Oxygen Forensic Suite - GETTING STARTED - SME

More documents

Recommendations

Info

Yahoo! Mail Yahoo! Mail section displays multiple mail accounts with contacts including Yahoo! mail and messenger and phonebook as well as all types of messages. Section is available for Apple and Android devices. Foursquare application analyzer allows to examine the user’s most frequently visited venues and locations, view all check-ins including tips and comments, check the list of friends and other important account information: Section is available for Apple and Android devices. Besides the exclusive information shown in Extras section the approach used in Oxygen Forensic Suite 2012offers several significant advantages over other logical forensic tools: Support for Symbian OS smartphones, Window Mobile and BlackBerry devices. The amount of useful data extracted from these devices considerably exceeds the capabilities of other products. User-friendly interface for data analysis. The data is grouped according to its classes. A convenient search and sorting engine and content filtering are implemented. Data extraction from custom SMS folders. Besides standard SMS folders, smartphones permit to create custom SMS folders. For example, for messages of a particular type
or for a certain contact. In such folders the most interesting information is usually stored. Only Oxygen Forensic Suite 2012 has an access to the messages in custom SMS folders. Extraction of information about deleted SMS messages. Even if a message was deleted from a Symbian OS smartphone, the information about it can be extracted! Many other programs can also show deleted messages but on a SIM card only. It is very misleading because the majority of phones and smartphones do not store messages on their SIM cards, using phone memory instead of it Direct access to the data. Access to Windows Mobile devices is possible without ActiveSync/Vista Mobile Center that may change the data in the examined phone. Access to Event Log in Symbian OS smartphones includes the information about GPRS, EDGE, CSD, HSCSD and Wi-Fi activity (besides the standard information about calls). Access to Event Log in Windows Mobile devices. Extraction of contact field labels from Symbian OS smartphones, including the ones changed by the user. Extraction of the fields of the same type with the same attribute from Symbian OS smartphones. The data is fully shown if its types and modifiers coincide with the fields extracted before. Extended information about contacts. The program extracts the information about caller groups and speed dials that can point to the communication frequency between the phone owner and specified contacts. Extraction of the last modification date of contacts and calendar events. Extraction of the message Service Center Time Stamp. This feature is available for all Symbian OS smartphones. Easy device connection. Data extraction is performed via standard cables and adapters. No other expensive equipment is needed. Unique Forensic protocol for access to smartphones, created especially for safe extraction of maximum information. Standard protocols (AT, OBEX, SyncML) used by other software are developed for data synchronization and may change the data of the examined device. Data extraction from exclusive devices, like Vertu and Mobiado. Most of the information above is not accessible via standard communication protocols used by other logical forensic tools - SyncML, OBEX or AT command sets. Besides their limitations these protocols have another big disadvantage – all of them had been developed for information synchronization purposes that does not meet forensic requirements. Oxygen Forensic Suite 2012 uses advanced proprietary protocol developed specially for forensic information extraction and analysis. To implement this protocol we put a small OxyAgent application there. This approach has several benefits: Using our own communication protocol we can be sure that all the personal information is untouched in the device Agent application runs inside a phone and in phone OS therefore it can access much more data than the one available with generic protocols Oxygen Forensic Suite 2012 does not use ActiveSync application to get information from Windows Mobile 5/6 devices so there is no risk that device information can be changed if ActiveSync decides to run synchronization process.
Page 3 and 4: Oxygen Forensic Suite 2012 is mobil
Page 5 and 6: Oxygen Forensic Suite 2012 is distr
Page 7 and 8: You can specify the wizard to enter
Page 9 and 10: To use Oxygen Forensic Suite 2012yo
Page 11 and 12: Important: Different mobile devices
Page 13 and 14: Start OxyAgent application in the p
Page 15 and 16: Select the information to be read b
Page 17 and 18: “Devices” section lists all the
Page 19 and 20: Check the setting before restore pr
Page 21 and 22: “Calendar” section displays all
Page 23 and 24: SMS (even deleted from message fold
Page 25 and 26: Current Oxygen Forensic Suite 2012v
Page 27 and 28: All data can be sorted, filtered an
Page 29 and 30: Web Connections and Location Servic
Page 31 and 32: Applications section shows detailed
Page 33 and 34: An expert can determine the order i
Page 35: Google Calendar Google Calendar sec
Page 39 and 40: Oxygen Forensic Suite 2012 contains
Page 41 and 42: It’s a common situation when you
Page 43 and 44: Hardware and software you need for
Page 45 and 46: To install the drivers from Manufac
Page 47 and 48: Accept OxyAgent installation. After
Page 51 and 52: Where to find drivers Cable drivers
Page 53 and 54: Please note: You can change the pho
Page 55 and 56: After you press Upload button OxyAg
Page 59 and 60: How to connect Nokia and Samsung S6
Page 61 and 62: Then Device Extraction Wizard will
Page 63 and 64: After that you will be offered to u
Page 65 and 66: After that Device Extraction Wizard

Oxygen Forensic Suite - GETTING STARTED - SME

Create successful ePaper yourself

Delete template?

Save as template?