Oxygen Forensic Detective обновления

  • Автор темы Автор темы UNLOCK.ws
  • Дата начала Дата начала
Oxygen Forensic Detective 15.1

Добавлена возможность обхода блокировки экрана и расшифровки данных с Android-устройств с TEE Trusty, File-Based-Encryption (FBE)
и на базе следующих чипсетов MTK: MT6765, MT6580.
Добавлена возможность обхода блокировки экрана и расшифровки данных с Android-устройств на базе MTK с TEE Kinibi и полнодисковым шифрованием (FDE).
 
Oxygen Forensic Detective 15.3

Экстрактор Oxygen Forensic®. Добавлена возможность извлечения аппаратных ключей и расшифровки данных с устройств Samsung на базе чипсета Mediatek Helio G80 и имеющих TEE TEEGRIS.
Экстрактор Oxygen Forensic®. Добавлена возможность извлечения аппаратных ключей и расшифровки данных с устройств Huawei на базе чипсета Mediatek MT6765 и под управлением ОС Android 10.
Экстрактор Oxygen Forensic®. Добавлена возможность извлечения аппаратных ключей и расшифровки данных с устройств Motorola на базе чипсета MediaTek MT6765, имеющих FBE и работающих под управлением ОС Android 10-12.
Экстрактор Oxygen Forensic®. Добавлена возможность извлечения аппаратных ключей и расшифровки данных с устройств Huawei на базе чипсета Qualcomm SDM450.
Экстрактор Oxygen Forensic®. Добавлена возможность извлечения полной файловой системы и цепочки ключей через iOS Agent с устройств iOS под управлением iOS версий 15.0 - 15.4.1.
Экстрактор Oxygen Forensic®. Добавлена возможность извлечения полной файловой системы и связки ключей через checkm8 с устройств Apple iOS на базе чипсета A10 и под управлением iOS 14 и 15 без отключения блокировки экрана.
Экстрактор Oxygen Forensic®. Добавлена возможность извлечения полной файловой системы и связки ключей через checkm8 с устройств Apple iOS на базе чипсетов A7-A10 и работающих под управлением iOS версий 12.5.7 и 15.7.3.
Экстрактор Oxygen Forensic®. Добавлена возможность извлекать дополнительную информацию из браузера Firefox через Android Agent: коллекции, сохраненные карты, логины и пароли и адреса.
Экстрактор Oxygen Forensic®. Добавлена возможность извлекать групповые чаты Telegram с включенными темами через Android Agent.
Экстрактор Oxygen Forensic®. Добавлена темная тема.
Экстрактор облаков Oxygen Forensic®. Добавлена возможность извлекать данные из LastPass через логин и пароль или токен.
Экстрактор облаков Oxygen Forensic®. Обновлена возможность авторизации в сервисах Huawei.
Экстрактор облаков Oxygen Forensic®. Обновлена возможность авторизации в MiFit.
Экстрактор облаков Oxygen Forensic®. Обновлено извлечение данных из Google Chrome.
Экстрактор облаков Oxygen Forensic®. Обновлено извлечение данных из Google Home.
Экстрактор облаков Oxygen Forensic®. Обновлено извлечение данных из Google My Activity.
Экстрактор облаков Oxygen Forensic®. Обновлено извлечение точек Wi-Fi из облачных данных Android.
Oxygen Forensic® KeyScout. Добавлен расширенный анализ оперативной памяти, который теперь включает страницы памяти из файлов подкачки.
Oxygen Forensic® KeyScout. Добавлена расширенная информация о ходе поиска данных.
Oxygen Forensic® KeyScout. Добавлена возможность извлекать данные фоновой интеллектуальной службы передачи (BITS) в Windows.
Oxygen Forensic® KeyScout. Добавлена возможность сбора диагностических данных из Windows.
Oxygen Forensic® KeyScout. Добавлена возможность собирать информацию о запущенных процессах в macOS и Linux во время извлечения системы в реальном времени.
Oxygen Forensic® KeyScout. Добавлена возможность собирать кэш ARP в macOS и Linux во время извлечения системы в реальном времени.
Oxygen Forensic® KeyScout. Добавлена возможность извлекать элементы Dock из macOS.
Oxygen Forensic® KeyScout. Добавлена возможность извлечения истории команд, введенных в терминале на Linux.
Oxygen Forensic® KeyScout. Добавлена возможность извлечения истории использования apt в Linux.
Oxygen Forensic® KeyScout. Добавлена возможность извлечения истории использования Vim в Linux.
Oxygen Forensic® KeyScout. Добавлена возможность извлекать данные Brave из Windows, macOS и Linux.
Oxygen Forensic® KeyScout. Добавлена возможность извлекать зашифрованные сообщения из WhatsApp Web, используемого в браузерах Google Chrome, Microsoft Edge и Opera, из Windows, macOS и Linux.
Oxygen Forensic® KeyScout. Обновлены профили поиска.
Oxygen Forensic® KeyScout. Обновлена возможность извлечения информации о получателях электронной почты из Microsoft Exchange Server в Windows.
Oxygen Forensic® KeyScout. Обновлена возможность извлечения данных Microsoft Teams в Windows.
Oxygen Forensic® KeyScout. Обновлена возможность извлечения данных Viber в Windows, macOS и Linux.
Oxygen Forensic® KeyScout. Обновлена возможность извлечения данных Apple Messages в macOS.
Импорт. Добавлена возможность импортировать и анализировать архивы Tinder.
Импорт. Добавлена возможность импорта и расшифровки физических дампов устройств Huawei на базе чипсета Mediatek MT6765.
Импорт. Добавлена возможность импорта и расшифровки физических дампов устройств Huawei на базе чипсета Qualcomm Snapdragon 450 (SDM450).
Импорт. Добавлена возможность импорта и расшифровки физических дампов Samsung с TEE TEEGRIS.
Импорт. Значительно ускорен импорт архивов DAR.
Экспорт. Добавлена возможность экспорта сообщений электронной почты в формат RSMF.
Экспорт. Добавлена возможность экспорта аватаров контактов в формат RSMF.
Экспорт. Добавлена возможность исключать дубликаты файлов на основе хеш-значений.
Экспорт. Добавлена возможность конвертировать экспортированные файлы в следующие форматы JPEG: HEIC, KTX, RAW, PSD.
Общий. Обновлена возможность расшифровки резервных копий Signal с устройств Android, включая резервные копии, извлеченные с помощью агента Android.
Общий. Добавлена возможность добавлять ссылки на другие поля и категории в Приложениях.
Приложения. Добавлен парсинг данных из более чем 500 новых версий приложений с устройств Apple iOS и Android. Общее количество поддерживаемых версий превышает 35200.
Приложения. Артефакты ОС. Добавлен парсинг данных с устройств Apple iOS из следующей папки:/private/var/mobile/Library/Biome/streams/public.
Приложения. Мессенджеры. Добавлен парсинг данных из BOTIM (2.15.1) с устройств Android и BOTIM (2.12.0) с устройств Apple iOS.
Приложения. Мессенджеры. Добавлен парсинг данных из GB WhatsApp (17.10) с устройств Android.
Приложения. Мессенджеры. Добавлен парсинг данных из OB WhatsApp (38) с устройств Android.
Приложения. Мессенджеры. Добавлен парсинг данных из FM WhatsApp (9.45) с устройств Android.
Приложения. Социальные сети. Добавлен парсинг данных из BeReal (0.27.0) с устройств Apple iOS.
Приложения. Социальные сети. Добавлен парсинг данных из Moj (23.1.0) с устройств Apple iOS.
Приложения. Социальные сети. Добавлен парсинг данных из Tiki (3.16.0) с устройств Apple iOS.
Приложения. Веб-браузеры. Добавлен парсинг данных из Microsoft Bing (23.8.40122730) с Android-устройств.
Приложения. Мессенджеры. Обновлен парсинг данных из ICQ (22.10.2(824797)) с устройств Android и ICQ (22.10.0) с устройств Apple iOS.
Приложения. Мессенджеры. Обновлен парсинг данных из iMe Messenger (9.0.2) с устройств Android и iMe Messenger (9.0.2) с устройств Apple iOS.
Приложения. Мессенджеры. Обновлен парсинг данных из Viber (19.3.1.0) с устройств Android и Viber (19.3.1) с устройств Apple iOS.
Приложения. Мессенджеры. Обновлен парсинг данных из Skype (8.93.0.404) с устройств Android и Skype (8.93.1) с устройств Apple iOS.
Приложения. Мессенджеры. Обновлен анализ данных из Apple Messages (16.0.2) с устройств Apple iOS.
Приложения. Мессенджеры. Обновлен парсинг данных из WhatsApp (22.23.77) с устройств Apple iOS.
Приложения. Мессенджеры. Обновлен парсинг данных из Discord (162.0) с устройств Apple iOS.
Приложения. Социальные сети. Обновлен парсинг данных из SKOUT (6.57.0) с устройств Android и SKOUT (6.57.0) с устройств Apple iOS.
Приложения. Социальные сети. Обновлен анализ данных из Zenly (5.9.0) с устройств Android и Zenly (5.8.2) с устройств Apple iOS.
Приложения. Социальные сети. Обновлен парсинг данных из Twitter (9.73.0-release.0) с Android-устройств.
Приложения. Социальные сети. Обновлен парсинг данных из Life360 (22.11.1) с Android-устройств.
Приложения. Бизнес. Обновлен анализ данных из Email.cz (2.4.13) с устройств Android и Email.cz (4.15.0) с устройств Apple iOS.
Приложения. Бизнес. Обновлен парсинг данных из Gmail (2023.01.08.501398065.Release) с устройств Android и Gmail (6.0.230109) с устройств Apple iOS.
Приложения. Бизнес. Обновлен парсинг данных из Yahoo Mail (7.6.1) с устройств Apple iOS.
Приложения. Веб-браузеры. Обновлен парсинг данных из Firefox (106) с устройств Apple iOS.
Приложения. Веб-браузеры. Обновлен парсинг данных из Brave (1.45) с устройств Apple iOS.
 
Oxygen Forensic Detective 15.3.1

Экстрактор Oxygen Forensic®. Добавлена возможность полного извлечения файловой системы через Агент iOS с устройств iOS с версиями 15.0–15.7.1 и 16.0–16.1.2.
Экстрактор облаков Oxygen Forensic®. Обновлен алгоритм авторизации в WhatsApp QR Multi-device.
Экстрактор облаков Oxygen Forensic®. Обновлена возможность извлечения вложений из WhatsApp QR Multi-device.
Экстрактор облаков Oxygen Forensic®. Обновлена возможность авторизации в WhatsApp Cloud.
Импорт. Добавлена возможность расшифровки физических дампов устройств на базе чипсета MT6739 и имеющих TEE Trusty и F2FSCrypt.
Импорт. Добавлена возможность расшифровки физических дампов устройств на базе чипсета MT6739 и имеющих TEE Kinibi и F2FSCrypt.
Oxygen Forensic® KeyScout. Добавлена возможность извлечения KnownDLL из Windows.
Oxygen Forensic® KeyScout. Добавлена возможность извлечения MUICache из Windows.
Oxygen Forensic® KeyScout. Добавлена возможность извлекать данные Vivaldi из Windows, macOS и Linux.
 
Changes in version 15.4 (April 2023):

Oxygen Forensic® Extractor. Added the ability to brute force passcodes to decrypt physical dumps of Samsung Exynos devices with the pre-installed Android OS 9 and Full-Disk Encryption (FDE).
Oxygen Forensic® Extractor. Added the ability to extract Google Chrome browser data via Android Agent from unlocked Android devices.
Oxygen Forensic® Extractor. Added the ability to extract the full file system and keychain via checkm8 from Apple iOS devices with version 15.7.4.
Oxygen Forensic® Extractor. Added the ability to select different exploits for the data extraction via iOS Agent.
Oxygen Forensic® Extractor. Added the Favourites section.
Oxygen Forensic® Extractor.The old version of Extractor is removed from the installation package. Now it can be found only in the customer area.
Oxygen Forensic® Cloud Extractor. Added the ability to extract Huawei Health data.
Oxygen Forensic® Cloud Extractor. Added the ability to extract recent actions of Telegram group chats available to the group admins.
Oxygen Forensic® Cloud Extractor. Added the ability to extract Telegram group chats with enabled topics.
Oxygen Forensic® Cloud Extractor. Added the ability to extract collectible usernames from Telegram.
Oxygen Forensic® Cloud Extractor. Updated the ability to extract Telegram tokens from Apple iOS devices.
Oxygen Forensic® Cloud Extractor. Updated the ability to authorize in Slack.
Oxygen Forensic® Cloud Extractor. Updated the ability to authorize in Discord via QR code.
Oxygen Forensic® Cloud Extractor. Updated the ability to authorize in Viber Cloud.
Oxygen Forensic® KeyScout. Added the ability to analyze Windows RAM images in padded RAW and Crash Dump (DMP) formats while analyzing drives or drive images.
Oxygen Forensic® KeyScout. Added the ability to extract data from drives and images having the Logical Volume Manager partitions.
Oxygen Forensic® KeyScout. Added the ability to extract and filter files by size.
Oxygen Forensic® KeyScout. Added the ability to extract a web version of WhatsApp from Chromium, Microsoft Edge, Brave and Vivaldi browsers from Windows, macOS and Linux.
Oxygen Forensic® KeyScout. Added the ability to extract a web version of Slack from Chromium, Brave and Vivaldi browsers from Windows, macOS and Linux.
Oxygen Forensic® KeyScout. Added the ability to extract a web version of Instagram from Chromium, Microsoft Edge, and Brave browsers from Windows, macOS and Linux.
Oxygen Forensic® KeyScout. Added the ability to extract AnyDesk data from Windows, macOS and Linux.
Oxygen Forensic® KeyScout. Added the ability to extract Find My data from macOS.
Oxygen Forensic® KeyScout. Added the ability to extract the list of system user accounts and groups from macOS.
Oxygen Forensic® KeyScout. Added the ability to extract VPN connection settings from Windows.
Oxygen Forensic® KeyScout. Updated the ability to extract Amazon Photos from Windows and macOS.
Oxygen Forensic® KeyScout. Updated the ability to extract the information about Bluetooth devices from macOS.
Import. Added the ability to import and parse iFlight drone logs.
Import. Added the ability to import and parse Berla iVe backups.
Import. Added the ability to import and parse MD-Next physical extractions of Android devices.
Import. Added the ability to import and decrypt dumps made from Samsung devices based on the MT6769V chipset.
Import. Added the ability to import and decrypt dumps made from devices based on the MT6765 chipset, having TEE Kinibi and F2FS.
Import. Added the ability to import and decrypt dumps made from devices based on the MT6765 chipset, having TEE Microtrust and F2FSCrypt with metadata_encryption.
Import. Added the ability to import and decrypt dumps of MTK devices having FDE and the xchacha12,aes-adiantum-plain64 algorithm.
General. Added the ability to import the list of values for ignored labels in the Contacts section.
Export. Added the ability to enter file signatures while filtering files.
Applications. Added data parsing from over 1000 new app versions from Apple iOS and Android devices. The total number of supported versions exceeds 36300.
Applications. Messengers. Added data parsing from Session (1.16.1) from Android devices.
Applications. Messengers. Added data parsing from Telegram Web (9.5.6) from Android devices.
Applications. Business. Added data parsing from iScanner (3.87.7) from Android devices and iScanner (5.8) from Apple iOS devices.
Applications. Business. Added data parsing from Notion (1.7.96) from Apple iOS devices.
Applications. Messengers. Updated data parsing from Zalo (23.02.02) from Android devices and Zalo (23.23.01) from Apple iOS devices.
Applications. Messengers. Updated data parsing from WhatsApp (2.23.4.79) from Android devices and WhatsApp (22.24.81) from Apple iOS devices.
Applications. Messengers. Updated data parsing from Telegram (9.5.6) from Android devices and Telegram (9.3.2) from Apple iOS devices.
Applications. Messengers. Updated data parsing from Viber (19.5.1) from Apple iOS devices and Viber (19.5.4.0) from Android devices.
Applications. Messengers. Updated data parsing from Skype (8.95.0.412) from Android devices Skype (8.95.1) from Apple iOS devices.
Applications. Messengers. Updated data parsing from JusTalk (8.7.5) from Android devices and JusTalk (8.7.3) from Apple iOS devices.
Applications. Messengers. Updated data parsing from Facebook Messenger Lite (329.0.0.8.106) from Android devices.
Applications. Messengers. Updated data parsing from Phone By Google (99.0.512778607) from Android devices.
Applications. Messengers. Updated data parsing from BOTIM (2.15.4) from Android devices.
Applications. Messengers. Updated data parsing from Briar (1.4.20) from Android devices.
Applications. Social Networks. Updated data parsing from Facebook (405.0.0.23.72) from Android devices and Facebook (396.0) from Apple iOS devices.
Applications. Social Networks. Updated data parsing from Tinder (14.5.0) from Android devices and Tinder (14.4.0) from Apple iOS devices.
Applications. Social Networks. Updated data parsing from Skout (6.59.0) from Android devices.
Applications. Social Networks. Updated data parsing from Twitter (9.73.0-release.0) from Android devices.
Applications. Social Networks. Updated data parsing from Zenly (5.9.1) from Android devices.
Applications. Social Networks. Updated data parsing from Twitter (9.42) from Apple iOS devices.
Applications. Social Networks. Updated data parsing from LinkedIn (9.1.299) from Apple iOS devices.
Applications. Business. Updated data parsing from Gmail (2023.03.05.518353126.Release) from Android devices and Gmail (6.0.230305) from Apple iOS devices.
Applications. Business. Updated data parsing from Temp Mail (3.13) from Android devices and Temp Mail (3.1.0) from Apple iOS devices.
Applications. Web Browsers. Updated data parsing from Firefox (106.0) from Apple iOS devices.
Applications. Web Browsers. Updated data parsing from Google Chrome (110.0.5481.154) from Android devices.
 
Changes in version 15.5.0.200 (June 2023):

General. Fixed the issue with opening OCPK files.
Oxygen Forensic® KeyScout. Fixed the issue when WhatsApp encryption keys were not extracted if several WhatsApp accounts were found on the same computer.
Oxygen Forensic® KeyScout. Fixed the issue when custom paths were ignored during Windows live data collection with the escalated system privileges and unencrypted drives.

Changes in version 15.5 (May 2023):

Oxygen Forensic® Extractor. Added the ability to extract hardware keys and decrypt physical dumps of Android OS devices based on the UNISOC T610/T618/T700 chipsets, running Android OS 10-13 and having File-Based Encryption (FBE).
Oxygen Forensic® Extractor. Added the ability to extract hardware keys and decrypt physical dumps of Android OS devices based on the MT6761 chipsets and having File-Based Encryption (FBE).
Oxygen Forensic® Extractor. Added the ability to brute force passwords to decrypt physical dumps of Samsung Exynos devices with Full-Disk Encryption (FDE) and upgraded from Android OS 9 to 10-11.
Oxygen Forensic® Extractor. Added the ability to extract keychain via iOS Agent from Apple iOS devices with iOS versions 15.0 - 15.5.
Oxygen Forensic® Extractor. Extended the ability to extract file system via iOS Agent from Apple iOS devices with iOS versions 15.0 - 15.7.1 and 16.0 - 16.1.2.
Oxygen Forensic® Extractor. Added the ability to extract the full file system and keychain via checkm8 from Apple iOS devices with iOS version 15.7.5.
Oxygen Forensic® Extractor. Added the ability to scale the interface.
Oxygen Forensic® Extractor. Updated the ability to extract WhatsApp and WhatsApp Business data via Android Agent.
Oxygen Forensic® Extractor. Updated the ability to extract Twitter data via Android Agent.
Oxygen Forensic® Extractor. Updated the ability to extract Viber data via Android Agent.
Oxygen Forensic® Cloud Extractor. Added the ability to extract the information about the Premium account, group and channel join requests, reactions, and blocked users from Telegram.
Oxygen Forensic® Cloud Extractor. Added free space check before data extraction.
Oxygen Forensic® Cloud Extractor. Updated the ability to extract avatars from Telegram.
Oxygen Forensic® Cloud Extractor. Updated the ability to extract Facebook data.
Oxygen Forensic® Cloud Extractor. Updated the ability to authorize in Tinder.
Oxygen Forensic® KeyScout. Added the ability to analyze Windows hibernation files.
Oxygen Forensic® KeyScout. Added the ability to extract BitLocker keys from Windows RAM.
Oxygen Forensic® KeyScout. Added the ability to analyze Windows drive partitions protected with BitLocker.
Oxygen Forensic® KeyScout. Added the ability to search files by their content using text strings, hex values and regular expressions.
Oxygen Forensic® KeyScout. Added the ability to extract known network connections from Windows.
Oxygen Forensic® KeyScout. Added the ability to extract saved pop-up notifications from macOS.
Oxygen Forensic® KeyScout. Added the ability to extract the information about the installed Debian Package/Advanced Packaging Tool packages from Linux.
Oxygen Forensic® KeyScout. Added the ability to extract Briar data from Windows and Linux.
Oxygen Forensic® KeyScout. Added the ability to extract Notepad++ from Windows and Linux.
Oxygen Forensic® KeyScout. Extended the ability to extract Telegram data from macOS.
Oxygen Forensic® KeyScout. Updated the ability to extract user credentials from Windows Credential Manager.
Oxygen Forensic® KeyScout. Updated the ability to extract Viber data on Windows, macOS and Linux.
Oxygen Forensic® KeyScout. Updated the ability to extract WhatsApp data on Windows and macOS.
Import. Added the ability to import and parse Telegram Exported Data.
Import. Added the ability to decrypt physical dumps of Android OS devices based on the UNISOC T610/T618/T700 chipsets
Import. Added the ability to decrypt physical dumps of Android OS devices based on the MT6761 chipset.
Import. Added the ability to decrypt physical dumps of Huawei devices based on the MT6765 chipset and having TEE TRUSTEE and F2FSCrypt.
Import. Added the ability to decrypt physical dumps of Samsung devices based on the MT6765 chipset having F2FSCrypt and TEE Kinibi.
Import. Added the ability to decrypt physical dumps of Samsung devices based on the MT6765 chipset having F2FSCrypt and TEE TEEGRIS.
Export. Added the ability to export the supported devices list.
Export. Added the ability to exclude media file previews in the section export settings.
Export. Extended search by file signatures.
Export. Fixed the issues that occurred during export of geo coordinates to KML and GPX.
General. Added the integrity check run at the program start.
Applications. Added data parsing from over 2000 new app versions from Apple iOS and Android devices. The total number of supported versions exceeds 38500.
Applications. Business. Added data parsing from Samsung Customization Service (2.9.10.0) from Android devices.
Applications. Business. Added data parsing from Hide It Pro (8.7.1) from Android devices.
Applications. Business. Added data parsing from Notepad Vault-AppHider (3.2.0_250ba0164) from Android devices.
Applications. Business. Added data parsing from Notion (0.6.1121) from Android devices.
Applications. Business. Added data parsing from Tappsk (2.2.50) from Apple iOS devices.
Applications. Messengers. Updated data parsing from Signal (5.44.3) from Android devices and Signal (6.19) from Apple iOS devices.
Applications. Messengers. Updated data parsing from Telegram (9.6.5) from Android devices and Telegram (9.4.3) from Apple iOS devices.
Applications. Messengers. Updated data parsing from Line (13.5.0) from Android devices and Line (13.5.1) from Apple iOS devices.
Applications. Messengers. Updated data parsing from Zalo (23.04.01) from Android devices and Zalo (23.04.01) from Apple iOS devices
Applications. Messengers. Updated data parsing from JusTalk (8.8.5) from Android devices and JusTalk (8.7.9) from Apple iOS devices.
Applications. Messengers. Updated data parsing from Messages from Android devices.
Applications. Social Networks. Updated data parsing from Facebook (413.0.0.30.104) from Android devices and Facebook (414.0) from Apple iOS devices.
Applications. Social Networks. Updated data parsing from LinkedIn (4.1.807) from Android devices and LinkedIn (9.1.315) from Apple iOS devices.
Applications. Social Networks. Updated data parsing from Instagram (261.0) from Apple iOS devices.
Applications. Business. Updated data parsing from Zoho Mail (2.6.4) from Android devices and Zoho Mail (2.8.6) from Apple iOS devices.
Applications. Business. Updated data parsing from Calculator# (3.3.5) from Apple iOS devices.
Applications. Business. Updated data parsing from Gmail (2023.04.16.527073575.Release) from Android devices and Gmail (6.0.230417) from Apple iOS devices.
Applications. Web Browsers. Updated data parsing from Phoenix Browser (12.8.2.4423) from Android devices.
Applications. Multimedia. Updated data parsing from Shazam (15.32) from Apple iOS devices.
 
Changes in version 15.5.1 (July 2023):

Oxygen Forensic® Extractor. Added the ability to extract hardware keys and decrypt physical dumps of Android devices based on the MT6833 chipsets, running Android OS 10-13 and having File-Based Encryption (FBE).
Oxygen Forensic® Extractor. Added the ability to extract the full file system and keychain via checkm8 from Apple iOS devices with iOS version 15.7.7.
Oxygen Forensic® Extractor. Updated the ability to extract the full file system and keychain via iOS Agent from Apple iOS devices with versions 15.0-15.4.1.
Oxygen Forensic® Extractor. Updated the ability to extract Kik Messenger via Android Agent from Android devices.
Oxygen Forensic® Extractor. Updated the ability to extract Discord via Android Agent from Android devices.
Oxygen Forensic® Extractor. Updated the ability to extract data via Android Agent from Huawei devices running HarmonyOS.
Oxygen Forensic® Cloud Extractor. Updated the ability to authorize in Twitter.
Oxygen Forensic® Cloud Extractor. Updated the ability to authorize in Google.
Oxygen Forensic® KeyScout. Added the ability to choose encoding for file names for ZIP archives.
Oxygen Forensic® KeyScout. Added the ability to download the debugging symbols from the Internet and use them to analyze RAM Memory of unsupported Windows OS versions.
Oxygen Forensic® KeyScout. Added the ability to collect ICQ data from Windows, macOS and Linux.
Oxygen Forensic® KeyScout. Added the ability to collect FileZilla data from Windows, macOS and Linux.
Oxygen Forensic® KeyScout. Added the ability to collect Spark data from Windows.
Oxygen Forensic® KeyScout. Added the ability to collect Discord data from Linux.
Oxygen Forensic® KeyScout. Added the ability to collect Discord messages and cookies from Windows and macOS.
Oxygen Forensic® KeyScout. Added the ability to collect permissions given by macOS applications.
Oxygen Forensic® KeyScout.Added the ability to collect background application activity from Windows.
Oxygen Forensic® KeyScout. Added the ability to collect the history of recently opened files from Linux.
Oxygen Forensic® KeyScout. Added the ability to collect the secret DPAPI password from Windows accounts linked to the Microsoft accounts.
Oxygen Forensic® KeyScout. Updated the ability to collect Spark data from macOS.
Oxygen Forensic® KeyScout. Updated the ability to collect data about network interfaces from Windows.
Oxygen Forensic® KeyScout. Expanded the ability to collect Event logs from Windows. Now data about VPN, BITS, DPAPI, BitLocker and Network Profile can be collected.
Oxygen Forensic® KeyScout. Improved support for DPAPI of Windows accounts linked to the Microsoft accounts.
Import. Added the ability to decrypt physical dumps of Android OS devices based on the MT6833 chipset and having TEE Microtrust and F2FSCrypt.
Import. Added the ability to decrypt physical dumps of Android OS devices based on the MT6833 chipset and having TEE TEEGRIS and F2FSCrypt.
Import. Added the ability to decrypt physical dumps of Android OS devices based on the MT6768 chipset and having F2FSCrypt and hybrid TEE Kinibi + TEEGRIS.
Import. Added the ability to decrypt physical dumps of Android OS devices based on the MT6580 chipset and having TEE T6, F2FSCrypt and metadata encryption.
Import. Added the ability to import and parse UFED backups of CLBX format.
Maps. Added the Activity Matrix for geo coordinates.
Timeline. Added a new smart filter that allows showing the events within the timeframe that happened before and after the events with tags.
Timeline. Added the ability to filter by seconds, minutes and hours in the time filter.
Applications. Added data parsing from over 1200 new app versions from Apple iOS and Android devices. The total number of supported versions exceeds 39900.
Applications. Messengers. Added data parsing from AWS Wickr (6.12.4) from Android devices and AWS Wickr (6.14.3) from Apple iOS devices.
Applications. Web Browsers. Added data parsing from Vivaldi Browser (6.1.3035.110) from Android devices.
Applications. Business. Added data parsing from Samsung Email (6.1.75.0) from Android devices.
Applications. Messengers. Updated data parsing from Viber (20.4.3.0) from Android devices and Viber (20.3.1) from Apple iOS devices.
Applications. Messengers. Updated data parsing from Telegram X (0.25.6.1624) from Android devices.
Applications. Messengers. Updated data parsing from Wickr Me (6.4.2) from Apple iOS devices.
Applications. Social Networks. Updated data parsing from Twitter (9.85.0-release.0) from Android devices.
Applications. Social Networks. Updated data parsing from Instagram (284.0.0.22.85) from Android devices and Instagram (283.0) from Apple iOS devices.
Applications. Social Networks. Updated data parsing from JusTalk (8.8.10) from Android devices and JusTalk (8.7.25) from Apple iOS devices.
Applications. Social Networks. Updated data parsing from Facebook (421.0.0.33.47) from Android devices and Facebook (421.0) from Apple iOS devices.
Applications. Social Networks. Updated data parsing from LinkedIn (4.1.828.1) from Android devices.
Applications. Social Networks. Updated data parsing from Omlet Arcade (1.111.9) from Android devices.
Applications. Web Browsers. Updated data parsing from Safari (14.0) from Apple iOS devices.
Applications. Web Browsers. Updated data parsing from Firefox (115.0) from Android devices and Firefox (114.4) from Apple iOS devices.
Applications. Web Browsers. Updated data parsing from Google Chrome (114.0.5735.60) from Android devices and Google Chrome (114.0.5735.124) from Apple iOS devices.
Applications. Business. Updated data parsing from Gmail (6.0.230611) from Apple iOS devices and Gmail (2023.06.11.542368486) from Android devices.
Applications. Business. Updated data parsing from Google Keep (5.23.242.01.90) from Android devices and Google Keep (2.2023.24201) from Apple iOS devices.
 
Changes in version 16.0 (September 2023):

Oxygen Forensic® Extractor. Added the ability to extract hardware keys and decrypt physical dumps of devices based on the UNISOC T606, T616, T612 and T310 chipsets and running Android OS 10 - 13.
Oxygen Forensic® Extractor. Added the ability to extract hardware keys and decrypt physical dumps of Xiaomi Redmi 7A/8/8A devices based on the Qualcomm SDM439 chipset.
Oxygen Forensic® Extractor. Added the ability to extract app data from Android devices with OS 12-13 using the APK Downgrade method.
Oxygen Forensic® Extractor. Added the ability to extract the file system and keychain via iOS Agent from iOS devices running iOS 14.6 - 14.8.1, 15.6 - 15.7.1, and 16.0 - 16.5.
Oxygen Forensic® Extractor. Added the ability to extract the full file system and keychain via checkm8 from Apple iOS devices with iOS version 15.7.8.
Oxygen Forensic® Extractor. Added the ability to extract and analyze iTunes backups made from iOS 17 Beta devices.
Oxygen Forensic® Extractor. Added the ability to extract Samsung Browser data from Android devices via Android Agent.
Oxygen Forensic® Extractor. Added the ability to brute force passcodes for Briar app in the Full File System extraction method for Android devices.
Oxygen Forensic® Extractor. Added the information about keychain extraction via iOS agent in the Devices section.
Oxygen Forensic® Extractor. Added the Themes Editor.
Oxygen Forensic® Cloud Extractor. Added the ability to extract data from Clubhouse.
Oxygen Forensic® Cloud Extractor. Added the ability to extract data from Bumble.
Oxygen Forensic® Cloud Extractor. Added the ability to extract data from Google Messages.
Oxygen Forensic® Cloud Extractor. Added the ability to extract new artifacts from Facebook.
Oxygen Forensic® Cloud Extractor. Updated the ability to authorize in Viber Cloud.
Oxygen Forensic® Cloud Extractor. Updated the ability to authorize in WhatsApp Cloud.
Oxygen Forensic® Cloud Extractor. Updated the ability to extract attachments from Discord.
Oxygen Forensic® Cloud Extractor. Updated the ability to authorize in Google.
Oxygen Forensic® Cloud Extractor. Updated the ability to authorize in Runkeeper.
Oxygen Forensic® KeyScout. Added the ability to extract VeraCrypt keys from Windows RAM.
Oxygen Forensic® KeyScout. Added the ability to decrypt and analyze VerCrypt containers.
Oxygen Forensic® KeyScout. Added the ability to recover deleted files from FAT16, FAT32 and exFAT file systems.
Oxygen Forensic® KeyScout. Added the ability to set automatic saving and import of extracted data.
Oxygen Forensic® KeyScout. Added support for macOS 14 Sonoma (beta 4).
Oxygen Forensic® KeyScout. Added the ability to decrypt Viber databases from macOS.
Oxygen Forensic® KeyScout. Added the ability to decrypt WhatsApp databases from Windows images.
Oxygen Forensic® KeyScout. Added the ability to extract NordVPN from Windows, macOS and GNU/Linux.
Oxygen Forensic® KeyScout. Added the ability to extract PureVPN from Windows, macOS and GNU/Linux.
Oxygen Forensic® KeyScout. Added the ability to extract Telegram stories from macOS.
Oxygen Forensic® KeyScout. Added the ability to extract VLC Media Player from Windows, macOS and GNU/Linux.
Oxygen Forensic® KeyScout. Added the ability to extract a paid version of ViPole from Windows, macOS and GNU/Linux.
Oxygen Forensic® KeyScout. Added the ability to extract installed Homebrew packages from macOS.
Oxygen Forensic® KeyScout. Added the ability to extract Shim Cache from Windows.
Oxygen Forensic® KeyScout. Added the ability to extract information about permissions that were given to applications on Windows.
Oxygen Forensic® KeyScout. Improved Interface scaling.
Import. Added selective data analysis of imported Oxygen Forensic® KeyScout extractions.
Import. Added the ability to brute force passcodes for Apple Notes.
Import. Added the ability to decrypt physical dumps of Xiaomi Redmi 7A/8/8A based on the Qualcomm SDM439 chipset.
Import. Added the ability to decrypt physical dumps of Unisoc T606/T616/T612 and T310 chipsets.
Import. Added the ability to import and analyze XRY backups of versions 10.3.1 and newer (formats 11 and 12).
Image Categorization. Added the ability to categorize images by new threats: medical, meme, offensive gesture, and schematic.
Timeline. Added a new smart filter that allows showing events before and after the events marked with a particular tag.
Files. Added the ability to add extensions to the names of saved files that have no extension.
Contacts. Added the ability to filter by common contacts in a case.
Oxygen Forensic® Viewer. Added the ability to search data across all the extractions.
Oxygen Forensic® Maps. Added the ability to merge layers.
Export. Added the ability to set a passcode to a PDF report.
Export. Updated support for HTML format.
Applications. Social Networks. Added data parsing from Threads (294.0.0.27.110) from Android devices and Threads (295.0) from Apple iOS devices.
Applications. Social Networks. Added data parsing from TanTan (5.8.6.1) from Android devices and TanTan (5.9.7) from Apple iOS devices.
Applications. Social Networks. Added data parsing from TikTok Lite (30.3.4) from Android devices.
Applications. Business. Added data parsing from 1Password (8.10.7) from Android devices and 1Password (8.10.9) from Apple iOS devices.
Applications. Messengers. Updated data parsing from Slack (23.07.20.0) from Android devices and Slack (23.08.30) from Apple iOS devices.
Applications. Messengers. Updated data parsing from Threema (5.2.1) from Apple iOS devices.
Applications. Messengers. Updated data parsing from Verizon Messages (9.4.1) from Android devices.
Applications. Messengers. Updated data parsing from Facebook Messenger (416.0.0.9.76) from Android devices.
Applications. Social Networks. Updated data parsing from GroupMe (6.61.2) from Android devices and GroupMe (6.61) from Apple iOS devices.
Applications. Business. Updated data parsing from Xiaomi Notes (6.0.7) from Android devices.
 
Oxygen Forensic® Detective Changes in version 16.0.1 (October 2023):

Oxygen Forensic® Extractor. Added the ability to extract public data via iOS Agent from Apple iOS devices.
Oxygen Forensic® Extractor. Added the animated instructions for the checkm8 method.
Oxygen Forensic® Extractor. Added the ability to extract Apple iOS 17 devices via iTunes backup procedure.
Oxygen Forensic® Extractor. Added the ability to extract data via iTunes backup procedure from iPhone 15, iPhone 15 Plus, iPhone 15 Pro and iPhone 15 Pro Max.
Oxygen Forensic® Extractor. Added the ability to extract the full file system and keychain from iPhone 6s and iPhone 7 devices running iOS version 15.7.9.
Oxygen Forensic® Extractor. Added the ability to conduct logical extraction, make screenshots and video recordings of data via Android Agent from Android OS 14 devices.
Oxygen Forensic® Extractor. Added the ability to extract Android KeyStore from devices with the pre-installed Android OS 13.
Oxygen Forensic® Extractor. Updated the ability to extract WhatsApp and WhatsApp Business via Android Agent.
Oxygen Forensic® Extractor. Updated the ability to extract Discord via Android Agent.
Oxygen Forensic® Extractor. Updated the ability to extract Viber via Android Agent.
Oxygen Forensic® Extractor. Updated the ability to extract Google Chrome via Android Agent.
Oxygen Forensic® Extractor. Updated the ability to extract X (Twitter) via Android Agent.
Oxygen Forensic® Extractor. Updated the ability to extract Telegram via Android Agent.
Oxygen Forensic® Extractor. Updated the ability to extract Kik via Android Agent.
Oxygen Forensic® Extractor. Added the ability to re-extract data protected with the screen lock passcode if the first attempt to extract it via Android Agent method failed.
Oxygen Forensic® Extractor. Redesigned the selective data extraction window in the Android Agent.
Oxygen Forensic® Cloud Extractor. Added support for CAPTCHA for WhatsApp cloud.
Oxygen Forensic® Cloud Extractor. Updated the ability to extract data from WhatsApp QR Multi-device.
Oxygen Forensic® Cloud Extractor. Updated the ability to authorize in Huawei Cloud Data.
Oxygen Forensic® KeyScout. Added the ability to decrypt VeraCrypt containers with keyfiles.
Oxygen Forensic® KeyScout. Added the ability to decrypt user passwords extracted from FileZilla Client.
Oxygen Forensic® KeyScout. Added the ability to decrypt logins and passwords saved in the system VPN client.
Oxygen Forensic® KeyScout. Added the ability to extract serial numbers of macOS computers.
Oxygen Forensic® KeyScout. Added data parsing from VeraCrypt app from Windows, macOS and GNU/Linux.
Oxygen Forensic® KeyScout. Added data parsing from IrfanView app from Windows.
Oxygen Forensic® KeyScout. Added data parsing from KMPlayer from Windows.
Oxygen Forensic® KeyScout. Added the ability to extract Dropbox from GNU/Linux.
Oxygen Forensic® KeyScout. Added the ability to extract the creation and modification dates of APFS partitions.
Oxygen Forensic® KeyScout. Added the ability to extract the history of the user logins from Apple System Logs (ASL) from macOS.
Oxygen Forensic® KeyScout. Added the ability to extract the information about documents printed with CUPS (Common UNIX Printing System) from macOS and GNU/Linux.
Oxygen Forensic® KeyScout.Added the ability to extract the information about trusted documents and locations stored in MS Office apps.
Oxygen Forensic® KeyScout. Added the information about bookmarks and sessions of web browsers based on the Blink engine.
Oxygen Forensic® KeyScout. Added the ability to import the list of search paths and excluded file paths.
Oxygen Forensic® KeyScout. Updated the ability to extract Dropbox from Windows and macOS.
Oxygen Forensic® KeyScout. Extended the information extracted from the cache of apps based on the Blink engine from Windows, macOS andGNU/Linux.
Oxygen Forensic® KeyScout. Extended the ability to generate a report about performed operations.
Oxygen Forensic® KeyScout. Improved the ability to download symbols from Windows Server.
Oxygen Forensic® KeyScout. Improved the overall functionality and UI.
Import. Added the ability to decrypt physical images of Honor 7S and Huawei Y5 devices.
Import. Added the ability to extract file metadata from UFED extractions of CLBX format.
Import. Updated support for Mediatek-based Android devices having TEE T6.
Import. Updated support for UNISOC-based Android devices having TEE Trusty.
Contacts. Added deduplication of events in the Contacts card and Communications panel.
File Viewer. Added the ability to open binary XML files.
Export. Added the ability to export email messages to MSG format of Microsoft Outlook.
Export. Added the ability to export contacts to VCF format.
Export. Excluded .SMIL files from reports.
Export. Improved the Reports section.
Applications. Added the ability to filter by missing attachments.
Applications. Added data parsing from over 2500 new app versions from Apple iOS and Android devices. The total number of supported versions exceeds 43800.
Applications. Social Networks. Added data parsing from Bumble (5.339.1) from Android devices and Bumble (5.306.0) from Apple iOS devices.
Applications. Business. Added data parsing from Todoist (v11034) from Android devices and Todoist (23.9.15) from Apple iOS devices.
Applications. Business. Added data parsing from Samsung My Files (10.1.13.391) from Android devices.
Applications. Business. Added data parsing from Gmail Go (2022.10.10.480125827) from Android devices.
Applications. Messengers. Updated data parsing from Facebook Messenger (423.0.0.25.113) from Android devices and Facebook Messenger (422.0) from Apple iOS devices.
Applications. Messengers. Updated data parsing from Telegram (10.0.2) from Android devices and Telegram (10.1.2) from Apple iOS devices.
Applications. Messengers. Updated data parsing from WhatsApp (2.23.19.84) from Android devices and WhatsApp (23.20.1) from Apple iOS devices.
Applications. Messengers. Updated data parsing from Skype (8.104.0.208) from Android devices and Skype (8.99.1) from Apple iOS devices.
Applications. Messengers. Updated data parsing from Viber (21.1.0.0) from Android devices and Viber (21.1.0) from Apple iOS devices.
Applications. Messengers. Updated data parsing from ICQ (23.1.1(10011564)) from Android devices and ICQ (23.1.1) from Apple iOS devices.
Applications. Social Networks. Updated data parsing from Instagram (297.0.0.40.109) from Android devices and Instagram (303.3) from Apple iOS devices.
Applications. Social Networks. Updated data parsing from JusTalk (8.8.26) from Android devices and JusTalk (8.7.44) from Apple iOS devices.
Applications. Social Networks. Updated data parsing from X (Twitter) (10.7) from Apple iOS devices and X (Twitter) X (10.10.0-release.0) from Android devices.
Applications. Social Networks. Updated data parsing from Facebook (428.0) from Apple iOS devices and Facebook (435.0.0.42.112) from Android devices.
Applications. Social Networks. Updated data parsing from Snapchat (11.65.1.32) from Android devices.
Applications. Social Networks. Updated data parsing from Moj (23.16.1) from Apple iOS devices.
Applications. Business. Updated data parsing from Gmail (2023.08.20.561750975) from Android devices and Gmail (6.0.230723) from Apple iOS devices.
Applications. Business. Updated data parsing from TempMail (3.36) from Android devices and TempMail (3.1.1) from Apple iOS devices.
Applications. Business. Updated data parsing from Xiaomi Notes (6.0.9) from Android devices.
Applications. Web Browsers. Updated data parsing from Google Chrome (118.0.5993.48) from Android devices and Google Chrome (118.0.5993.585) from Apple iOS devices.
Applications. Web Browsers. Updated data parsing from Samsung Internet Browser (22.0.6.9) from Android devices.
Applications. Web Browsers. Updated data parsing from Vivaldi Browser (6.2.3110.86) from Android devices.
 
Changes in version 16.1 (December 2023):
Oxygen Forensic® Extractor. Added the ability to extract hardware keys and decrypt physical dumps of Android OS devices based on the UNISOC SC9863A chipset, running Android OS 10-13 and having File-Based Encryption (FBE).
Oxygen Forensic® Extractor. Added the ability to extract hardware keys and decrypt physical dumps of Android OS devices based on the MT6893 and MT6853 chipsets.
Oxygen Forensic® Extractor. Added the ability to extract the full file system from unlocked Android devices that have the SPL no later than October 2022.
Oxygen Forensic® Extractor. Added the ability to extract Opera Browser data via Android Agent from unlocked Android devices.
Oxygen Forensic® Extractor. Oxygen Forensic® Extractor. Added the ability to extract the full file system and keychain via iOS Agent from iPads based on the A8 - A15, M1, and M2 chipsets and running iPadOS 15.0 - 15.7.3, and 16.1 - 16.5.
Oxygen Forensic® Extractor. Added the ability to extract the full file system and keychain via iOS Agent from iPhones based on the A9 - A11 chipsets and running iOS versions 15.0 - 15.7.3, 16.0 - 16.5.
Oxygen Forensic® Extractor. Updated the ability to extract Zoom data via Android Agent from unlocked Android devices.
Oxygen Forensic® Extractor. Updated the ability to extract contacts from Silent Phone via Android Agent from unlocked Android devices.
Oxygen Forensic® Extractor. Updated the ability to extract contacts from Line via Android Agent from unlocked Android devices.
Oxygen Forensic® Extractor. Extended the list of applications supported by the APK Downgrade method.
Oxygen Forensic® Extractor. Now the list of supported applications can be seen on the main window of the APK Downgrade method.
Oxygen Forensic® Extractor. Added the device cards with the detailed device information.
Oxygen Forensic® Extractor. Improved the stability of the iOS Agent method.
Oxygen Forensic® Cloud Extractor. Added the ability to authorize in the WhatsApp QR Multi-Device service via phone number.
Oxygen Forensic® Cloud Extractor. Added the ability to extract Facebook data via iOS token.
Oxygen Forensic® Cloud Extractor. Updated the ability to extract Discord tokens from Android devices.
Oxygen Forensic® Cloud Extractor. Updated the ability to extract Discord data.
Oxygen Forensic® Cloud Extractor. Updated the ability to authorize in Amazon Alexa via login and password.
Oxygen Forensic® KeyDiver. Added the ability to brute force passwords to decrypt partitions protected with BitLocker, and FileVault 2.
Oxygen Forensic® KeyDiver. Added the ability to brute force passwords to decrypt encrypted ZIP files.
Oxygen Forensic® KeyDiver. Added the ability to brute force passwords to decrypt Telegram Desktop.
Oxygen Forensic® KeyDiver. Added the ability to brute force passwords to decrypt Apple Notes.
Oxygen Forensic® KeyDiver. Added the ability to find passcodes using the personal data from extractions.
Oxygen Forensic® KeyScout. Added the ability to import and parse computer images of AFF4 format.
Oxygen Forensic® KeyScout. Added the ability to import and parse computer images of VHDX format.
Oxygen Forensic® KeyScout. Added the ability to recover deleted files from NTFS while running live extraction, importing computer images or connecting external drives.
Oxygen Forensic® KeyScout. Added the ability to export the list of files without saving their content.
Oxygen Forensic® KeyScout. Added support for macOS based on the ARM processors without Rosetta installed.
Oxygen Forensic® KeyScout. Added the ability to extract the information about recently used applications, documents, servers, partitions and other objects of macOS.
Oxygen Forensic® KeyScout. Added the ability to extract LibreOffice data from Windows, macOS and GNU/Linux.
Oxygen Forensic® KeyScout. Added the ability to extract Exodus data from Windows, macOS and GNU/Linux.
Oxygen Forensic® KeyScout. Added the ability to extract Todoist data from Windows, macOS and GNU/Linux.
Oxygen Forensic® KeyScout. Added the ability to extract stories of public channels and quoted messages from Telegram for macOS.
Oxygen Forensic® KeyScout. Updated the ability to extract OneDrive data from Windows and macOS.
Oxygen Forensic® KeyScout. Updated the ability to extract Slack data from Windows, macOS and GNU/Linux.
General. Added the ability to translate extracted data.
General. Added the ability to manually or automatically delete deleted extraction files from the repository.
Import. Added the ability to import Instagram account copy.
Import. Added the ability to import and parse logical FFS extractions of MDF(MD-Next).
Import. Added the ability to decrypt physical images of Android devices based on the UNISOC SC9863A chipset.
Import. Added the ability to decrypt physical images of Android devices based on the MT6893 and MT6853 chipsets.
Import. Added the ability to select the keychain file during import.
Import. Now data from the UFD manifest file is shown in the Extraction Info and Device Info.
Statistics. Added the First Contacted information.
Export. Added the ability to export translated data.
Export. Added the ability to split the reports while exporting chats.
Export. Fixed the issues that occurred while exporting the Search section data.
Applications. Added data parsing from over 500 new app versions from Apple iOS and Android devices. The total number of supported versions exceeds 44300.
Applications. Password Managers. Added data parsing from Bitwarden (2023.10.0) from Android devices and Bitwarden (2023.10.0) from Apple iOS devices.
Applications. Organizer. Added data parsing from Trello (2023.14.3.8665) from Android devices and Trello (2023.14) from Apple iOS devices.
Applications. Messengers. Added data parsing from Message+ (5.3.7) from Apple iOS devices.
Applications. Messengers. Updated data parsing from Signal (6.37.2) from Android devices and Signal (6.37) from Apple iOS devices.
Applications. Messengers. Updated data parsing from Discord (166.15) from Android devices and Discord (203.0) from Apple iOS devices.
Applications. Messengers. Updated data parsing from Facebook Messenger (434.0.0.30.104) from Android devices and Facebook Messenger (434.0) from Apple iOS devices.
Applications. Messengers. Updated data parsing from Viber (21.3.2.0) from Android devices and Viber (21.3.0) from Apple iOS devices.
Applications. Messengers. Updated data parsing from TamTam (3.14) from Apple iOS devices.
Applications. Social Networks. Updated data parsing from Facebook (439.0.0.1.117) from Android devices and Facebook (440.0) from Apple iOS devices.
Applications. Social Networks. Updated data parsing from Grindr (9.17.3) from Android devices and Grindr (9.16.1) from Apple iOS devices.
Applications. Business. Updated data parsing from GMail (2023.10.29.580630254.Release) from Android devices and GMail (6.0.231023) from Apple iOS devices.
Applications. Business. Updated data parsing from Email.cz (4.16.4) from Apple iOS devices.
 
Changes in version 16.1.1 (January 2024):

Oxygen Forensic® Extractor. Added the ability to extract hardware keys and decrypt physical dumps of Android OS devices based on the Qualcomm Snapdragon 845/710 chipset and running Android OS 7 and higher.
Oxygen Forensic® Extractor. Added the ability to extract hardware keys and decrypt physical dumps of Android OS devices based on the MT6771 and МТ6873 chipsets.
Oxygen Forensic® Extractor. Added the ability to extract app data via Android Agent from devices running Android OS 14.
Oxygen Forensic® Extractor. Added additional filters for Telegram data extraction via Android Agent.
Oxygen Forensic® Extractor. Added the ability to extract the full file system and keychain via checkm8 from iPhone 6S and iPhone 7 with iOS 15.8.1.
Oxygen Forensic® Extractor. Added the ability to extract the full file system and keychain via iOS Agent from Apple iOS devices based on the A12-A16 chipsets with iOS 16.5.1.
Oxygen Forensic® Extractor. Updated the ability to decrypt Signal backups extracted via Android Agent.
Oxygen Forensic® Extractor. Updated the ability to extract Google Chrome bookmarks and tabs via Android Agent.
Oxygen Forensic® Extractor. Interface improvements for Web Browser data extraction via Android Agent.
Oxygen Forensic® Extractor. Improved the stability of the extraction method via checkm8 vulnerability.
Oxygen Forensic® Extractor. The number of media files, calendar events and contacts is now shown before public data extraction via iOS Agent.
Oxygen Forensic® Cloud Extractor. Added data extraction from Reddit.
Oxygen Forensic® Cloud Extractor. Updated the ability to authorize in Telegram.
Oxygen Forensic® KeyScout. Added the progress bar for saving files and the ability to stop the saving process.
Oxygen Forensic® KeyScout. Added .torrent extension on the Files tab in the Search Profiles.
Oxygen Forensic® KeyScout. Added the ability to extract μTorrent data from Windows.
Oxygen Forensic® KeyScout. Added the ability to extract information from .torrent files from Windows, macOS and GNU/Linux.
Oxygen Forensic® KeyScout. Added the ability to extract Apple FaceTime data from macOS.
Oxygen Forensic® KeyScout. Added the ability to extract OpenOffice data from Windows and GNU/Linux.
Oxygen Forensic® KeyScout. Added the ability to extract FastStone Image Viewer data from Windows.
Oxygen Forensic® KeyScout. Added the ability to extract Microsoft Outlook data from macOS.
Oxygen Forensic® KeyScout. Added support for the new encryption algorithm of Viber on Windows.
Oxygen Forensic® KeyScout. Added the ability to extract Exodus cryptocurrency addresses from Windows, macOS and GNU/Linux.
Oxygen Forensic® KeyScout. Added the ability to extract information about the packages installed with the help of Snap on GNU/Linux.
Oxygen Forensic® KeyScout. Updated the ability to extract Facebook Messenger data from Windows and macOS.
Oxygen Forensic® KeyScout. Updated the ability to extract Microsoft Outlook data from Windows.
Oxygen Forensic® KeyScout. Improved the Files tab interface.
Oxygen Forensic® KeyScout. Improved support for HFS and HFS+ file systems.
Oxygen Forensic® KeyScout. Improved work with temporary files.
Oxygen Forensic® KeyScout. Improved data recovery from NTFS file systems.
Import. Added the ability to decrypt physical images of Android devices based on the Qualcomm Snapdragon 845/710 chipset.
Import. Added the ability to decrypt physical images of Android devices based on the MT6771 and МТ6873 chipsets.
Import. Added the ability to decrypt physical images of Android devices based on the UNISOC chipsets and having TEE Trusty.
Import. Updated support for Facebook account copy.
General. The translation tool now supports Turkish, Farsi, Polish, Ukrainian and Belorussian languages.
General. Added the File information panel to the main Extraction window.
Export. Added data export to PST files.
Export. Added the ability to group files by extension.
Export. Improvements for the Search section reports.
Applications. Added data parsing from over 900 new app versions from Apple iOS and Android devices. The total number of supported versions exceeds 45200.
Applications. Multimedia. Added data parsing from CapCut (10.6.0) from Android devices and CapCut (10.2.1) from Apple iOS devices.
Applications. Multimedia. Added data parsing from Files (16.2) from Apple iOS devices.
Applications. Organizer. Added data parsing from Alarms (16.2) from Apple iOS devices.
Applications. Multimedia. Added data parsing from Weather (16.2) from Apple iOS devices.
Applications. OS Artifacts. Added parsing of TCC access permissions from Apple iOS devices.
Applications. Messenger. Updated data parsing from Telegram (10.6.2) from Android devices and Telegram (10.5.2) from Apple iOS devices.
Applications. Messenger. Updated data parsing from Discord (206.16) from Android devices.
Applications. Messenger. Updated data parsing from Apple messages (16.2) from Apple iOS devices.
Applications. Messenger. Updated data parsing from Event Log (16.2) from Apple iOS devices.
Applications. Messenger. Updated data parsing from Viber (21.8.1.0) from Android devices.
Applications. Business. Updated data parsing from Outlook (4.2240.4) from Android devices and Outlook (4.2402.0) from Apple iOS devices. .
Applications. Business. Updated data parsing from Apple mail (16.2) from Apple iOS devices.
Applications, Navigation. Updated data parsing from Apple maps (16.2) from Apple iOS devices.
Applications. Organizer. Updated data parsing from Apple calendar (16.2) from Apple iOS devices.
Applications. Organizer. Updated data parsing from Apple Voice memos (16.2) from Apple iOS devices.
Applications. Organizer. Updated parsing of Phonebook from Apple iOS devices.
Applications. Web Browsers. Updated data parsing from Safari (16.2) from Apple iOS devices.
 
Changes in version 16.1.1.147 (March 2024):

Oxygen Forensic® KeyScout. Improved analysis of Volume Shadow Copy snapshots during live data extraction of Windows-based computers.
Oxygen Forensic® KeyScout. Improved analysis of corrupted SQLite files.
Oxygen Forensic® KeyScout. Improved parsing of ESE databases from Windows.
Oxygen Forensic® KeyScout. Improved parsing of MFT records during recovery of deleted NTFS files.
Oxygen Forensic® KeyScout. Improved parsing of NTFS artifacts from Windows.
Oxygen Forensic® KeyScout. Improved parsing of Discord from Windows, macOS, and Linux.
Oxygen Forensic® KeyScout. Improved parsing of Viber from Windows, macOS, and Linux.
Oxygen Forensic® KeyScout. Improved token extraction from Viber from Windows.
Oxygen Forensic® KeyScout. Accelerated parsing of Viber from Windows.
Oxygen Forensic® KeyScout. Updated instruction on WhatsApp decryption on Windows.
Search. Improved search when the Case Sensitive option is disabled.
Applications. Messengers. Improved parsing of Apple Messages from iTunes backups.
Applications. Messengers. Improved support for empty Apple Messages from Apple iOS devices.
Applications. Messengers. Improved parsing of Telegram from Android devices.
Applications. Messengers. Improved parsing of Telegram X from Android devices.
Applications. Messengers. Improved parsing of calls from Apple iOS devices.
Applications. Multimedia. Improved parsing of Voice Memos from Apple iOS devices.
 
Oxygen Forensic Detective 16.2 (March 2024):

Oxygen Forensic® Device Extractor. Added the ability to extract hardware keys and decrypt physical dumps of Samsung devices based on the UNISOC SC9863A chipset and running Android OS 10-13.
Oxygen Forensic® Device Extractor. Added the ability to extract hardware keys and decrypt physical dumps of Samsung devices based on Qualcomm Snapdragon SDM845 chipsets and Android OS 7 or higher.
Oxygen Forensic® Device Extractor. Added the ability to extract hardware keys and decrypt physical dumps of Android OS devices based on the MT6781 and MT6877 chipsets and running Android OS 10 and higher.
Oxygen Forensic® Device Extractor. Added the ability to extract the full file system from unlocked Android devices that have the arm64-v8a architecture, Linux Kernel 5.4 and SPL no later than October 2022.
Oxygen Forensic® Device Extractor. Added the ability to extract the second authorized WhatsApp and WhatsApp Business accounts via Android Agent.
Oxygen Forensic® Device Extractor. Added the ability to extract additional data from Opera Browser via Android Agent.
Oxygen Forensic® Device Extractor. Added the ability to extract the full file system and keychain via checkm8 from iPad with iOS 16.
Oxygen Forensic® Device Extractor. Added the ability to extract the full file system and keychain via checkm8 from iPhone 6S and iPhone 7 with iOS 15.8.2.
Oxygen Forensic® Device Extractor. Added the ability to extract the full file system and keychain via iOS Agent from Apple iOS devices based on the M1 chipset with iOS 16.5.1 and M2 chipset with iOS 16.5.
Oxygen Forensic® Device Extractor. Accelerated data extraction from UNISOC-based Android devices.
Oxygen Forensic® Device Extractor. Updated the ability to decrypt Signal backups extracted via Android Agent.
Oxygen Forensic® Cloud Extractor. Added data extraction from Steam.
Oxygen Forensic® Cloud Extractor. Added the ability to extract additional data from Reddit.
Oxygen Forensic® Cloud Extractor. Updated the iCloud Agent that is used for iCloud data extraction.
Oxygen Forensic® Cloud Extractor. Updated the ability to authorize in OnlyFans.
Oxygen Forensic® KeyDiver. Added the ability to find passcodes to encrypted iTunes backups.
Oxygen Forensic® KeyDiver. Added the ability to find passcodes to encrypted 7-ZIP.
Oxygen Forensic® KeyScout. Added the ability to search by Microsoft Office signatures.
Oxygen Forensic® KeyScout. Added the ability to analyze what files were recently open in Paint and WordPad on Windows.
Oxygen Forensic® KeyScout. Added the ability to extract Steam data from Windows, macOS and GNU/Linux.
Oxygen Forensic® KeyScout. Added the ability to extract BitTorrent data from Windows.
Oxygen Forensic® KeyScout. Added the ability to extract 1Password data from Windows, macOS and GNU/Linux.
Oxygen Forensic® KeyScout. Added the ability to extract Box Drive data from Windows and macOS.
Oxygen Forensic® KeyScout. Added the ability to extract Box Tools data from Windows and macOS.
Oxygen Forensic® KeyScout. Added the ability to extract a web version of Box from Windows, macOS and GNU/Linux.
Oxygen Forensic® KeyScout. Improved support for AD1 format.
Oxygen Forensic® KeyScout. Extended support for the Event log artifact from Windows.
Oxygen Forensic® KeyScout. Updated the ability to extract WhatsApp data from macOS.
Import. Added the ability to import and parse Apple Warrant Returns.
Import. Added the ability to separately import Apple Keychain.
Import. Added the ability to import VDI images of Android extractions.
Import. Added decryption of Android KeyStore keys of UNISOC-based devices.
Import. Added decryption of Android KeyStore keys of MTK-based devices.
Import. Improved support for TEE Samsung Teegris.
Import. Improved support for logical extractions of MD-Next.
Import. Updated support for UFDR reports.
Import. Updated the ability to import and parse Facebook account copy.
Export. Added the ability to run preliminary export.
Export. Added to split RSMFreports by size.
Export. Added indexes for files with the same name.
Export. Updated export of chats.
Applications. Added new features for the Chats View.
Applications. Added data parsing from over 400 new app versions from Apple iOS and Android devices. The total number of supported versions exceeds 45600.
Applications. Messengers. Updated data parsing from Viber (21.8.0) from Apple iOS devices.
Applications. Messengers. Updated data parsing from Discord (212.0) from Apple iOS devices.
Applications. Messengers. Updated data parsing from BiP (3.94.104) from Android devices and BiP (3.94.96) from Apple iOS devices.
Applications. Social Networks. Updated data parsing from Instagram (319.0.0.43.110) from Android devices and Instagram (308.0) from Apple iOS devices.
 
Changes in version 16.3 (June 2024):

Malware. Added the ability to scan extracted files for malware.
Oxygen Forensic® Device Extractor. Added the ability to extract hardware keys and decrypt physical dumps of Android devices based on the SDM665, SDM675, SDM730, and SDM855 chipsets.
Oxygen Forensic® Device Extractor. Added the ability to extract hardware keys and decrypt physical dumps of MTK-based Omix and Reeder devices.
Oxygen Forensic® Device Extractor. Added the ability to extract hardware keys and decrypt physical dumps of UNISOC-based Omix and Reeder devices.
Oxygen Forensic® Device Extractor. Added the ability to extract hardware keys and decrypt physical dumps of devices based on the MT6750, and MT6855 chipsets and running Android 10 and higher.
Oxygen Forensic® Device Extractor. Added the ability to save extracted memory card dumps to E01 format.
Oxygen Forensic® Device Extractor. Added the ability to extract the full file system and keychain via iOS Agent from iPhone 8, iPhone 8 Plus, iPhone X, iPad 5th gen, iPad Pro 12.9-in 1st gen, iPad Pro 9.7-in, iPad 6th gen, iPad 7th gen, iPad Pro 12.9 2nd gen and iPad Pro 10.5 running iOS up to 16.6.1.
Oxygen Forensic® Device Extractor. Added the ability to extract the full file system and keychain via iOS Agent from iPhone 6s, iPhone 6s Plus, iPhone SE, iPhone 7, iPhone 7 Plus, iPad mini 4 and iPad Air 2 running iOS up to 15.8.2.
Oxygen Forensic® Device Extractor. Added the ability to skip the necessity of switching a device to the Recovery mode during checkm8 extraction.
Oxygen Forensic® Device Extractor. Added the instructions on how to switch iPhone devices to the DFU mode using test points during checkm8 extraction.
Oxygen Forensic® Device Extractor. Added the ability to extract communities from WhatsApp and WhatsApp Business via Android Agent.
Oxygen Forensic® Device Extractor. Updated the ability to extract WhatsApp and WhatsApp Business data via Android Agent.
Oxygen Forensic® Device Extractor. Updated the ability to extract Zoom contacts and chats via Android Agent.
Oxygen Forensic® Device Extractor. Updated the ability to extract Telegram contacts via Android Agent.
Oxygen Forensic® Device Extractor. Improved the ability to make screenshots via Android Agent.
Oxygen Forensic® Device Extractor. Improved the ability to extract the full file system and keychain without signing iOS Agent from iPhone Xr - iPhone 13 devices running iOS 15.0 - 15.4.1.
Oxygen Forensic® Device Extractor. Improved the ability to extract the full file system and keychain via checkm8 vulnerability with additional access rights.
Oxygen Forensic® Device Extractor. General interface improvements.
Oxygen Forensic® Cloud Extractor. Added the ability to extract polls using the WhatsApp QR Multi-Device service.
Oxygen Forensic® Cloud Extractor. Added the ability to extract private and group chats from Steam.
Oxygen Forensic® Cloud Extractor. Added the ability to authorize in Steam via QR code.
Oxygen Forensic® Cloud Extractor. Added the new authorization algorithm in Google services.
Oxygen Forensic® Cloud Extractor. Updated the ability to authorize in Steam.
Oxygen Forensic® Cloud Extractor. Updated the ability to authorize in OnlyFans.
Oxygen Forensic® Cloud Extractor. Updated the ability to authorize in My Parrot Cloud.
Oxygen Forensic® Cloud Extractor. Updated the parsing of Telegram cloud chats to ensure accurate visualization in the Chats section.
Oxygen Forensic® KeyScout. Added the ability to search plaintext files by file signature.
Oxygen Forensic® KeyScout. Added new filters for found applications.
Oxygen Forensic® KeyScout. Added the ability to generate bug reports on Windows.
Oxygen Forensic® KeyScout. Added the ability to extract the list of installed applications from NTUSER.dat file from Windows.
Oxygen Forensic® KeyScout. Added the ability to extract the information about packages installed by Pacman on GNU/Linux.
Oxygen Forensic® KeyScout. Added the ability to extract supported applications from the Arch Linux distribution.
Oxygen Forensic® KeyScout. Added the ability to extract Transmission torrent client data from Windows, macOS and GNU/Linux.
Oxygen Forensic® KeyScout. Added the ability to extract passwords from 1Password from Windows, macOS, and GNU/Linux.
Oxygen Forensic® KeyScout. Added the ability to extract passwords from DuckDuckGo browser from macOS.
Oxygen Forensic® KeyScout. Added the ability to extract DuckDuckGo browser data from Windows and macOS.
Oxygen Forensic® KeyScout. Added the ability to extract Microsoft Defender data from Windows.
Oxygen Forensic® KeyScout. Added the ability to extract Microsoft Photos data from Windows.
Oxygen Forensic® KeyScout. Added the ability to extract Microsoft Sticky Notes data from Windows.
Oxygen Forensic® KeyScout. Added the ability to extract Apple Weather data from macOS.
Oxygen Forensic® KeyScout. Added the ability to extract Spark installed from the App Store from macOS.
Oxygen Forensic® KeyScout. Added the ability to extract NordVPN installed from the App Store from macOS.
Oxygen Forensic® KeyScout. Added the ability to extract Facebook Messenger installed from the App Store from macOS.
Oxygen Forensic® KeyScout. Added the ability to extract additional data from AnyDesk from Windows, macOS and GNU/Linux.
Oxygen Forensic® KeyScout. Added the ability to extract additional data from Opera from Windows, macOS and GNU/Linux.
Oxygen Forensic® KeyScout. Updated the ability to extract Facebook Messenger from Windows.
Oxygen Forensic® KeyScout. Updated the ability to extract Mail and Calendar from Windows.
Facial Categorization. Added the ability to select specific files for facial categorization.
Translation. Added support for Romanian, Estonian, Lithuanian, Latvian, Norwegian, Urdu, Nepali and Hebrew languages.
Import. Added the ability to import and parse X (Twitter) archives.
Import. Added the ability to import and parse ULog logs of PX4-based drones.
Import. Added the ability to import physical dumps of Android devices based on the SDM665, SDM675, SDM730, SDM855 chipsets.
Import. Added the ability to import physical dumps of MTK-based devices having TEE MITEE.
Import. Updated the ability to import physical dumps of MTK-based devices having ТЕЕ T6.
Import. Added the ability to parse the additional device information from MD-NEXT extractions.
Import. Updated support for Instagram account copy.
Import. Improved support for UFDR files.
Export. Added the ability to split XLS and XLSX reports by size or number of entries.
Export. Added the ability to group the Faces section data by various criteria.
Applications. Added data parsing from over 600 new app versions from Apple iOS and Android devices. The total number of supported versions exceeds 46200.
Applications. OS artifacts. Added parsing of SD card files (from external.db) from Android devices.
Applications. OS artifacts. Added parsing of Keyboard activity from Apple iOS devices.
Applications. OS artifacts. Added parsing of Control Center activity from Apple iOS devices.
Applications. Messengers. Added data parsing from Element (1.11.6) from Apple iOS devices.
Applications. Messengers. Updated data parsing from Signal (6.37) from Apple iOS devices.
Applications. Messengers. Updated data parsing from WeChat (8.0.48) from Apple iOS devices.
Applications. Social Networks. Updated data parsing from X (Twitter) (10.31.0-release.0) from Android devices and X (Twitter) (10.31.1) from Apple iOS devices.
Applications. Social Networks. Updated data parsing from Facebook (455.0.0.44.88) from Android devices and Facebook (461.0.3) from Apple iOS devices.
Applications. Social Networks. Updated data parsing from BeReal (2.7.0) from Apple iOS devices.
Applications. Web Browsers. Updated data parsing from Google (15.14.36.28.arm64) from Android devices.
Applications. Organizer. Updated data parsing from Huawei Notes from Android devices.
 
Changes in version 16.3.1 (July 2024):
  • Oxygen Forensic® Device Extractor. Added the ability to extract hardware keys and decrypt physical dumps of devices based on the MT6767, MT6797 and MT6891 chipsets and running Android 10 and higher.
  • Oxygen Forensic® Device Extractor. Added the ability to extract the OS version and the last activity time of the devices authorized in WhatsApp and WhatsApp Business accounts.
  • Oxygen Forensic® Device Extractor. Added the ability to extract avatars of group chats and chats within communities via Android Agent from WhatsApp and WhatsApp Business.
  • Oxygen Forensic® Device Extractor. Added the ability to extract the full file system and keychain via iOS Agent from iOS devices based on the A12 - A14, M1 chipsets and having iOS 16.6 - 16.6.1, based on the A15 - A16, M2 chipsets and having iOS 16.5.1 - 16.6.1 and based on the A12X and A12Z chipsets and having iOS 15.2 - 16.6.1.
  • Oxygen Forensic® Device Extractor. Qualcomm EDL: improved support for Xiaomi Redmi Note 8T (SDM665).
  • Oxygen Forensic® Cloud Extractor. Added the ability to extract “Share live location” data from WhatsApp Cloud.
  • Oxygen Forensic® Cloud Extractor. Updated the ability to authorize in OnlyFans via Google.
  • Oxygen Forensic® Cloud Extractor. Updated the ability to authorize in Viber Cloud.
  • Oxygen Forensic® Cloud Extractor. Updated the ability to authorize in Evernote via login/password and Google.
  • Oxygen Forensic® Cloud Extractor. Updated the parsing of Grindr iCloud Backup, Grindr Google Backup, IMO, TamTam, Viber Google Backup, Viber iCloud Backup, Viber Cloud, and WhatsApp QR Multi-device cloud chats to ensure accurate visualization in the Chats section.
  • Oxygen Forensic® KeyDiver. When an encrypted iTunes backup is imported into Oxygen Forensic® Detective, Oxygen Forensic® KeyDiver is automatically opened for a passcode bruteforce.
  • Oxygen Forensic® KeyScout. Added the information about found passcodes to the Encrypted data tab.
  • Oxygen Forensic® KeyScout. Added the ability to cancel memory dump creation on Windows.
  • Oxygen Forensic® KeyScout. Added the ability to collect Apple Music data from Windows and macOS.
  • Oxygen Forensic® KeyScout. Added the ability to collect KeePass data from Windows and GNU/Linux.
  • Oxygen Forensic® KeyScout. Added the ability to collect BlueStacks emulator data from Windows.
  • Oxygen Forensic® KeyScout. Added support for a new encryption type of Viber from GNU/Linux.
  • Oxygen Forensic® KeyScout. Updated the ability to extract the information about folders viewed by the user on Windows.
  • Oxygen Forensic® KeyScout. Improved parsing of EXT4 partitions.
  • Malware. Added the ability to download daily antivirus updates from the customer area.
  • Import. Added the ability to import iCloud Backup included with Apple Warrant Returns.
  • Import. Added the ability to import Snapchat My Data backups in HTML format.
  • Import. Improved support for MTK-based devices with TEE Microtrust.
  • Import. Improved support for UNISOC-based devices with TEE Trusty.
  • Import. Improved support for MTK-based devices with TEE Kinibi.
  • Files. Added the ability to save selected video frames to PNG format.
  • Export. Added the ability to split RSMF reports by number of entries.
  • Export. Added the ability to sort data when exporting it to Load file format from Desktop.
  • Export. Added the ability to set a name for exported attachments and files while exporting to Load file format.
  • Applications. Added data parsing from over 700 new app versions from Apple iOS and Android devices. The total number of supported versions exceeds 46900.
  • Applications. OS artifacts. Added parsing of Samsung media from Android devices.
  • Applications. OS artifacts. Added parsing of Installed applications from Android devices.
  • Applications. Messengers. Added data parsing from Nicegram (1.26.0) from Android devices and Nicegram (1.6.2) from Apple iOS devices.
  • Applications. Messengers. Updated data parsing from Skype (8.108) from Apple iOS devices.
  • Applications. Business. Updated data parsing from Mega (12.0(241080022)(af65996f9b) from Android devices and Mega (12.0) from Apple iOS devices.
 
Changes in version 17.0 (September 2024):

Speech Recognition. Added the ability to recognize and transcribe speech from audio and video files.
Oxygen Forensic® Device Extractor. Added the ability to extract user application data and internal memory data from unlocked Android devices running Android OS 9-14 that have the SPL no later than June 1, 2024.
Oxygen Forensic® Device Extractor. Added the ability to extract data from MTK-based devices with the latest TEE Samsung Teegris.
Oxygen Forensic® Device Extractor. Added the ability to extract the full file system and keychain via checkm8 from iPad mini 4 running iOS 14.8.1 - 15.8.3, iPad 5th gen running iOS 16.4 - 16.7.10 and iPad 6th gen, iPad 7th gen running iOS 16.4 - 16.7.2.
Oxygen Forensic® Device Extractor. Added the ability to extract the full file system and keychain via iOS Agent from iPhone devices based on the A9-A13 chipsets, and iPad devices based on the A8, A8X - A12, A12X, A12Z chipsets running iOS 13.0 - 13.7.
Oxygen Forensic® Device Extractor. Added the ability to extract the full file system and keychain via iOS Agent from iPhone 6s, iPhone 6s Plus, iPhone SE, iPhone 7, iPhone 7 Plus, iPad mini 4 and iPad Air 2 running iOS up to 15.8.3.
Oxygen Forensic® Device Extractor. Accelerated data extraction from iOS devices via iOS Agent, iOS SSH and checkm8 vulnerability.
Oxygen Forensic® Device Extractor. Updated the ability to extract Discord data via Android Agent.
Oxygen Forensic® Cloud Extractor. Added the ability to extract data about video calls from WhatsApp Cloud.
Oxygen Forensic® Cloud Extractor. Updated the ability to extract OneDrive data.
Oxygen Forensic® Cloud Extractor. Updated the ability to authorize in Samsung Health and extract Samsung Health data.
Oxygen Forensic® Cloud Extractor. Significantly improved support for the WhatsApp QR Multi-Device service.
Oxygen Forensic® Cloud Extractor. Updated the parsing of Box file paths.
Oxygen Forensic® KeyDiver. Added the ability to find passcodes to encrypted Android backups.
Oxygen Forensic® KeyDiver. Added the ability to find passcodes to encrypted RAR archives.
Oxygen Forensic® KeyDiver. Added the ability to find passcodes to encrypted MS Office files (Word, Excel, PowerPoint).
Oxygen Forensic® KeyDiver. When an encrypted Android backup is imported into Oxygen Forensic® Detective, Oxygen Forensic® KeyDiver is automatically opened for a passcode bruteforce.
Oxygen Forensic® KeyScout. Added the ability to save an extracted disk image or disk partition to E01 or RAW formats.
Oxygen Forensic® KeyScout. Added the ability to extract passwords from DuckDuckGo browser from Windows.
Oxygen Forensic® KeyScout. Added the ability to extract passwords from KeePass from Windows and GNU/Linux.
Oxygen Forensic® KeyScout. Added the ability to extract Bitwarden data from Windows, macOS and GNU/Linux.
Oxygen Forensic® KeyScout. Added the ability to extract qBittorrent data from Windows, macOS and GNU/Linux.
Oxygen Forensic® KeyScout. Added the ability to extract data from Bitwarden Password Manager web extension from Windows, macOS and GNU/Linux.
Oxygen Forensic® KeyScout. Added support for macOS 15 Sequoia (beta).
Oxygen Forensic® KeyScout. Updated the ability to extract Microsoft Teams data from Windows and macOS.
Translation. Added support for the Korean, Hungarian, Slovenian, Croatian, Telugu and Georgian languages.
Malware. Added the ability to download weekly offline antivirus database updates from the customer area.
Import. Added the ability to decrypt physical images of MTK-based devices running Android 14.
Import. Added the ability to import Huawei backups created with Huawei HiSuite ver. 13.0 and 14.0.
Import. Added the ability to import data extracted by Oxygen Forensic® KeyScout directly into Oxygen Forensic® Detective.
Import. Added the ability to import and parse vCard files.
Import. Improved support for MTK-based devices with TEE Samsung Teegris.
Timeline. Added the ability to filter by device owner’s geo-coordinates and geo-coordinates obtained from third-party sources.
Export. Added the ability to export messages to one file in PDF/PST formats from the Messages section and to PST format directly from applications.
Export. Now Speech and Text recognition results are included in the report.
Export. Added the ability to select the categories to be exported from a contact card.
Export. Added the ability to include the Name and File path fields for Identified faces/Similar images when exporting data from the Faces section.
Export. Added the ability to select the CloudNine/DISCO export templates while exporting to Load file format and the ability to export data to Load file format from the main screen.
Applications. Added data parsing from over 1000 new app versions from Apple iOS and Android devices. The total number of supported versions exceeds 48000.
Applications. Organizer. Updated data parsing from Google Keep (2.2024.29202) from Apple iOS devices and Google Keep (5.24.312.02.90) from Android devices.
Applications. Messengers. Updated data parsing from WhatsApp (2.24.16.76) from Android devices and from WhatsApp (24.16.78) from Apple iOS devices.
Applications. Messengers. Updated data parsing from Telegram (11.0.0) from Android devices.
Applications. Social Networks. Updated data parsing from Instagram (340.0.10) from Apple iOS devices.
Applications. Social Networks. Updated data parsing from Snapchat (12.96.0.42) from Apple iOS devices and Snapchat (12.96.0.42) from Android devices.
Applications. Social Networks. Updated data parsing from VK (8.88) from Apple iOS devices and VK (8.63) from Android devices.
Applications. Social Networks. Updated data parsing from TikTok (35.6.0) from Apple iOS devices.
 
Oxygen Forensic Detective 17.0.0.282 (October 2024):

Oxygen Forensic® Device Extractor. Added the ability to extract iPhone 16 and Apple iOS 18 devices via iTunes backup procedure.
Oxygen Forensic® Device Extractor. Updated the ability to extract WhatsApp and WhatsApp Business data via Android Agent.
Oxygen Forensic® Device Extractor. Fixed the issue when files with characters forbidden on Windows OS were not extracted to a .TAR archive from the /sdcard directory.
Oxygen Forensic® KeyScout. Added the ability to automatically delete previously downloaded debugging symbols after memory analysis is complete.
Oxygen Forensic® KeyScout. Added support for Windows 11 24H2.
Oxygen Forensic® KeyScout. Updated the ability to decrypt messages extracted from WhatsApp Web used in Google Chrome, Microsoft Edge, Opera, Brave, Vivaldi from Windows, macOS and Linux.
Speech Recognition. Added a warning message to inform users about possible issues of using GPU for speech recognition.
Applications. Added parsing of encrypted msgstore-increment*.db.crypt14 files from WhatsApp backup from Android devices.
General. Fixed the issue that occurred when saving data to the .ofbx backup in the Turkish language of the program interface.
 
Changes in version 17.1 (December 2024):

  • Oxygen Forensic Device Extractor. Added automatic detection of connected devices.
  • Oxygen Forensic Device Extractor. Added the ability to manually extract data via Android Agent.
  • Oxygen Forensic Device Extractor. Added the ability to extract Slack data via Android Agent.
  • Oxygen Forensic Device Extractor. Added the ability to extract Telegram scheduled messages via Android Agent.
  • Oxygen Forensic Device Extractor. Added the ability to record sound while making a screen recording of device data.
  • Oxygen Forensic Device Extractor. Extended the list of supported devices.
  • Oxygen Forensic Device Extractor. Updated the ability to extract Firefox data via Android Agent.
  • Oxygen Forensic Device Extractor. Updated the ability to extract Google Chrome data via Android Agent.
  • Oxygen Forensic Device Extractor. Updated the ability to extract Zoom contacts via Android Agent.
  • Oxygen Forensic Device Extractor. Updated the ability to extract Samsung Internet Browser data via Android Agent.
  • Oxygen Forensic Cloud Extractor. Now iCloud Agent is built into iOS Agent in special mode.
  • Oxygen Forensic Cloud Extractor. Updated the ability to authorize in Samsung Cloud Data.
  • Oxygen Forensic Cloud Extractor. Updated the ability to authorize in Samsung Cloud Backup.
  • Oxygen Forensic Cloud Extractor. Updated the ability to authorize in Samsung Secure Folder Backup.
  • Oxygen Forensic Cloud Extractor. Updated the ability to authorize in Telegram and extract Telegram data.
  • Oxygen Forensic Cloud Extractor. Updated the ability to authorize in Zoom.
  • Oxygen Forensic Cloud Extractor. Updated the ability to authorize in Box.
  • Oxygen Forensic Cloud Extractor. Updated the ability to authorize in Google services.
  • Oxygen Forensic KeyDiver. Added the ability to create custom attack templates.
  • Oxygen Forensic KeyDiver. When an encrypted Huawei HiSuite backup is imported into Oxygen Forensic® Detective, Oxygen Forensic KeyDiver is automatically opened for a passcode brute force.
  • Oxygen Forensic KeyDiver. Added the attack settings window.
  • Oxygen Forensic KeyDiver. Added the ability to brute force Windows OS system account passwords using NTLM hashes.
  • Oxygen Forensic KeyDiver. Added the option to pause all attacks using the same hash and hash type if the active attack has brute forced the password.
  • Oxygen Forensic KeyDiver. Added the ability to brute force passwords to decrypt containers and partitions protected with VeraCrypt.
  • Oxygen Forensic KeyDiver. Now attacks are automatically grouped when they use the same hash and hash type or when a group of hashes for password brute forcing is imported from Oxygen Forensic® Detective or Oxygen Forensic KeyScout.
  • Oxygen Forensic KeyScout. Added the ability to extract NTLM hashes from Windows.
  • Oxygen Forensic KeyScout. Added the ability to search by hash sets.
  • Oxygen Forensic KeyScout. Added the ability to extract passwords from Bitwarden from Windows, macOS and GNU/Linux.
  • Oxygen Forensic KeyScout. Added the ability to extract NordPass data from Windows, macOS and GNU/Linux.
  • Oxygen Forensic KeyScout. Added the ability to extract Brave Nightly data from Windows, macOS and GNU/Linux.
  • Oxygen Forensic KeyScout. Added the ability to extract FrostWire data from Windows, macOS and GNU/Linux.
  • Oxygen Forensic KeyScout. Added the ability to extract SSH keys from Windows.
  • Oxygen Forensic KeyScout. Added the ability to extract 7-Zip data from Windows.
  • Oxygen Forensic KeyScout. Added the ability to extract Flatpak data from GNU/Linux.
  • Oxygen Forensic KeyScout. Added support for the new Search Index data storage format for Windows 11.
  • Oxygen Forensic KeyScout. Updated the ability to extract Microsoft Outlook data from macOS.
  • Oxygen Forensic KeyScout. Updated the ability to extract Discord data from Windows, macOS and GNU/Linux.
  • Oxygen Forensic KeyScout. Updated the ability to extract Mozilla Thunderbird data from Windows, macOS and GNU/Linux.
  • Malware. Added the ability to selectively scan files for malware.
  • Malware. Updated SDK Avira used for scanning files for malware.
  • Speech Recognition. Added an improved Large (turbo) speech recognition model and improved support for GPU.
  • General. Added the ability to save hash set binary files in the Hash Set Manager.
  • Import. Added the ability to import physical dumps of MTK-based devices with a simplified encryption algorithm (no TEE).
  • Import. Added the ability to decrypt physical dumps of Samsung Galaxy A32 A325F and Samsung Galaxy A32 SM-A325F devices.
  • Import. Added the ability to import and decrypt physical dumps of Oukitel WP10.
  • Import. Added the ability to import and parse Android virtual device images in VHD and VHDX formats.
  • Import. Added the ability to import and parse ArduPilot drone logs.
  • Import. Added the ability to import and parse drone flight missions in AWM format.
  • Import. Added the ability to import TikTok account data.
  • Import. Added parsing of Google Voice data from Google Takeout.
  • Import. Added free disk space check before import of .ofbx and .ofbr backups.
  • Import. Updated support for MTK-based Android devices having TEE Kinibi.
  • Maps. Added the ability to include map previews in the report.
  • Export. Added the ability to exclude files marked with a specific tag from the report.
  • Export. Added the ability to export video frames marked as Key evidence from the Files section.
  • Applications. Added data parsing from over 890 new app versions. The total number of supported versions exceeds 49100.
  • Applications. OS artifacts. Added parsing of Clipboard from Android devices.
  • Applications. Web Browsers. Added data parsing from Brave Browser (Nightly) (1.73.60) from Android devices.
  • Applications. Finance. Added data parsing from AirCash (5.31.0) from Apple iOS devices and from AirCash (5.31.0) from Android devices.
  • Applications. Cryptocurrency. Added data parsing from Exodus (24.39.7) from Apple iOS devices and from Exodus (24.41.7) from Android devices.
  • Applications. Web Browsers. Updated data parsing from web browsers based on the Blink engine from Apple iOS devices and from Android devices.
  • Applications. Messengers. Updated data parsing from Viber (23.6.1) from Apple iOS devices and from Viber (23.9.1.0) from Android devices.
  • Applications. Messengers. Updated data parsing from Threema (6.3.1) from Apple iOS devices.
  • Applications. Social Networks. Updated data parsing from Instagram (356.0.0.41.101) from Android devices.
 
Назад
Верх Низ