New Windows System artifacts include information about logon sessions, system resource usage, and installed updates.

User data collection from GroupMe, Microsoft Mail, and Internet Explorer.

Import and parsing of AccessData AD1 logical images made from Windows, macOS, and Linux computers.

The updated Oxygen Forensic® KeyScout can collect a variety of great, new artifacts. The total number of supported cloud services is 94. The new Oxygen Forensic® Cloud Extractor introduces updated authorization algorithms for SecMail and Amazon Alexa services. Discord cloud extractions will include account info, contacts, chats, channels, and other available data.

If 2FA is enabled, investigators will be sent an SMS or authenticator code. Evidence sets will include account details, contacts, login history, wallet, notifications, chats, posts, and favorites.Īuthorization in Discord is available using login credentials or a token found on Windows and macOS by Oxygen Forensic® KeyScout. If 2FA is set, investigators will receive a code at the connected phone number or email address. To access TikTok data from the cloud, investigators need to use either the phone number, login credentials, or Google or Facebook credentials. Please note, this OxyAgent method is also compatible with WhatsApp, WhatsApp Business, and Signal Messenger, using any unlocked Android device. Investigators can expect the following artifacts: account info, contacts, private chats, group chats, and channels. Once data is collected, import it into Oxygen Forensic® Detective.

To do this, install OxyAgent on a device, choose Discord in the “Extract third-party applications data” menu, and follow the instructions. Oxygen Forensic® Detective v.13.4 will allow Discord data extraction from any unlocked Android device via OxyAgent. In addition to the direct extraction of Discord app data from Apple iOS and Android devices, there is now one more method available in our software. To do this, select the “Physical MTK image” method in Oxygen Forensic Extractor. This means investigators can now bypass screen locks and extract evidence from many more Android devices based on MT6739, MT6737 and MT6580 chipsets. In version 13.4, we’ve added support for the RSEE version and improved support for the T6 version. Previously our software offered physical extraction of MTK-based Android devices with T6 and Microtrust versions of TrustZone. Oxygen Forensic® Detective v.13.4 provides enhanced support for Android devices with MTK chipsets.

Oxygen forensic detective full crack