over 500 new app versions from Apple iOS and Android devices. The total number of supported versions exceeds 44300.
Applications. Password Managers. Added data parsing from Bitwarden (2023.10.0) from Android devices and Bitwarden (2023.10.0) from Apple iOS devices.
Applications. Organizer. Added data parsing from Trello (2023.14.3.8665) from Android devices and Trello (2023.14) from Apple iOS devices.
Applications. Messengers. Added data parsing from Message+ (5.3.7) from Apple iOS devices.
Applications. Messengers. Updated data parsing from Signal (6.37.2) from Android devices and Signal (6.37) from Apple iOS devices.
Applications. Messengers. Updated data parsing from Discord (166.15) from Android devices and Discord (203.0) from Apple iOS devices.
Applications. Messengers. Updated data parsing from Facebook Messenger (434.0.0.30.104) from Android devices and Facebook Messenger (434.0) from Apple iOS devices.
Applications. Messengers. Updated data parsing from Viber (21.3.2.0) from Android devices and Viber (21.3.0) from Apple iOS devices.
Applications. Messengers. Updated data parsing from TamTam (3.14) from Apple iOS devices.
Applications. Social Networks. Updated data parsing from Facebook (439.0.0.1.117) from Android devices and Facebook (440.0) from Apple iOS devices.
Applications. Social Networks. Updated data parsing from Grindr (9.17.3) from Android devices and Grindr (9.16.1) from Apple iOS devices.
Applications. Business. Updated data parsing from GMail (2023.10.29.580630254.Release) from Android devices and GMail (6.0.231023) from Apple iOS devices.
Applications. Business. Updated data parsing from Email.cz (4.16.4) from Apple iOS devices.

 

[device-forum.com]

Oxygen Forensic Detective 16.1.0.200 (December 2023):
Fixed the issue when after the database storage folder cleanup cases were deleted and extractions were moved to unassigned extractions.

 

[device-forum.com]

Oxygen Forensic Detective 16.1.1 (January 2024):

Oxygen Forensic® Extractor. Added the ability to extract hardware keys and decrypt physical dumps of Android OS devices based on the Qualcomm Snapdragon 845/710 chipset and running Android OS 7 and higher.
Oxygen Forensic® Extractor. Added the ability to extract hardware keys and decrypt physical dumps of Android OS devices based on the MT6771 and МТ6873 chipsets.
Oxygen Forensic® Extractor. Added the ability to extract app data via Android Agent from devices running Android OS 14.
Oxygen Forensic® Extractor. Added additional filters for Telegram data extraction via Android Agent.
Oxygen Forensic® Extractor. Added the ability to extract the full file system and keychain via checkm8 from iPhone 6S and iPhone 7 with iOS 15.8.1.
Oxygen Forensic® Extractor. Added the ability to extract the full file system and keychain via iOS Agent from Apple iOS devices based on the A12-A16 chipsets with iOS 16.5.1.
Oxygen Forensic® Extractor. Updated the ability to decrypt Signal backups extracted via Android Agent.
Oxygen Forensic® Extractor. Updated the ability to extract Google Chrome bookmarks and tabs via Android Agent.
Oxygen Forensic® Extractor. Interface improvements for Web Browser data extraction via Android Agent.
Oxygen Forensic® Extractor. Improved the stability of the extraction method via checkm8 vulnerability.
Oxygen Forensic® Extractor. The number of media files, calendar events and contacts is now shown before public data extraction via iOS Agent.
Oxygen Forensic® Cloud Extractor. Added data extraction from Reddit.
Oxygen Forensic® Cloud Extractor. Updated the ability to authorize in Telegram.
Oxygen Forensic® KeyScout. Added the progress bar for saving files and the ability to stop the saving process.
Oxygen Forensic® KeyScout. Added .torrent extension on the Files tab in the Search Profiles.
Oxygen Forensic® KeyScout. Added the ability to extract μTorrent data from Windows.
Oxygen Forensic® KeyScout. Added the ability to extract information from .torrent files from Windows, macOS and GNU/Linux.
Oxygen Forensic® KeyScout. Added the ability to extract Apple FaceTime data from macOS.
Oxygen Forensic® KeyScout. Added the ability to extract OpenOffice data from Windows and GNU/Linux.
Oxygen Forensic® KeyScout. Added the ability to extract FastStone Image Viewer data from Windows.
Oxygen Forensic® KeyScout. Added the ability to extract Microsoft Outlook data from macOS.
Oxygen Forensic® KeyScout. Added support for the new encryption algorithm of Viber on Windows.
Oxygen Forensic® KeyScout. Added the ability to extract Exodus cryptocurrency addresses from Windows, macOS and GNU/Linux.
Oxygen Forensic® KeyScout. Added the ability to extract information about the packages installed with the help of Snap on GNU/Linux.
Oxygen Forensic® KeyScout. Updated the ability to extract Facebook Messenger data from Windows and macOS.
Oxygen Forensic® KeyScout. Updated the ability to extract Microsoft Outlook data from Windows.
Oxygen Forensic® KeyScout. Improved the Files tab interface.
Oxygen Forensic® KeyScout. Improved support for HFS and HFS+ file systems.
Oxygen Forensic® KeyScout. Improved work with temporary files.
Oxygen Forensic® KeyScout. Improved data recovery from NTFS file systems.
Import. Added the ability to decrypt physical images of Android devices based on the Qualcomm Snapdragon 845/710 chipset.
Import. Added the ability to decrypt physical images of Android devices based on the MT6771 and МТ6873 chipsets.
Import. Added the ability to decrypt physical images of Android devices based on the UNISOC chipsets and having TEE Trusty.
Import. Updated support for Facebook account copy.
General. The translation tool now supports Turkish, Farsi, Polish, Ukrainian and Belorussian languages.
General. Added the File information panel to the main Extraction window.
Export. Added data export to PST files.
Export. Added the ability to group files by extension.
Export. Improvements for the Search section reports.
Applications. Added data parsing from over 900 new app versions from Apple iOS and Android devices. The total number of supported versions exceeds 45200.
Applications. Multimedia. Added data parsing from CapCut (10.6.0) from Android devices and CapCut (10.2.1) from Apple iOS devices.
Applications. Multimedia. Added data parsing from Files (16.2) from Apple iOS devices.
Applications. Organizer. Added data parsing from Alarms (16.2) from Apple iOS devices.
Applications. Multimedia. Added data parsing from Weather (16.2) from Apple iOS devices.
Applications. OS Artifacts. Added parsing of TCC access permissions from Apple iOS devices.
Applications. Messenger. Updated data parsing from Telegram (10.6.2) from Android devices and Telegram (10.5.2) from Apple iOS devices.
Applications. Messenger. Updated data parsing from Discord (206.16) from Android devices.
Applications. Messenger. Updated data parsing from Apple messages (16.2) from Apple iOS devices.
Applications. Messenger. Updated data parsing from Event Log (16.2) from Apple iOS devices.
Applications. Messenger. Updated data parsing from Viber (21.8.1.0) from Android devices.
Applications. Business. Updated data parsing from Outlook (4.2240.4) from Android devices and Outlook (4.2402.0) from Apple iOS devices. .
Applications. Business. Updated data parsing from Apple mail (16.2) from Apple iOS devices.
Applications, Navigation. Updated data parsing from Apple maps (16.2) from Apple iOS devices.
Applications. Organizer. Updated data parsing from Apple calendar (16.2) from Apple iOS devices.
Applications. Organizer. Updated data parsing from Apple Voice memos (16.2) from Apple iOS devices.
Applications. Organizer. Updated parsing of Phonebook from Apple iOS devices.
Applications. Web Browsers. Updated data parsing from Safari (16.2) from Apple iOS devices.

 

[device-forum.com]

Oxygen Forensic Detective 16.1.1.147 (March 2024):

Oxygen Forensic® KeyScout. Improved analysis of Volume Shadow Copy snapshots during live data extraction of Windows-based computers.
Oxygen Forensic® KeyScout. Improved analysis of corrupted SQLite files.
Oxygen Forensic® KeyScout. Improved parsing of ESE databases from Windows.
Oxygen Forensic® KeyScout. Improved parsing of MFT records during recovery of deleted NTFS files.
Oxygen Forensic® KeyScout. Improved parsing of NTFS artifacts from Windows.
Oxygen Forensic® KeyScout. Improved parsing of Discord from Windows, macOS, and Linux.
Oxygen Forensic® KeyScout. Improved parsing of Viber from Windows, macOS, and Linux.
Oxygen Forensic® KeyScout. Improved token extraction from Viber from Windows.
Oxygen Forensic® KeyScout. Accelerated parsing of Viber from Windows.
Oxygen Forensic® KeyScout. Updated instruction on WhatsApp decryption on Windows.
Search. Improved search when the Case Sensitive option is disabled.
Applications. Messengers. Improved parsing of Apple Messages from iTunes backups.
Applications. Messengers. Improved support for empty Apple Messages from Apple iOS devices.
Applications. Messengers. Improved parsing of Telegram from Android devices.
Applications. Messengers. Improved parsing of Telegram X from Android devices.
Applications. Messengers. Improved parsing of calls from Apple iOS devices.
Applications. Multimedia. Improved parsing of Voice Memos from Apple iOS devices.

 

[device-forum.com]

Oxygen Forensic Detective 16.2 (March 2024):

Oxygen Forensic® Device Extractor. Added the ability to extract hardware keys and decrypt physical dumps of Samsung devices based on the UNISOC SC9863A chipset and running Android OS 10-13.
Oxygen Forensic® Device Extractor. Added the ability to extract hardware keys and decrypt physical dumps of Samsung devices based on Qualcomm Snapdragon SDM845 chipsets and Android OS 7 or higher.
Oxygen Forensic® Device Extractor. Added the ability to extract hardware keys and decrypt physical dumps of Android OS devices based on the MT6781 and MT6877 chipsets and running Android OS 10 and higher.
Oxygen Forensic® Device Extractor. Added the ability to extract the full file system from unlocked Android devices that have the arm64-v8a architecture, Linux Kernel 5.4 and SPL no later than October 2022.
Oxygen Forensic® Device Extractor. Added the ability to extract the second authorized WhatsApp and WhatsApp Business accounts via Android Agent.
Oxygen Forensic® Device Extractor. Added the ability to extract additional data from Opera Browser via Android Agent.
Oxygen Forensic® Device Extractor. Added the ability to extract the full file system and keychain via checkm8 from iPad with iOS 16.
Oxygen Forensic® Device Extractor. Added the ability to extract the full file system and keychain via checkm8 from iPhone 6S and iPhone 7 with iOS 15.8.2.
Oxygen Forensic® Device Extractor. Added the ability to extract the full file system and keychain via iOS Agent from Apple iOS devices based on the M1 chipset with iOS 16.5.1 and M2 chipset with iOS 16.5.
Oxygen Forensic® Device Extractor. Accelerated data extraction from UNISOC-based Android devices.
Oxygen Forensic® Device Extractor. Updated the ability to decrypt Signal backups extracted via Android Agent.
Oxygen Forensic® Cloud Extractor. Added data extraction from Steam.
Oxygen Forensic® Cloud Extractor. Added the ability to extract additional data from Reddit.
Oxygen Forensic® Cloud Extractor. Updated the iCloud Agent that is used for iCloud data extraction.
Oxygen Forensic® Cloud Extractor. Updated the ability to authorize in OnlyFans.
Oxygen Forensic® KeyDiver. Added the ability to find passcodes to encrypted iTunes backups.
Oxygen Forensic® KeyDiver. Added the ability to find passcodes to encrypted 7-ZIP.
Oxygen Forensic® KeyScout. Added the ability to search by Microsoft Office signatures.
Oxygen Forensic® KeyScout. Added the ability to analyze what files were recently open in Paint and WordPad on Windows.
Oxygen Forensic® KeyScout. Added the ability to extract Steam data from Windows, macOS and GNU/Linux.
Oxygen Forensic® KeyScout. Added the ability to extract BitTorrent data from Windows.
Oxygen Forensic® KeyScout. Added the ability to extract 1Password data from Windows, macOS and GNU/Linux.
Oxygen Forensic® KeyScout. Added the ability to extract Box Drive data from Windows and macOS.
Oxygen Forensic® KeyScout. Added the ability to extract Box Tools data from Windows and macOS.
Oxygen Forensic® KeyScout. Added the ability to extract a web version of Box from Windows, macOS and GNU/Linux.
Oxygen Forensic® KeyScout. Improved support for AD1 format.
Oxygen Forensic® KeyScout. Extended support for the Event log artifact from Windows.
Oxygen Forensic® KeyScout. Updated the ability to extract WhatsApp data from macOS.
Import. Added the ability to import and parse Apple Warrant Returns.
Import. Added the ability to separately import Apple Keychain.
Import. Added the ability to import VDI images of Android extractions.
Import. Added decryption of Android KeyStore keys of UNISOC-based devices.
Import. Added decryption of Android KeyStore keys of MTK-based devices.
Import. Improved support for TEE Samsung Teegris.
Import. Improved support for logical extractions of MD-Next.
Import. Updated support for UFDR reports.
Import. Updated the ability to import and parse Facebook account copy.
Export. Added the ability to run preliminary export.
Export. Added to split RSMFreports by size.
Export. Added indexes for files with the same name.
Export. Updated export of chats.
Applications. Added new features for the Chats View.
Applications. Added data parsing from over 400 new app versions from Apple iOS and Android devices. The total number of supported versions exceeds 45600.
Applications. Messengers. Updated data parsing from Viber (21.8.0) from Apple iOS devices.
Applications. Messengers. Updated data parsing from Discord (212.0) from Apple iOS devices.
Applications. Messengers. Updated data parsing from BiP (3.94.104) from Android devices and BiP (3.94.96) from Apple iOS devices.
Applications. Social Networks. Updated data parsing from Instagram (319.0.0.43.110) from Android devices and Instagram (308.0) from Apple iOS devices.

 

[device-forum.com]

Oxygen Forensic Detective 16.2.0.200 (April 2024):

Oxygen Forensic® Device Extractor. Updated the ability to extract WhatsApp and WhatsApp Business data via Android Agent.
General. Improved keychain parsing from checkm8 and iOS Agent extractions.
Import. Improved import of UFED backups and images.

 

[device-forum.com]

Oxygen Forensic Detective 16.3.0.135 (June 2024):

Malware. Added the ability to scan extracted files for malware.
Oxygen Forensic® Device Extractor. Added the ability to extract hardware keys and decrypt physical dumps of Android devices based on the SDM665, SDM675, SDM730, and SDM855 chipsets.
Oxygen Forensic® Device Extractor. Added the ability to extract hardware keys and decrypt physical dumps of MTK-based Omix and Reeder devices.
Oxygen Forensic® Device Extractor. Added the ability to extract hardware keys and decrypt physical dumps of UNISOC-based Omix and Reeder devices.
Oxygen Forensic® Device Extractor. Added the ability to extract hardware keys and decrypt physical dumps of devices based on the MT6750, and MT6855 chipsets and running Android 10 and higher.
Oxygen Forensic® Device Extractor. Added the ability to save extracted memory card dumps to E01 format.
Oxygen Forensic® Device Extractor. Added the ability to extract the full file system and keychain via iOS Agent from iPhone 8, iPhone 8 Plus, iPhone X, iPad 5th gen, iPad Pro 12.9-in 1st gen, iPad Pro 9.7-in, iPad 6th gen, iPad 7th gen, iPad Pro 12.9 2nd gen and iPad Pro 10.5 running iOS up to 16.6.1.
Oxygen Forensic® Device Extractor. Added the ability to extract the full file system and keychain via iOS Agent from iPhone 6s, iPhone 6s Plus, iPhone SE, iPhone 7, iPhone 7 Plus, iPad mini 4 and iPad Air 2 running iOS up to 15.8.2.
Oxygen Forensic® Device Extractor. Added the ability to skip the necessity of switching a device to the Recovery mode during checkm8 extraction.
Oxygen Forensic® Device Extractor. Added the instructions on how to switch iPhone devices to the DFU mode using test points during checkm8 extraction.
Oxygen Forensic® Device Extractor. Added the ability to extract communities from WhatsApp and WhatsApp Business via Android Agent.
Oxygen Forensic® Device Extractor. Updated the ability to extract WhatsApp and WhatsApp Business data via Android Agent.
Oxygen Forensic® Device Extractor. Updated the ability to extract Zoom contacts and chats via Android Agent.
Oxygen Forensic® Device Extractor. Updated the ability to extract Telegram contacts via Android Agent.
Oxygen Forensic® Device Extractor. Improved the ability to make screenshots via Android Agent.
Oxygen Forensic® Device Extractor. Improved the ability to extract the full file system and keychain without signing iOS Agent from iPhone Xr - iPhone 13 devices running iOS 15.0 - 15.4.1.
Oxygen Forensic® Device Extractor. Improved the ability to extract the full file system and keychain via checkm8 vulnerability with additional access rights.
Oxygen Forensic® Device Extractor. General interface improvements.
Oxygen Forensic® Cloud Extractor. Added the ability to extract polls using the WhatsApp QR Multi-Device service.
Oxygen Forensic® Cloud Extractor. Added the ability to extract private and group chats from Steam.
Oxygen Forensic® Cloud Extractor. Added the ability to authorize in Steam via QR code.
Oxygen Forensic® Cloud Extractor. Added the new authorization algorithm in Google services.
Oxygen Forensic® Cloud Extractor. Updated the ability to authorize in Steam.
Oxygen Forensic® Cloud Extractor. Updated the ability to authorize in OnlyFans.
Oxygen Forensic® Cloud Extractor. Updated the ability to authorize in My Parrot Cloud.
Oxygen Forensic® Cloud Extractor. Updated the parsing of Telegram cloud chats to ensure accurate visualization in the Chats section.
Oxygen Forensic® KeyScout. Added the ability to search plaintext files by file signature.
Oxygen Forensic® KeyScout. Added new filters for found applications.
Oxygen Forensic® KeyScout. Added the ability to generate bug reports on Windows.
Oxygen Forensic® KeyScout. Added the ability to extract the list of installed applications from NTUSER.dat file from Windows.
Oxygen Forensic® KeyScout. Added the ability to extract the information about packages installed by Pacman on GNU/Linux.
Oxygen Forensic® KeyScout. Added the ability to extract supported applications from the Arch Linux distribution.
Oxygen Forensic® KeyScout. Added the ability to extract Transmission torrent client data from Windows, macOS and GNU/Linux.
Oxygen Forensic® KeyScout. Added the ability to extract passwords from 1Password from Windows, macOS, and GNU/Linux.
Oxygen Forensic® KeyScout. Added the ability to extract passwords from DuckDuckGo browser from macOS.
Oxygen Forensic® KeyScout. Added the ability to extract DuckDuckGo browser data from Windows and macOS.
Oxygen Forensic® KeyScout. Added the ability to extract Microsoft Defender data from Windows.
Oxygen Forensic® KeyScout. Added the ability to extract Microsoft Photos data from Windows.
Oxygen Forensic® KeyScout. Added the ability to extract Microsoft Sticky Notes data from Windows.
Oxygen Forensic® KeyScout. Added the ability to extract Apple Weather data from macOS.
Oxygen Forensic® KeyScout. Added the ability to extract Spark installed from the App Store from macOS.
Oxygen Forensic® KeyScout. Added the ability to extract NordVPN installed from the App Store from macOS.
Oxygen Forensic® KeyScout. Added the ability to extract Facebook Messenger installed from the App Store from macOS.
Oxygen Forensic® KeyScout. Added the ability to extract additional data from AnyDesk from Windows, macOS and GNU/Linux.
Oxygen Forensic® KeyScout. Added the ability to extract additional data from Opera from Windows, macOS and GNU/Linux.
Oxygen Forensic® KeyScout. Updated the ability to extract Facebook Messenger from Windows.
Oxygen Forensic® KeyScout. Updated the ability to extract Mail and Calendar from Windows.
Facial Categorization. Added the ability to select specific files for facial categorization.
Translation. Added support for Romanian, Estonian, Lithuanian, Latvian, Norwegian, Urdu, Nepali and Hebrew languages.
Import. Added the ability to import and parse X (Twitter) archives.
Import. Added the ability to import and parse ULog logs of PX4-based drones.
Import. Added the ability to import physical dumps of Android devices based on the SDM665, SDM675, SDM730, SDM855 chipsets.
Import. Added the ability to import physical dumps of MTK-based devices having TEE MITEE.
Import. Updated the ability to import physical dumps of MTK-based devices having ТЕЕ T6.
Import. Added the ability to parse the additional device information from MD-NEXT extractions.
Import. Updated support for Instagram account copy.
Import. Improved support for UFDR files.
Export. Added the ability to split XLS and XLSX reports by size or number of entries.
Export. Added the ability to group the Faces section data by various criteria.
Applications. Added data parsing from over 600 new app versions from Apple iOS and Android devices. The total number of supported versions exceeds 46200.
Applications. OS artifacts. Added parsing of SD card files (from external.db) from Android devices.
Applications. OS artifacts. Added parsing of Keyboard activity from Apple iOS devices.
Applications. OS artifacts. Added parsing of Control Center activity from Apple iOS devices.
Applications. Messengers. Added data parsing from Element (1.11.6) from Apple iOS devices.
Applications. Messengers. Updated data parsing from Signal (6.37) from Apple iOS devices.
Applications. Messengers. Updated data parsing from WeChat (8.0.48) from Apple iOS devices.
Applications. Social Networks. Updated data parsing from X (Twitter) (10.31.0-release.0) from Android devices and X (Twitter) (10.31.1) from Apple iOS devices.
Applications. Social Networks. Updated data parsing from Facebook (455.0.0.44.88) from Android devices and Facebook (461.0.3) from Apple iOS devices.
Applications. Social Networks. Updated data parsing from BeReal (2.7.0) from Apple iOS devices.
Applications. Web Browsers. Updated data parsing from Google (15.14.36.28.arm64) from Android devices.
Applications. Organizer. Updated data parsing from Huawei Notes from Android devices.

 

[device-forum.com]

Oxygen Forensic Detective 16.3.0.200 (June 2024):

Applications. Updated parsing of Telegram chats from Android devices.
Oxygen Forensic® Device Extractor. Fixed the issue with full file system and keychain extraction via iOS Agent from iPhone 8, iPhone 8 Plus, and iPhone X running iOS version up to 16.6.1

 

[device-forum.com]

Oxygen Forensic Detective 16.3.1 (July 2024):

Oxygen Forensic® Device Extractor. Added the ability to extract hardware keys and decrypt physical dumps of devices based on the MT6767, MT6797 and MT6891 chipsets and running Android 10 and higher.
Oxygen Forensic® Device Extractor. Added the ability to extract the OS version and the last activity time of the devices authorized in WhatsApp and WhatsApp Business accounts.
Oxygen Forensic® Device Extractor. Added the ability to extract avatars of group chats and chats within communities via Android Agent from WhatsApp and WhatsApp Business.
Oxygen Forensic® Device Extractor. Added the ability to extract the full file system and keychain via iOS Agent from iOS devices based on the A12 - A14, M1 chipsets and having iOS 16.6 - 16.6.1, based on the A15 - A16, M2 chipsets and having iOS 16.5.1 - 16.6.1 and based on the A12X and A12Z chipsets and having iOS 15.2 - 16.6.1.
Oxygen Forensic® Device Extractor. Qualcomm EDL: improved support for Xiaomi Redmi Note 8T (SDM665).
Oxygen Forensic® Cloud Extractor. Added the ability to extract “Share live location” data from WhatsApp Cloud.
Oxygen Forensic® Cloud Extractor. Updated the ability to authorize in OnlyFans via Google.
Oxygen Forensic® Cloud Extractor. Updated the ability to authorize in Viber Cloud.
Oxygen Forensic® Cloud Extractor. Updated the ability to authorize in Evernote via login/password and Google.
Oxygen Forensic® Cloud Extractor. Updated the parsing of Grindr iCloud Backup, Grindr Google Backup, IMO, TamTam, Viber Google Backup, Viber iCloud Backup, Viber Cloud, and WhatsApp QR Multi-device cloud chats to ensure accurate visualization in the Chats section.
Oxygen Forensic® KeyDiver. When an encrypted iTunes backup is imported into Oxygen Forensic® Detective, Oxygen Forensic® KeyDiver is automatically opened for a passcode bruteforce.
Oxygen Forensic® KeyScout. Added the information about found passcodes to the Encrypted data tab.
Oxygen Forensic® KeyScout. Added the ability to cancel memory dump creation on Windows.
Oxygen Forensic® KeyScout. Added the ability to collect Apple Music data from Windows and macOS.
Oxygen Forensic® KeyScout. Added the ability to collect KeePass data from Windows and GNU/Linux.
Oxygen Forensic® KeyScout. Added the ability to collect BlueStacks emulator data from Windows.
Oxygen Forensic® KeyScout. Added support for a new encryption type of Viber from GNU/Linux.
Oxygen Forensic® KeyScout. Updated the ability to extract the information about folders viewed by the user on Windows.
Oxygen Forensic® KeyScout. Improved parsing of EXT4 partitions.
Malware. Added the ability to download daily antivirus updates from the customer area.
Import. Added the ability to import iCloud Backup included with Apple Warrant Returns.
Import. Added the ability to import Snapchat My Data backups in HTML format.
Import. Improved support for MTK-based devices with TEE Microtrust.
Import. Improved support for UNISOC-based devices with TEE Trusty.
Import. Improved support for MTK-based devices with TEE Kinibi.
Files. Added the ability to save selected video frames to PNG format.
Export. Added the ability to split RSMF reports by number of entries.
Export. Added the ability to sort data when exporting it to Load file format from Desktop.
Export. Added the ability to set a name for exported attachments and files while exporting to Load file format.
Applications. Added data parsing from over 700 new app versions from Apple iOS and Android devices. The total number of supported versions exceeds 46900.
Applications. OS artifacts. Added parsing of Samsung media from Android devices.
Applications. OS artifacts. Added parsing of Installed applications from Android devices.
Applications. Messengers. Added data parsing from Nicegram (1.26.0) from Android devices and Nicegram (1.6.2) from Apple iOS devices.
Applications. Messengers. Updated data parsing from Skype (8.108) from Apple iOS devices.
Applications. Business. Updated data parsing from Mega (12.0(241080022)(af65996f9b) from Android devices and Mega (12.0) from Apple iOS devices.

 

[device-forum.com]

Oxygen Forensic Detective 17.0 (September 2024):

Speech Recognition. Added the ability to recognize and transcribe speech from audio and video files.
Oxygen Forensic® Device Extractor. Added the ability to extract user application data and internal memory data from unlocked Android devices running Android OS 9-14 that have the SPL no later than June 1, 2024.
Oxygen Forensic® Device Extractor. Added the ability to extract data from MTK-based devices with the latest TEE Samsung Teegris.
Oxygen Forensic® Device Extractor. Added the ability to extract the full file system and keychain via checkm8 from iPad mini 4 running iOS 14.8.1 - 15.8.3, iPad 5th gen running iOS 16.4 - 16.7.10 and iPad 6th gen, iPad 7th gen running iOS 16.4 - 16.7.2.
Oxygen Forensic® Device Extractor. Added the ability to extract the full file system and keychain via iOS Agent from iPhone devices based on the A9-A13 chipsets, and iPad devices based on the A8, A8X - A12, A12X, A12Z chipsets running iOS 13.0 - 13.7.
Oxygen Forensic® Device Extractor. Added the ability to extract the full file system and keychain via iOS Agent from iPhone 6s, iPhone 6s Plus, iPhone SE, iPhone 7, iPhone 7 Plus, iPad mini 4 and iPad Air 2 running iOS up to 15.8.3.
Oxygen Forensic® Device Extractor. Accelerated data extraction from iOS devices via iOS Agent, iOS SSH and checkm8 vulnerability.
Oxygen Forensic® Device Extractor. Updated the ability to extract Discord data via Android Agent.
Oxygen Forensic® Cloud Extractor. Added the ability to extract data about video calls from WhatsApp Cloud.
Oxygen Forensic® Cloud Extractor. Updated the ability to extract OneDrive data.
Oxygen Forensic® Cloud Extractor. Updated the ability to authorize in Samsung Health and extract Samsung Health data.
Oxygen Forensic® Cloud Extractor. Significantly improved support for the WhatsApp QR Multi-Device service.
Oxygen Forensic® Cloud Extractor. Updated the parsing of Box file paths.
Oxygen Forensic® KeyDiver. Added the ability to find passcodes to encrypted Android backups.
Oxygen Forensic® KeyDiver. Added the ability to find passcodes to encrypted RAR archives.
Oxygen Forensic® KeyDiver. Added the ability to find passcodes to encrypted MS Office files (Word, Excel, PowerPoint).
Oxygen Forensic® KeyDiver. When an encrypted Android backup is imported into Oxygen Forensic® Detective, Oxygen Forensic® KeyDiver is automatically opened for a passcode bruteforce.
Oxygen Forensic® KeyScout. Added the ability to save an extracted disk image or disk partition to E01 or RAW formats.
Oxygen Forensic® KeyScout. Added the ability to extract passwords from DuckDuckGo browser from Windows.
Oxygen Forensic® KeyScout. Added the ability to extract passwords from KeePass from Windows and GNU/Linux.
Oxygen Forensic® KeyScout. Added the ability to extract Bitwarden data from Windows, macOS and GNU/Linux.
Oxygen Forensic® KeyScout. Added the ability to extract qBittorrent data from Windows, macOS and GNU/Linux.
Oxygen Forensic® KeyScout. Added the ability to extract data from Bitwarden Password Manager web extension from Windows, macOS and GNU/Linux.
Oxygen Forensic® KeyScout. Added support for macOS 15 Sequoia (beta).
Oxygen Forensic® KeyScout. Updated the ability to extract Microsoft Teams data from Windows and macOS.
Translation. Added support for the Korean, Hungarian, Slovenian, Croatian, Telugu and Georgian languages.
Malware. Added the ability to download weekly offline antivirus database updates from the customer area.
Import. Added the ability to decrypt physical images of MTK-based devices running Android 14.
Import. Added the ability to import Huawei backups created with Huawei HiSuite ver. 13.0 and 14.0.
Import. Added the ability to import data extracted by Oxygen Forensic® KeyScout directly into Oxygen Forensic® Detective.
Import. Added the ability to import and parse vCard files.
Import. Improved support for MTK-based devices with TEE Samsung Teegris.
Timeline. Added the ability to filter by device owner’s geo-coordinates and geo-coordinates obtained from third-party sources.
Export. Added the ability to export messages to one file in PDF/PST formats from the Messages section and to PST format directly from applications.
Export. Now Speech and Text recognition results are included in the report.
Export. Added the ability to select the categories to be exported from a contact card.
Export. Added the ability to include the Name and File path fields for Identified faces/Similar images when exporting data from the Faces section.
Export. Added the ability to select the CloudNine/DISCO export templates while exporting to Load file format and the ability to export data to Load file format from the main screen.
Applications. Added data parsing from over 1000 new app versions from Apple iOS and Android devices. The total number of supported versions exceeds 48000.
Applications. Organizer. Updated data parsing from Google Keep (2.2024.29202) from Apple iOS devices and Google Keep (5.24.312.02.90) from Android devices.
Applications. Messengers. Updated data parsing from WhatsApp (2.24.16.76) from Android devices and from WhatsApp (24.16.78) from Apple iOS devices.
Applications. Messengers. Updated data parsing from Telegram (11.0.0) from Android devices.
Applications. Social Networks. Updated data parsing from Instagram (340.0.10) from Apple iOS devices.
Applications. Social Networks. Updated data parsing from Snapchat (12.96.0.42) from Apple iOS devices and Snapchat (12.96.0.42) from Android devices.
Applications. Social Networks. Updated data parsing from VK (8.88) from Apple iOS devices and VK (8.63) from Android devices.
Applications. Social Networks. Updated data parsing from TikTok (35.6.0) from Apple iOS devices.

 

[device-forum.com]

Oxygen Forensic Detective 17.0.0.282 (October 2024):

Oxygen Forensic® Device Extractor. Added the ability to extract iPhone 16 and Apple iOS 18 devices via iTunes backup procedure.
Oxygen Forensic® Device Extractor. Updated the ability to extract WhatsApp and WhatsApp Business data via Android Agent.
Oxygen Forensic® Device Extractor. Fixed the issue when files with characters forbidden on Windows OS were not extracted to a .TAR archive from the /sdcard directory.
Oxygen Forensic® KeyScout. Added the ability to automatically delete previously downloaded debugging symbols after memory analysis is complete.
Oxygen Forensic® KeyScout. Added support for Windows 11 24H2.
Oxygen Forensic® KeyScout. Updated the ability to decrypt messages extracted from WhatsApp Web used in Google Chrome, Microsoft Edge, Opera, Brave, Vivaldi from Windows, macOS and Linux.
Speech Recognition. Added a warning message to inform users about possible issues of using GPU for speech recognition.
Applications. Added parsing of encrypted msgstore-increment*.db.crypt14 files from WhatsApp backup from Android devices.
General. Fixed the issue that occurred when saving data to the .ofbx backup in the Turkish language of the program interface.