Release notes September 2017 Oxygen Forensic® Detective v.9.6

DRONE DATA EXTRACTION EXTENDED MOTOROLA SUPPORT There are over 770,000 registered drones in the United The updated version of Oxygen Forensic® Detec�ve adds States alone and much more all over the world. With the support for more Motorola devices that can be acquired ability of these drones to video, photograph and even via Motorola dump method. Now the following devices transport material it is no wonder law enforcement is are supported: , X Play, E (2015) LTE, G4 Plus, and rushing to obtain valuable data from them. Furthermore, Z (Force, Droid). data from these devices can show al�tude, a direc�on of This breakthrough technology introduced for the first travel, speed, rotor speed, and even facial recogni�on �me in Oxygen Forensic® Detec�ve 9.4.2 enables data data! extrac�on from password-locked Motorola devices. The There is currently no forensic tool available in the market approach covers the latest Motorola devices released that will allow an examiner to analyze data from a drone a�er 2015. The method allows you to bypass any screen storage. This storage could be the on-board internal card, lock password, locked bootloader and installed FRP and external SD card, or other storage space within the drone. gain access to the crucial evidence including applica�ons Oxygen Forensic® Detec�ve can now parse the GPS data and deleted records. loca�ons showing route data in Timeline sec�on. Now the The data extrac�on from Motorola devices is performed examiner can see the track and meta-data like speed, automa�cally with a few manual manipula�ons on the direc�on, and more. In the first release, we are suppor�ng examined device. The built-in Jet Imager module the most popular recrea�onal drones DJI Phantom 3 and significantly speeds up the extrac�on process allowing to Inspire 1. create a physical dump in several minutes.

Oxygen Forensics, Inc 901 N. Pitt St, Suite 100 Alexandria, VA 22314 Tel : 844 537-2537 Fax : 877 462-2134 Release notes September 2017 Oxygen Forensic® Detective v.9.6

APPLICATIONS SIMULTANEOUS ACQUISITION NEW Oxygen Forensic® Detec�ve 9.6 now offers IOS the ability to extract data from several Android devices simultaneously even if the Periscope (1.11.10) same extrac�on method is chosen. KYMS (3.1.1) Previously, the so�ware supported ANDROID simultaneous data acquisi�on from Periscope (1.14) devices running different OS. Now you can save a huge amount of �me by running KYMS (1.1.2) several acquisi�ons of Android devices UPDATED simultaneously. IOS DRUG WORDS DICTIONARY Expedia (17.30) In the new version of Oxygen Forensic® Detec�ve we’ve added the dic�onary of (131.0) drug slang words. Now you can search for Firefox (8.2) drugs during or a�er data extrac�on by Firefox Focus (3.5) selec�ng Drugs keyword list in the Hangouts (18.0.0) Keywords Manager. The list contains several thousands of drug slang words. The Google Duo (16.0) dic�onary can be easily customized—you (1.2017.32101) can add your own words to the list. Google Mail (5.0.170730) IMPROVED VIEWER GroupMe (5.12.3) The updated Oxygen Forensic® Viewer Instagram (11.0) supports import and parsing of .ocb KakaoTalk (6.3.7) backups made in Oxygen Forensic® Cloud Musical.ly (6.0.1) Extractor. Now you can upload and view not only mobile device but also cloud OneDrive (9.0.1) extrac�ons in our portable Viewer. The Outlook (2.37.0) program is available to all the registered Telegram (4.2.1) users in the customer area and requires Twi�er (7.5.1) neither ac�va�on nor registra�on. WeChat (6.5.14) DATA FROM GOOGLE CLOUD Viber (7.4) Oxygen Forensic® Cloud Extractor now acquires SMS and MMS saved from (4.28) Google and Pixel XL devices with Android OS 7.1 to Google cloud as well as calls WhatsApp (2.17.51) saved from Android OS 7.x devices. ANDROID CLOUD ACCESS VIA TOKEN Facebook (137.0.0.24.91) Now you can access more cloud accounts using a token—Samsung cloud, Google Facebook Messenger Bookmarks, Loca�on History, Mail, and My Ac�vity services. Flipboard (4.0.18) Google Duo (15.0.16) 5000+ APPS VERSIONS Google Keep (3.4.841.03.30) We’ve updated data decryp�on and parsing from 200+ new app versions. Oxygen Instagram (10.34) Forensic® Detec�ve 9.6 supports 5000+ app versions in total and once again proves to be a leader in this field! Kate Mobile (42.1)

Viber (7.4.0.9) 400+ 5,000+ 40 16,700+ WhatsApp (2.17.296) unique apps app versions cloud services unique devices

Oxygen Forensics, Inc 901 N. Pitt St, Suite 100 Alexandria, VA 22314 Tel : 844 537-2537 Fax : 877 462-2134