Oxygen Forensic Detective (includes 12 months of updates) lets you to extract most of the information from Nokia, Blackberry, Windows Mobile (PDA), Samsung, Benq-Siemens, Sony-Ericsson, Motorola, Panasonic and Vertu mobile phones.
A special software for Police Departments, Law Enforcement units and all government services that wish to use the power of Oxygen Forensic Suite 2 for investigation purposes. Forensic Edition secures phone data to remain unchanged during extraction and exporting.

GSM-SUPPORT has direct authorization from producer to sell all Oxygen Software products.

• Supports live data acquisition from 11,000+ mobile devices running on iOS, Android, Windows 8, Windows Mobile 5/6, RIM(Blackberry), Symbian, Bada, Chinese MTK chipset, and feature phones.
• Offers advanced Oxygen Forensic® Cloud Extractor – a built-in utility that acquires data from cloud storage services.
• Provides Oxygen Forensic® Maps - built-in utility that works with geo data, is able to find frequently visited places, build routes from user’s data and determine common locations of device owners across multiple device images.
• Supplies Oxygen Forensic® Call Data Expert - built-in utility to import call data records (also known as CDR files) from any wireless provider and analyze connections between callers visually.

You can examine:

• Contacts list (in phone memory as well as at SIM card) including all contact fields available for the specific phone model.
• Incoming/outgoing/missed calls data.
• Calendar events.
• Tasks and to-do items.
• Notes.
• Profile settings.
• Logos (startup, operator, group).
• SMS and MMS messages (including the messages stored in custom folders).
• MMS settings.
• FM stations list.
• Gallery and Flash card files.
• Playlists.
• Java applications and games.
• WAP settings and bookmarks.
• GPRS access points.
• Dictaphone records.

All information can be either viewed using the convenient program interface or exported to many different formats.
. Oxygen Forensic Detective (includes 12 months of updates) has full Unicode support - you can easily view and extract information in any language.

Device Information

Device information section displays complete technical information about the device. This includes Manufacturer, Retail Model Name, Platform and its revision, IMEI, MAC addresses, IMSI, Serial Number, phone number and any other model specific data.

Here experts can find a brief statistics of the device, the number of entries in each section split by data type and quickly move to the needed data.

Section also summarizes and displays user accounts gathered through all data extracted from the device. 

To make device recognizable in the database, forensic experts add device/user photos and brief description of the item. 

Phonebook

Phonebook section contains users' contacts with all its data: name, occupation, phone numbers, addresses, emails, notes.

Depending on the device experts gain access to the private information of the contacts, like birthdays, relatives' names and anniversaries. 

Section provides convenient way to find information using Quick filter. Found contacts will appear immediately once expert starts typing query. Favorites and Birthday Center are the tools that indirectly points to the important contacts.

Experts can customize report layout and then easily print or export all marked or filtered contacts. Important contacts can be marked as Key Evidence and then analyzed separately with additional marked data.

Plist Viewer

Plist files, known as Property List XML Files, contain a lot of valuable forensic information in Apple devices. Browser history, Wi-Fi access points, speed dials, Bluetooth settings, global applications settings, Apple Store settings and even more data can be extracted from .plist files.

While plain-text Plist files have XML-like structure and can be viewed in a text viewer, binary Plist file requires decoding before analysis.

Oxygen Forensic® Plist Viewer offers convenient analyzing of device data:

• Parse plain XML and binary XML files.
• Plist Viewer runs automatically when opens compatible file.
• Shows entries according to its type: string, data, numbers etc.
• Ability to open external files for analysis.
• Export .plist file data in XML format for further analysis by external tools.

Messages

Messages section contains users' correspondence including SMS, MMS, Emails, iMessages and other depending on the device type.

Recovering deleted messages is available for certain types of devices: iOS, Android OS and Symbian OS smartphones.

There are a lot of messages in seized devices usually. Messages section provides convenient way to analyze them: quick filter on toolbar, context filters in grid headers, folders tree view. These tools help exerts find needed data and prepare it for report.

Experts can preview generated report, customize its  layout if needed, and then print or export messages with or without attachments.

Using built-in viewer experts can analyze attachments and technical headers of the message. Each attachment can be saved in a separate file for future analysis.

Navigation

Oxygen Forensic® Suite grants the access to popular Navigation applications and reveals POIs, routes and searches that device user made.

Navigation section in Oxygen Forensic® Suite allows to analyze the places that the device user was looking for, headed to and visited.

Modern smartphones offer a lot of additional features based on geo-services, but searching for a certain place, finding the best route, acquiring current location are still the most usable ones. User can easily find himself on the map, find the place and even build a route with his smartphone.

Oxygen Forensic® Suite allows investigators to analyze all activity that corresponds to these actions. In Navigation section investigators find the sheets of:

• Bookmarks
• Routes history
• Locations history

Once phone user makes a location query, his smartphone stores this data for future needs. And in Oxygen Forensic® Suite investigators can view all the points and locations that suspect checked.

Oxygen Forensic® Suite is the only smart phone forensics software that presents Navigation applications data for detailed analysis.

Oxygen Forensic Maps

Oxygen Forensic® Detective acquires geo coordinates from all possible sources  including: mobile devices, cloud storage, media cards, and imported images.Once analyzed, the data can be viewed within both online or offline maps.

The brand-new Oxygen Forensic® Maps offers advanced analytical capabilities for geo data including: 

• Identify device owner’s frequently visited places 
• Visualize user’s movements within specified period of time
• Pinpoint common locations of several device users
• Smoothly work with large data sets of geo points 

Passware Kit Module

Passware Kit Mobile Module enables straightforward data acquisition and decryption regardless of the data source: smartphone, tablet, cloud service or backup file.

Current version offer the following capabilities:

• acquire full iPhone, iPad and iPod Touch backups from iCloud provided that the Apple ID credentials are known
• recover passwords for: 
  - iTunes backups
  - Android backups
  - Android physical images

The module helps to find passwords with latest algorithms and technologies including distributed processing and GPU acceleration with ATI and NVIDIA boards.

Event Log

Event Log section contains users' voice communication: dialed, received and missed calls. Experts find here call time, duration and remote party.

Recovering deleted calls is available for certain types of devices: iOS and Android OS smartphones.

Making calls is a primary feature for a phone. Event log section provides access to all calls made by the phone user and provides tools to analyze them. These are quick filter on toolbar, context filters in grid headers, date filter on sidebar. These tools help exerts find user calls at a certain period of time, call direction or communication with a contact.

When the call event doesn't have the name of the caller, Oxygen Forensic® Suite looks for this data in Phonebook. If the phone number is found, it displays the name in Event Log and fills the cell background with green.

Calendar & Tasks

Organizer section displays notes, tasks, and calendar entries created or synchronized by device user.

The set of sub-sections and their features depends on the seized device manufacturer and exact model.

Calendar is the most data-rich part of organizer. Events have text label, location, start date, end date, alarm and recurrence. Notes are the entries with large text fields and time stamp. Tasks are the kind of calendar events that have special Done flag to mark the state of the item.

In Oxygen Forensic® Suite experts get access to all these types of data in a convenient sheet-like view. Quick filter and sorting capabilities helps to find and analyse data. Special Time Zones tool converts dates to a local or any other time zone.

Forensic experts can mark the items as Key Evidence with one click, report, and print all or selected entries only.

File Browser

File Browser section is a powerful tool to access and analyze user photos, videos, documents and device databases.

Built-in text, hex, multimedia, SQLite, Plist viewers, Geo-location and EXIF extractors help experts to view files and their properties.

File Browser gives the access to all files extracted from the device in a tree-based structure. Additionally experts can view files in selected only folders, grouped in tabs by type, or in search tabs created when Quick filter was applied.

Oxygen Forensic® Suite automatically extracts Geo-location data from multimedia files and offers shortcut to view the place on the map where the action took place. Additionally, it looks into EXIF headers for specific tags like Make, Model, time stamps which helps forensic experts to determine file origin. Basic data about the file is displayed on the left sidebar, while file attributes and additional tags are available via popup menu.

Section has a two-panel multipurpose viewer, where experts view the file in a raw, hex mode, or run appropriate player for the media file. Additionally, double clicking on a file opens appropriate viewer in a separate window. Databases and configuration files will be opened with built-in Oxygen Forensic® SQLite Viewer and Oxygen Forensic® Plist Viewer.

Investigators can save files, whole folders on PC, mark the items as Key Evidence, print and prepare reports, export Geo data to Google Earth.

Reports

When it comes to solving a crime, reports are one of the most important things for the investigator. Popular file formats and ability to export or print the whole set of data or only important parts helps experts to show the result of their work in the best way.

In Oxygen Forensic Detective forensic experts can export any data from any section. This can be a report of the whole device or several sections or even several entries. Everything depend on the need of the investigator.

We support all popular file formats: Adobe PDF, Microsoft Excel, HTML, Rich Text Format (RTF), and XML. Each format has own best place to apply. For example, PDF is good for printing, while XML can be used by 3rd party data parsers to import data extracted by Oxygen Forensic® Suite.

Reports section is a place where expert can find reports generated for selected device with brief data about the report: date of creation, sections in the report, its path and name. Section also can check if the report was changed after generation and let expert know about it.

Screen Lock Disabler

With locked devices being a top forensic problem we are doing our best to invent new methods to recover digital evidence even in the most challenging cases.

Screen Lock Disabler allows to disable user lock code on Samsung devices based on Android OS and get access to the critical data. The procedure takes several minutes and requires no special knowledge or training. It is enough to have MTP driver and regular USB cable for disabling the lock

How it works:

1. Download and install Screen Lock Disabler.
2. Connect locked device via USB cable to PC.
3. Select the device from the list and press Unlock button.
4. Turn off the device screen and then turn it on. Swipe the screen with your finger to disable the lock.
5. The screen lock will be disabled and you will get access to all the user data.

Where to find:

At the moment Screen Lock Disabler is available to Oxygen Forensic® Detective users.

Skype & Messengers

Oxygen Forensic® Suite supports a lot of mobile messengers like Skype, Facebook, WhatsApp, Viber and others.

Oxygen Forensic® Suite retrieves all available data from messengers. Depending on the application the feature set may vary:

• Chat history with individuals (including unauthorized contacts) and groups
• Contact list with photos, all fields and notes
• Sent SMS text, recipient phone number, timestamp and cost
• Complete calls information: recipient name or phone number; direction; length; time stamp and even cost
• Account details: name, address, phone numbers, e-mail, birthday and other information filled by suspect
• Geo-location where the action took place

Aggregated Contacts

Analyze contacts from multiple sources such as the Phonebook, Messages, Event Log, Skype, chat and messaging applications in Aggregated Contacts.

Section automatically reveals same people in different sources and groups them together in one meta-contact.

When the contacts have no matches, but forensic expert detected that the contacts in various sources belong to one person, he can manually merge these contacts. Later this contact will be used as a single item for Links and Stats analysis.

Section offers quick filter functionality, convenient data sources filter and sorting for faster analysis.

Preparing and printing reports is easy as in every section of Oxygen Forensic® Suite.

Android Rooting

Rooting a device based on Android OS reveals the complete set of user data to the investigator.

Generally this procedure needs certain knowledge and research, but Oxygen Forensic® Suite helps experts to automate this operation.

Rooting procedure is a part Data Extraction Wizard that guides you through the whole process of gaining the root rights to the device. The important benefit of the proprietary method is that the root access will be revoked immediately after rebooting the device. This method makes rooting and further extraction completely forensic and safe.

Android Rooting add-on grants an access to:

• Full file system, stored both on internal memory and memory card
• Application saved data including logins, passwords, history, cache and much more
• Geo-location information for tracking suspect position in the past
• Deleted data in database tables

No 100% successful rooting is guaranteed. The procedure is available for the most of Android devices with versions 1.6 - 2.3.4 and 3.0 - 4.2.2.

Applications

Oxygen Forensic Detective retrieves numerous application data from a mobile device. In the Applications section, forensic experts view the list of pre-installed and user applications with the files created by these programs.

Each application can contain valuable user data, like passwords, logs, history, files and so on.

Section offers the following main features:

• Get logins and passwords to the app
• Find geo-location of the last run
• Inspect all used or created app files
• Know exactly when the app was used
• Access to system and user apps
• Filter apps by a certain term
• Export and print selected items

Many popular applications have a special User Data data tab where investigators find application data categorized and prepared for effective analysis.

Forensic experts can always access source files to learn how Oxygen Forensic Detective gathers information for User Data tab or to analyze applications that were not automatically prepared.

Oxygen Forensic® Suite is the only smart phone forensics software that allows analyzing Applications in such a deep and structured way.

Navigation

Oxygen Forensic Detective grants the access to popular Navigation applications and reveals POIs, routes and searches that device user made.

Skype & Messengers

Oxygen Forensic® Suite supports a lot of mobile messengers like Skype, Facebook, WhatsApp, Viber and others.

Spyware

Oxygen Forensic® Suite can detect spyware apps installed on Android and Apple devices, discover and process their logs and configuration files.

Web Browsers

Oxygen Forensic Detective supports all popular Web browsers for Android OS, Apple iOS and Symbian OS platforms.

Backups import

Oxygen Forensic® Suite Analyst allows to import and parse data from various device backups and images created by sync software or other forensic products.

Oxygen Forensic® Passware® Analyst and Oxygen Forensic® Suite Passware Edition can additionally find passwords that encrypt Apple iOS and Android backups and images.

Supported Apple iOS backups and images: iTunes backup, iCloud backup, non-encrypted Apple DMG image, UFED DMG image, UFED file system backup, UFED Advanced Logical backup, XRY DMG image, decrypted/encrypted Elcomsoft DMG image, decrypted/encrypted Lantern DMG image, Apple tarball backup.

Supported Android OS backups and images: Android backup, Android physical/JTAG image, Android file system tarball backup, UFED physical image, UFED Android file system backup, Nandroid backup (CWM, TWRP).

Supported Windows Phone OS backups: Windows Phone 8 JTAG and My Windows Phone Cloud.

Supported BlackBerry OS backups: BlackBerry IPD, BlackBerry BBB and BlackBerry 10 backup.

Supported Nokia backups: Nokia NBU and Nokia MBK.

Blackberry Backups

BBB and IPD are the Blackberry device backup files made with Blackberry Desktop Manager. These files can be found on a suspect computer or external media like CD, DVD, memory disks and cards etc.

Oxygen Forensic® Suite is able to extract and present forensically important information from these backup files.

iTunes Backup

iTunes backup found on a suspect computer is a regular practice due to the popularity of Apple devices.

Oxygen Forensic® Suite offers experts an easy way to extract suspects' private data from the iTunes backup files.

Windows Phone Cloud

Smartphone users tend to have a backup copy of their data in the cloud, provided by their device manufacturer or a 3rd party. Windows Phone platform has own storage to securely save users' contacts, messages, application data, settings, files and more.

Oxygen Forensic® Suite is the industry-first forensic software that is able to extract data from My Windows Phone cloud.

BlackBerry Backups

BBB and IPD are the Blackberry device backup files made with Blackberry Desktop Manager. These files can be found on a suspect computer or external media like CD, DVD, memory disks and cards etc.

Oxygen Forensic® Suite is able to extract and present forensically important information from backup files and chip-off images. 

Oxygen Forensic® Suite imports and parses all data from BlackBerry 10 Chip-off images. Chip-off technique is considered to be the last-option method to get a device memory image. It can be used to extract crucial evidence when the device is locked or damaged and all other forensic options have been already exhausted.

At the same time Oxygen Forensic® Suite is able to extract and examine data stored in backup files made by a suspect. Opening backup file gives an expert an access to all information stored in it: contacts, calendar, tasks, event log, messages, photos, videos, documents, etc.

After extracting IPD or BBB file, Oxygen Forensic® Suite creates a new phone item just like you've just reading the physical device itself. Analyzing extracted data is completely the same kind of process as if an expert was working with a connected phone. 

Oxygen Forensic® Suite grants an access to the raw data of IPD/BBB file also. Expert can view all the data in a separate Blackberry Source Tables section. It opens data in a table view showing all fields and values of a database file. For the more convenience the tool has a content-dependent field-viewer that is able to present data basin on its type: text, media, etc. 

Oxygen Forensic® Suite became the industry first software with ability to extract data from BlackBerry 10 devices!

Call Data Records

Oxygen Forensic® Call Data Expert is a forensic program that allows importing and analyzing CDR files (Call Data Records) received from mobile service providers regardless of the difference in their column formats and file layouts.

The supported file formats are .xls, .xlsx, .csv. There are no file size limits.

Oxygen Forensic® Call Data Expert conveniently guides through the process of call data records file importing and fields mapping that is required to convert the file into unified format.

Afterwards the processed results can be viewed and analyzed by the expert allowing to build direct and indirect links between callers on the graph. Processed and analyzed results can be saved to external files on PC

Oxygen Forensic® Call Data Expert is available in Oxygen Forensic® Detective at no additional charge.

Watch Oxygen Forensic® Call Data Expert guide.

Download Oxygen Forensic® Call Data Expert help manual.

Chinese Phones Support

Chinese Phones Support enables forensic experts to extract data from popular phone replicas and low-cost devices.

Oxygen Forensic® Suite is able to acquire from Chinese devices important user data like event log, messages, contacts and files.

Chinese-branded phones occupy a major part of the Asian mobile market, and are on the rise in North American, European and international markets due to their low cost and a better value-for-money than offered by traditional manufacturers. In emerging markets, Chinese-branded phones dominate in the low-budget niche. North American and European wireless communication companies often give these low-cost devices away to new customers and prepaid users.

Oxygen Forensic Detective handles a huge variety of devices based on MTK (Mediatek) chipset and grants forensic access to the following user data:

• Basic information. This including IMEI/IMEI2, hardware revision, firmware revision and baseband.
• Phonebook. Retrieve contacts from SIM and phone memory, access groups details.
• Calendar. Supported event types: Meeting, Call, Anniversary, Birthday, Training, Reminder, Notes.
• Call Log Includes dialed, answered and missed calls..
• Messages: SMS and MMS in default folders.
• Files In phone memory and external memory card.

Cloud Data Extraction

Oxygen Forensic® Detective acquires data from more than 15 cloud storages: iCloud contacts and calendar, Google Drive, Google Location History, Live contacts and calendar, OneDrive, Dropbox and Box as well as from a wide range of social media including Twitter and Instagram.

Forensic experts may utilize either account credentials or token to enter the cloud account to acquire the cloud data. Extracted credentials and tokens from a mobile device are organized and displayed in the Passwords section of Oxygen Forensic® Detective.

After the cloud data is acquired it can be viewed in Oxygen Forensic® Detective and merged with other extractions for deep data analysis in Timeline, Social Graph and other analytical tools.

Data Viewers

Various data viewers help experts to analyze extracted data in a convenient way.

Oxygen Forensic® Suite has built-in HEX-viewer, picture viewer, music and video players, text viewer with code page converter, HTML, SQLite and Plist Viewers.

Modern mobile devices create numerous number of files during their life cycle. The very basic tool to open them is HEX viewer that will allow analyzing data in a raw manner. Built-in HEX viewer in Oxygen Forensic® Suite allows experts to search data, make bytes conversions of the selected parts, save files on disk.

In case of multimedia files it is convenient to use built-in media player that will allow to play recorded video and voice messages, and view camera shots. Additionally, forensic experts can view EXIF information and Geo-data if they are available.

For text documents and saved or cached web pages Oxygen Forensic® Suite offers text viewer with code page setup and safe web browser.

SQLite Viewer

SQLite Viewer allows to explore the database files with the following extensions: .sqlite, .sqlite3, .sqlitedb, .db, .db3.

Experts have the access to the actual and deleted data stored in databases created by system and user applications.

Plist Viewer

Plist files, known as Property List XML Files, contain a lot of valuable forensic information in Apple devices. Browser history, Wi-Fi access points, speed dials, Bluetooth settings, global applications settings, Apple Store settings and even more data can be extracted from .plist files.

Dictionaries

Dictionaries section shows all the words ever entered in device messages, notes and calendar.

These are not words from the device system dictionary, they are from unique user dictionary that is created by device owners when using it.

Dictionaries section main features:

• View all words entered by a suspect
• Reveal passwords
• Phrase simulation
• Choose certain language on demand
• Find out each word usage frequency
• Reveal the order words were used
• Filter words by language
• Export and print selected items

Dictionaries section provides a list of words entered by a suspect. Forensic expert can determine the order that the words appeared, how often the word was used, filter and reorder the words in the list.

Phrase simulation feature is a highly valuable tool for an expert. Using it he can suppose the phrases that the suspect typed. This can be a password, address, or even a deleted message.

Global Search

Global Search allows discovering user data in every section of the device.

Tool offers searching for text, phone numbers, emails, geo coordinates, IP addresses, MAC addresses, Credit Card numbers. Regular expressions library is available for more custom search.

Forensic experts can search data in a single device, all devices of the case, or all acquired devices. They can choose the sections where to search the query, apply boolean terms, or chose any of predefined patterns.

Keyword list manager allows creating custom set of terms and perform search for all these terms at once. For example, these can be the lists of names or the set of offensive words and phrases.

Global Search tool saves all results and offers printing and preparing reports for any number of searches.

iTunes Backup

iTunes backup found on a suspect computer is a regular practice due to the popularity of Apple devices. 

Oxygen Forensic® Suite offers experts an easy way to extract suspects' private data from the iTunes backup files.

Oxygen Forensic® Suite is able to extract and examine data stored in backup files made by iTunes. Opening backup file gives an expert an access to all information stored in it: contacts, calendar, messages, photos, videos, documents, etc.

Both password-protected and non-protected backups are supported. If expert knows the password he can just type it, if not Oxygen Forensic® Suite suggests to use a 3rd party tool to collect the password.

After extracting data from the iTunes backup Oxygen Forensic® Suite creates a phone item in the list just like you've just reading the physical device itself. Working with extracted data is completely the same as if you're working with a connected phone. You can browse the data, perform context and global search, export and print reports.

Key Evidence

Key Evidence section offers a clean, uncluttered view of evidence marked as essential by investigators.

Forensic specialists can mark certain items belonging to various sections as being essential evidence, then review them all at once regardless of their original location.

Key Evidence is an aggregated view that can display selected items from Phonebook, Calendar, Messages, Camera shots, Web Connections and Location Services, Applications, as well as other sections available in Oxygen Forensic® Suite. The section offers the ability to review relevant information at a single glance, concentrating one’s efforts on what really matters and filtering out distracting, unimportant data.

Forensic examiners are able to sort, filter and group data for the best viewing results. Tagging and notes makes Key Evidence section even more convenient to use.

Oxygen Forensic Detective is the only one cell phone forensics software that allows investigator to browse all important data in one place.

Links and Stats

Quickly reveal social connections between users of mobile devices under investigation and their contacts.

Links and Stats section provides a convenient tool to explore social connections between device users by analyzing calls, text, multimedia and e-mail messages and Skype activities.

Diagram view with a graphical chart presents a quick overlook of communication circles, allowing forensic experts to determine and analyze suspects’ communications with all details at a glance.

Switching to the table view offers in-depth analysis of the device user’s communication including all contacts, phone numbers, and remote parties. Along with communication duration it produces a concise summary of the forensically important data.

Oxygen Forensic® Suite offers investigators the ability to analyze interactions among users of multiple seized mobile devices. The feature builds and displays a Links and Stats diagram with a chart for multiple devices, clearly visualizing connections between the phones’ users.

Passwords

Passwords section displays logins and passwords extracted from default secure storage like keychain database.

Applications files can also contain this valuable data. Oxygen Forensic® Suite parses them for it and displays nearby

Password recovery is available for iOS and Android devices.

In Apple iOS devices including iPhone and iPad, sensitive information is stored in the keychain. The keychain provides means to securely store data such as passwords to email accounts, Web sites and certain third-party software, as well as other private, financial and sensitive data.

The content is stored securely encrypted with device-specific hardware keys that are unique to each individual device. Oxygen Forensic® Suite adds the ability to access protected content stored in the keychain, extracting and displaying user passwords.

More passwords are hidden in applications files. Passwords section also extracts this data and displays passwords from applications at one place.

Social Graph

Social Graph visualizes complex connections inside crime groups.

This is a highly adjustable workplace that allows forensic experts to review connections between mobile device owners and their contacts, pinpoint connections between multiple device owners, and detect their common contacts.

Oxygen Forensic® Suite builds Social Graph basing on communication activity of device owners. The graph is not static, experts are free to manipulate the way it looks like by moving, hiding and merging contacts.

Investigator can also change the date range to reveal most popular connections in a certain period of time or/and set the minimum number of connections for the contacts to be displayed.

Social Graph contains information about each displayed owner and contact like preferable types of communication, the first and the last date of communications, total time spent in talk and number of messages sent each other.

Additionally, forensic expert can the change layout of the graph using mouse and keyboard shortcuts, view it in full-screen mode, save to a file for future reports.

Spyware

Oxygen Forensic® Suite can detect spyware apps installed on Android and Apple devices, discover and process their logs and configuration files.

The very presence of spyware on the phone can mean the phone user’s activities were monitored, and the phone user has been watched for a certain period of time, with some third-party being well aware of the person’s traveling and communication activities.

Spyware products collect, record and transfer essential information about routine activities of the phone user. Information retrieved from log files created by spyware applications may include application configuration data, the list of running services, application user name, sometimes accompanied with a unique code allowing to detect the app, Cell ID used at the time of data transmission, and GPS logs accompanied with Geo-coordinates and a timestamp. By analyzing spyware logs, forensic specialists may gain access to additional information that could be used at the time of investigation.

SQLite Viewer

SQLite Viewer allows to explore the database files with the following extensions: .sqlite, .sqlite3, .sqlitedb, .db, .db3.

Experts have the access to the actual and deleted data stored in databases created by system and user applications.

SQLite databases can be found in Apple, Android OS devices, Symbian OS Series 60 smartphones and also in Mozilla Firefox, Mozilla Thunderbird, Apple Safari, Opera, Nokia PC Suite and Nokia OVI desktop applications data.

SQLite files contain the information about SMS, notes, calls, applications cache, voice mail information, apps data, etc.

SQLite Viewer for Oxygen Forensic® Suite offers convenient analyzing of device data:

• Shows data in a convenient table view.
• Blocks of deleted data examination.
• Deleted data analysis in one click.
• Opportunity to recover clusters of deleted records.
• Export to RTF, PDF, XML, XLS, СSV, TSV and HTML file formats.
• Built-in HEX viewer.
• Built-in search engine.
• Ability to save big BLOB fields in a file.
• Full Unicode and UTF-8 support.
• Automatic hash calculation in the status bar for analyzed files.
• Grid view cells and lines can be copied to Windows Clipboard.
• Nokia dates conversion to readable view.
• Unix and iOS date conversion to readable view.
• Support for OS X Epoch format conversion
• Multimedia built-in viewers.

Timeline

Timeline allows to view all facts of mobile device usage in one sorted list.

This section organizes all calls, messages, calendar events, geo data and other activities in chronological way, so you can easily follow the conversation history without the need to switch between different sections.

Timeline is available for a single device and for all devices belonging to a case, revealing the complete event list occurred.

Forensic examiners will be able to sort, filter and group phone activity list by dates, people specific phone numbers and geo data activity.

A graphical chart is available to display user activities for selected periods of time. The chart allows grouping all possible mobile device events over different time intervals (from one second to one year) and filtering them by various parameters.

The chart enables forensic experts to easily analyze detailed activities of a single contact or group of contacts at a glance.

Printing and exporting data in popular formats is also available in Timeline section.

Web Browsers

Oxygen Forensic® Suite supports all popular Web browsers for Android OS, Apple iOS, BlackBerry OS and Symbian OS platforms.

Surfing Internet on a mobile device is ordinary today. Mobile devices of all types offer such an ability to their owners. People search for places and directions, buy goods online, monitor their social network accounts and much more.

Oxygen Forensic® Suite allows investigators to extract and examine data in mobile web browsers (preinstalled as well as 3rd party ones) and analyze user activities over the Internet.

The following data is usually available for analysis:

• History
• Cache files
• Cookies
• Bookmarks
• Saved pages and files
• Search history
• Saved login and passwords
• Geolocation

Web browsers offers a variety of features like sorting, filtering, searching entries. Advanced file viewer helps to review cache content in a proper way: play video, sounds, view files in different codepages HEX or Web mode.

Windows Phone Cloud

Smartphone users tend to have a backup copy of their data in the cloud, provided by their device manufacturer or a 3rd party. Windows Phone platform has own storage to securely save users' contacts, messages, application data, settings, files and more.

Oxygen Forensic® Suite is the industry-first forensic software that is able to extract data from My Windows Phone cloud. 

Oxygen Forensic® Suite is able to connect to My Windows Phone cloud using provided Microsoft account email and password. Once the connection is established Oxygen Forensic® Suite starts data acquisition. Current version extracts contacts and messages.

Even having the correct My Windows Phone credentials, experts who are not equipped with Oxygen Forensic® Suite will be unable to access most information stored in the cloud. First of all, not all data is available for browsing even after logging in to the account. Secondly cloud stores information in a complex format, making manual forensic analysis of this data complicated and practically unfeasible. On the other hand, Oxygen Forensic® Suite will extract, parse and classify every bit of user data stored in the cloud.

Like data extraction from a backup file, expert won't need to have the access to the device itself. To extract Windows Phone data it is enough to have My Windows Phone credentials only.

Oxygen Forensic® Suite became the industry first software with ability to acquire data from My Windows Phone cloud.

Web Connections & Locations

Web Connections & Locations section reveals suspects' visited places and routes.

Experts can analyze several sources of Geo data: Wifi connections, IP connections and Locations databases.

With Wi-Fi Connections list forensic experts are able to determine where and when suspect used Wi-Fi internet access (public or even private) and ascertain his location.

Entries in hot spot list have the following parameters: hotspot name (SSID), hotspot BSSID (MAC-address) and RSSI (Signal level), last time when suspect used hotspot. Processing this data Oxygen Forensic Detective acquires geo-coordinates and mini-maps for each location.

IP Connections tab shows all the history of Web connections (Wi-Fi, GPRS, LTE) and their details: MAC and VPN addresses, device and router IPs, DNS name, region, time stamp, etc.

Locations tab represents consolidated.db and cache_encryptedA.db files contents in an extremely convenient way. Initially these files store all the network activity of the device basing on GPS/Cell/Wi-Fi data. Experts can track device movements and determine device owner location basing in Locations data.

Experts can view geographical coordinates and maps directly in Oxygen Forensic Detective or export data to KML format to see the route in Google Earth application. Standard reporting and printing features available.

Current version supports the following models:
Full list of features for below phone models

	1506, 1680 Classic, 2125, 2220 Slide, 2320 Classic, 2323 Classic, 2330 Classic, 2600 Classic, 2605, 2608, 2610, 2626, 2630, 2650, 2660, 2680 Slide, 2690, 2700 Classic, 2710 Navigation Edition, 2720 Fold, 2730 Classic, 2760, 2855, 2865, 3100, 3105, 3108, 3109 Classic, 3110 Classic, 3120 Classic, 3125, 3128, 3152, 3155, 3155i, 3200, 3205, 3208 Classic, 3210, 3220, 3230, 3250, 3300, 3310, 3315, 3320, 3321, 3330, 3350, 3360, 3361, 3390, 3395, 3410, 3500 Classic, 3510, 3510i, 3520, 3555, 3560, 3570, 3580, 3585, 3586, 3586i, 3587, 3587i, 3588i, 3589i, 3590, 3595, 3600 Slide, 3600, 3606, 3608, 3610 Fold, 3610, 3620, 3650, 3660, 3710 Fold, 3720 Classic, 3806, 5000, 5070, 5100, 5110, 5130 XpressMusic, 5130, 5140, 5140i, 5190, 5200, 5210, 5220 XpressMusic, 5228, 5230, 5230, 5230, 5232, 5233, 5250, 5300, 5310 XpressMusic, 5320 XpressMusic, 5330 Mobile TV Edition, 5330 XpressMusic, 5500 Sport, 5510, 5530 XpressMusic, 5610 XpressMusic, 5630 XpressMusic, 5700 XpressMusic, 5730 XpressMusic, 5800 XpressMusic, 6010, 6011, 6011i, 6012, 6015, 6020, 6021, 6030, 6060, 6061, 6062, 6066, 6070, 6080, 6085, 6086, 6088, 6100, 6101, 6102, 6102i, 6103, 6108, 6110 Navigator, 6110, 6111, 6112, 6120 Classic, 6121 Classic, 6122 Classic, 6124 Classic, 6125, 6126, 6131, 6133, 6136, 6150, 6151, 6152, 6155, 6165, 6170, 6175i, 6178i, 6190, 6200, 6208 Classic, 6210 Navigator, 6210, 6212 Classic, 6216 Classic, 6220 Classic, 6220, 6225, 6230, 6230i, 6233, 6234, 6235, 6245i, 6250, 6255, 6260 Slide, 6260, 6263, 6265, 6267, 6270, 6275, 6280, 6282, 6288, 6290, 6300, 6300i, 6301, 6303 Classic, 6303i Classic, 6310, 6310i, 6316s, 6320, 6340, 6340i, 6350, 6360, 6370, 6385, 6500 Classic, 6500 Slide, 6510, 6555, 6560, 6585, 6590, 6600 Fold, 6600 Slide, 6600, 6600i Slide, 6610, 6620, 6630, 6631, 6638, 6650 (smartphone), 6650, 6651, 6670, 6680, 6681, 6682, 6700 Classic, 6700 Slide, 6708, 6710 Navigator, 6720 Classic, 6730 Classic, 6750 Mural, 6760 Slide, 6788, 6788i, 6790 Slide, 6790 Surge, 6800, 6810, 6820, 6820, 6822, 7020, 702T, 7070 Prism, 7088, 7100 Supernova, 7110, 7160, 7190, 7200, 7210 Supernova, 7210, 7230, 7230, 7250, 7250i, 7260, 7270, 7280, 7310 Supernova, 7360, 7370, 7373, 7380, 7390, 7500 Prism, 7510 Supernova, 7600, 7610 Supernova, 7610, 7650, 7700, 7710, 7900 Prism, 8208, 8210, 8250, 8310, 8390, 8600 Luna, 8800 Arte, 8800 Sirocco Edition, 8800, 8801, 8810, 8850, 8855, 8890, 8910, 8910i, 9300, 9300i, 9500, C1-01, C1-02, C2-00, C2-01, C2-01.1, C3-00, C3-01, C3-01m, C5-00, C5-03, C6-00, C6-01, C7 Astound, C7-00, E50, E5-00, E51, E52, E55, E55, E60, E6-00, E6-00.1, E61, E61i, E62, E63, E65, E66, E66, E70, E7-00, E71, E71, E71x, E71x, E72, E73 Mode, E75, E90, N70, N71, N72, N73, N75, N76, N77, N78, N79, N80, N8-00, N81, N82, N85, N86, N90, N91, N92, N93, N93i, N95 8GB, N95, N96, N97 mini, N97, N-Gage QD, N-Gage, T7-00, X2-00, X2-01, X3, X3-01, X3-02, X5-00, X5-01, X5-01.2, X6, X7-00, X7-00.1
	8100, 8110, 8120, 8130, 8230 Flip, 8300, 8310, 8320, 8330, 8350i, 8500, 8520, 8530, 8800, 8820, 8830, 8900, 8910, 9100 Pearl 3G, 9105 Pearl 3G, 9300, 9330, 9500, 9520 or 9550, 9520, 9530, 9630 Tour, 9650 Bold, 9670, 9780, 9800 Torch, 9810, 9850, 9860, Bold Touch, Bold, Flip 8220, IPD
	Generic device, iPad 2 WiFi CDMA, iPad 2 WiFi GSM, iPad 2 WiFi, iPad, iPhone 3G, iPhone 3GS, iPhone 4, iPhone, iPod Touch
	Dell: Aero, Flash, Mini3i, Mini3iX, Mini5, Streak 7 Wi-Fi, Streak 7, Streak, Venue Pro, Venue, XCD28, XCD35; HTC: Aria, ChaChaCha, Click, Desire, Doubleshot, Dream, Droid Incredible 2, Droid Incredible, Eris, EVO 4G, Hero, Icon, Incredible S (Vivo), Incredible S(Vivo), Inspire 4G, Legend, Lexikon (Merge), Magic, Nexus One, Panache 4G (Emerald), Pyramid, Rider, Saga (Desire S), Salsa (Weike), Shooter (ShooterU), Tattoo, Thunderbolt, Vivo (Incredible S), Vivo_w, Wildfire S (Marvel), Wildfire; Motorola: ATRIX 4G, ATRIX, BackFlip, Bravo, CHARM, CITRUS, CLIQ (DEXT), CLIQ 2, DEFY, DEFY+, DEVOUR, DROID 2 Global, DROID 3, DROID X, DROID, FIRE, FLIPOUT, FLIPSIDE, i1, MILESTONE 2, MILESTONE, MOTO A1260, MOTO A1680, MOTO GLAM XT800w, MOTO GLAM, MOTO MB612, MOTO ME525, MOTO ME811, MOTO MT620, MOTO MT870, MOTO QRTY, MOTO XT301, MOTO XT316, MOTO XT531, MOTO XT701, MOTO XT702, MOTO XT711, MOTO XT800, MOTO XT806, MOTO XT882, PHOTON 4G, PRO XT610, QUENCH XT3, QUENCH XT5, QUENCH, SPICE Key, SPICE, TITANIUM, TRIUMPH, XOOM, XT860 4G; Philips: T910 White, V808 Black, V900 Black, V900 Silver, V900 White, V900; Samsung: Acclaim, Admire, Behold II, Captivate Glide, Captivate, Conquer 4G, Continuum, Dart, DoubleTime, Droid Charge, Epic 4g, Exhibit 4G, Fascinate, Galaxy 3, Galaxy 551, Galaxy Ace, Galaxy Apollo, Galaxy Europa, Galaxy Fit, Galaxy Gio, Galaxy Lite, Galaxy Mini, Galaxy Neo, Galaxy Note, Galaxy Pop, Galaxy Portal, Galaxy Prevail, Galaxy Pro, Galaxy Q, Galaxy R, Galaxy S Hoppin, Galaxy S i909, Galaxy S II 4G, Galaxy S II Epic 4G Touch, Galaxy S II Skyrocket, Galaxy S Plus, Galaxy S scLCD, Galaxy S Wi-Fi 4.0 (G1), Galaxy S Wi-Fi 5.0 (G70), Galaxy SII, Galaxy Tab 10.1 (Verizon 4G LTE), Galaxy Tab 10.1 (Wi-Fi Only), Galaxy Tab 7.0 (ATT), Galaxy Tab 7.0 (CDMA), Galaxy Tab 7.0 (Sprint), Galaxy Tab 7.0 (T-Mobile), Galaxy Tab 7.0 (Wi-Fi Only), Galaxy Tab 8.9 (Wi-Fi Only), Galaxy Tab, Galaxy Y, Gem, Giorgio Armani, Gravity SMART, GT-I5700 Galaxy Spica, GT-i5800L Apollo, GT-I7500 Galaxy, GT-I9000 Galaxy S, Infuse 4G, Instinct Android, InstinctQ, Intercept, Mesmerize, Moment 2, Moment, Nexus S (Indian), Nexus S (T-Mobile), Nexus S 4G (CDMA), Nexus S, Saturn, Showcase, SHW-M100S Galaxy A, Stratosphere Galaxy S, Transfix, Transform, Vibrant; Sony Ericsson: A8i, Live with Walkman, SO-01B, SO-01C Sakura Pink, SO-01C, Xperia Active, Xperia arc S, Xperia arc, Xperia mini pro, Xperia mini, Xperia neo, Xperia play SO-01D, Xperia play, Xperia X10 mini pro, Xperia X10 mini, Xperia X10a, Xperia X10i, Xperia X8; T-Mobile: G1, G2, myTouch 3G, Pulse; View the full list of supported Android-based devices
	Acer: Acer Windows Mobile, beTouch E100, beTouch E101, beTouch E200, C510, C530, C531, DX650, F900, n300, N310, n311, n320, n321, neoTouch P300, neoTouch P400, neoTouch S200, NeoTouch; Asus: Asus Windows Mobile, Lamborghini ZX1, M530w, M536, M930, Mars II, MyPal A626, MyPal A632, MyPal A636, MyPal A636N, MyPal A639, MyPal A686, MyPal A696, P305, P320, P525, P526, P527, P535, P550, P552w, P560, P565, P735, P750; Cingular: 2125, 3125, 8125, 8500, 8525, Cingular Windows Mobile; Eten: Eten Windows Mobile, G500, G500+, Glofiish M750, Glofiish M800, Glofiish M810, Glofiish V900, Glofiish X500, Glofiish X500+, Glofiish X600, Glofiish X610, Glofiish X650, Glofiish X800, Glofiish X900, M550, M600, M600+; HTC: Advantage X7500, Advantage X7501, Advantage X7510, Apache, Artemis, Athena, Atlas, Breeze, Cavalier, Dash 3G, Elf, Erato, Excalibur, Faraday, Galaxy, Gene, HD Mini, HD2, Herald, Hermes, HTC Windows Mobile, Imagio, Kaiser, Libra, Love, MAX 4G, Mogul, Monet, Mteor, Muse, Nike, Omni, Oxygen, Ozone, P3300, P3400, P3470, P3600, P4350, Panda, Pharos, Prophet, Pure, Qilin, Raphael, S1200, S310, S620, S630, S650, S710, Sedna, Sirius, Snap, Star Trek, Tilt 2, Titan, Tornado Noble, Tornado Tempo, Tornado, Touch CDMA, Touch Cruise P3650, Touch Cruise, Touch Cruise2, Touch Diamond P3700, Touch Diamond, Touch Dual, Touch P3452, Touch Pro, Touch Pro2, Touch Viva 2223, Touch, Trinity, TyTN, Tytn-II, Universal, Volans, Vox, Whitestone, Wings, Wizard; i-mate: 810-F, i-mate Windows Mobile, Jama 101, Jama 201, Jama, Jamin, JAQ, JAQ3, JAQ4, JasJam, JasJar, K-Jam, KJAR, PDA-L, PDA-N, SmartFlip, SP5, SP5m, SP6, SPjas, SPL, Ultimate 5150, Ultimate 6150, Ultimate 7150, Ultimate 8150, Ultimate 8502, Ultimate 9150, Ultimate 9502; Motorola: A3000, A3100, ES400, Franklin, i930, MC35, MC55, MC9000, MC9090-G, MC909X-K, MC909X-S, MOTO Q, MOTO Q11, MOTO Q8, MOTO Q9c, MOTO Q9h, MOTO Q9m, Motorola Windows Mobile, Norman, Q9; O2: O2 Windows Mobile, XDA Argon, XDA Atom Exec, XDA Atom Life, XDA Atom Pure, XDA Atom, XDA Cosmo, XDA Exec, XDA Flame, XDA Graphite, XDA IQ, XDA mini S, XDA Neo, XDA Nova, XDA Orbit, XDA Orion, XDA Phone, XDA Stealth, XDA Terra, XDA Trion, XDA Zinc; Orange: Orange Windows Mobile, SPV C100, SPV C200, SPV C600 Superclub Edition, SPV C600, SPV C700, SPV E600, SPV E610, SPV E650, SPV F600, SPV M3000, SPV M3100, SPV M5000, SPV M600, SPV M650, SPV M700; Palm: Palm Windows Mobile, Treo 500, Treo 700w, Treo 700wx, Treo 750, Treo 750v, Treo 800w, Treo Pro; Psion Teklogix: Ikon, Psion Teklogix Windows Mobile, WORKABOUT PRO 3 C, WORKABOUT PRO 3 S QWERTY, WORKABOUT PRO 3 S, WORKABOUT PRO G2, WORKABOUT PRO; Qtek: 8300, 8310, 8500, 8600, 9000, 9100, 9600, G100, G200, Qtek Windows Mobile, S200, S310; Verizon Wireless: PN-820, SMT5800, Verizon Wireless Windows Mobile, XV6800, XV6900; Vodafone: 1210, V1240, v1640, VDA II, VDA IV, Vodafone Windows Mobile, VPA Compact GPS, VPA Compact II, VPA Compact III, VPA Compact IV, VPA Compact s, VPA III, VPA IV; View the full list of supported Windows Mobile phones
	Acclaim, Admire, Amoled, B7300 Omnia Lite, B7320 Omnia Pro, B7330 Omnia Pro, B7610 Omnia Pro, B7620 Armani 2, B7620 Armani, Behold II, BlackJack II, Captivate Glide, Captivate, Conquer 4G, Continuum, Dart, DoubleTime, Droid Charge, Epic 4g, Epix, Exec, Exhibit 4G, Fascinate, Galaxy 3, Galaxy 551, Galaxy Ace, Galaxy Apollo, Galaxy Europa, Galaxy Fit, Galaxy Gio, Galaxy Lite, Galaxy Mini, Galaxy Neo, Galaxy Note, Galaxy Pop, Galaxy Portal, Galaxy Prevail, Galaxy Pro, Galaxy Q, Galaxy R, Galaxy S Hoppin, Galaxy S i909, Galaxy S II 4G, Galaxy S II Epic 4G Touch, Galaxy S II Skyrocket, Galaxy S Plus, Galaxy S scLCD, Galaxy S Wi-Fi 4.0 (G1), Galaxy S Wi-Fi 5.0 (G70), Galaxy SII, Galaxy Tab 10.1 (Verizon 4G LTE), Galaxy Tab 10.1 (Wi-Fi Only), Galaxy Tab 7.0 (ATT), Galaxy Tab 7.0 (CDMA), Galaxy Tab 7.0 (Sprint), Galaxy Tab 7.0 (T-Mobile), Galaxy Tab 7.0 (Wi-Fi Only), Galaxy Tab 8.9 (Wi-Fi Only), Galaxy Tab, Galaxy Y, Gem, Giorgio Armani, Gravity SMART, GT-B7300, GT-B7330, GT-B7610, GT-B7620, GT-C6625, GT-I5700 Galaxy Spica, GT-i5800L Apollo, GT-I7110, GT-I7500 Galaxy, GT-I8000 Omnia II, GT-I8150, GT-I9000 Galaxy S, i910 Omnia I, Infuse 4G, INNOV8 (I8510), Instinct Android, InstinctQ, Intercept, Mesmerize, Moment 2, Moment, Nexus S (Indian), Nexus S (T-Mobile), Nexus S 4G (CDMA), Nexus S, OMNIA HD, Omnia, Propel Pro, Samsung Windows Mobile, Saturn, SCH-I760, SCH-I770, SCH-I910, SCH-I920, SCH-M490, SCH-M495, SCH-M710, SCH-M715, SCH-M720, SCH-M7200, SCH-U350 Smooth, SGH-A137, SGH-A226, SGH-A227, SGH-A237, SGH-A26A, SGH-A437, SGH-A516, SGH-B110, SGH-B110L, SGH-B130, SGH-B130S, SGH-B138, SGH-B210, SGH-BC01, SGH-C160, SGH-C160B, SGH-C160G, SGH-C161, SGH-C165, SGH-C168, SGH-C168B, SGH-C180, SGH-C280, SGH-C288, SGH-C327, SGH-C420, SGH-C425, SGH-C426, SGH-C450, SGH-C458, SGH-CC03, SGH-D488, SGH-D500, SGH-D500E, SGH-D508, SGH-D510, SGH-D600, SGH-D600E, SGH-D608, SGH-D610, SGH-D618, SGH-D700, SGH-D710, SGH-D720, SGH-D728, SGH-D730, SGH-D820, SGH-D820E, SGH-D828, SGH-D828E, SGH-D888+, SGH-D900, SGH-D900i, SGH-D908, SGH-D908i, SGH-E100, SGH-E108, SGH-E1110, SGH-E200, SGH-E200B, SGH-E208, SGH-E208B, SGH-E236, SGH-E250, SGH-E250D, SGH-E250i, SGH-E250W, SGH-E251, SGH-E251C, SGH-E256, SGH-E258, SGH-E258D, SGH-E330, SGH-E330C, SGH-E330N, SGH-E335, SGH-E338, SGH-E340, SGH-E348, SGH-E350, SGH-E358, SGH-E360, SGH-E368, SGH-E370, SGH-E370L, SGH-E378, SGH-E380, SGH-E388, SGH-E390, SGH-E398, SGH-E420, SGH-E428, SGH-E480, SGH-E488, SGH-E500, SGH-E508, SGH-E590, SGH-E598, SGH-E630, SGH-E630C, SGH-E638, SGH-E640, SGH-E648, SGH-E690, SGH-E698, SGH-E700, SGH-E700A, SGH-E708, SGH-E730, SGH-E736, SGH-E738, SGH-E740, SGH-E746, SGH-E747, SGH-E748, SGH-E750, SGH-E758, SGH-E760, SGH-E768, SGH-E780, SGH-E788, SGH-E800, SGH-E800C, SGH-E808, SGH-E820, SGH-E830, SGH-E838, SGH-E840i, SGH-E848i, SGH-E890, SGH-E898, SGH-F110, SGH-F118, SGH-F150, SGH-F158, SGH-F250, SGH-F250L, SGH-F258, SGH-F260, SGH-F265, SGH-F268, SGH-F270, SGH-F270L, SGH-F278, SGH-F480L, SGH-F480V, SGH-F488E, SGH-G600, SGH-G608, SGH-G618, SGH-G808E, SGH-G810, SGH-i200, SGH-i310, SGH-i320, SGH-i400, SGH-i450, SGH-i520, SGH-i550, SGH-i560, SGH-i570, SGH-i600, SGH-I607, SGH-I617, SGH-I627, SGH-I637, SGH-i710, SGH-i718, SGH-I718+, SGH-I720, SGH-I728, SGH-i740, SGH-I750, SGH-i760, SGH-i780, SGH-I858, SGH-i900 (WITU), SGH-I900 WiTu, SGH-I907, SGH-J150, SGH-J158, SGH-J210, SGH-J218, SGH-J700, SGH-J700L, SGH-J700V, SGH-J706, SGH-J708, SGH-J708C, SGH-J808E, SGH-L250, SGH-L258, SGH-L310, SGH-L318, SGH-L600, SGH-L608, SGH-L750, SGH-L870, SGH-M110, SGH-M120, SGH-M130L, SGH-M140, SGH-M150, SGH-M158, SGH-M3510, SGH-M610, SGH-M618, SGH-P180, SGH-P200, SGH-P220, SGH-P240, SGH-P260, SGH-P780, SGH-P788, SGH-P850, SGH-P858, SGH-P906, SGH-S500, SGH-S508, SGH-T101, SGH-T101G, SGH-T109, SGH-T209, SGH-T219, SGH-T229, SGH-T301, SGH-T309, SGH-T319, SGH-T329, SGH-T329, SGH-T336, SGH-T339, SGH-T409, SGH-T429, SGH-T439, SGH-T459, SGH-T509, SGH-T619, SGH-T709, SGH-T729, SGH-T739, SGH-T809, SGH-U708E, SGH-U808E, SGH-U900L, SGH-U908E, SGH-X100, SGH-X108, SGH-X437, SGH-X460, SGH-X490, SGH-X495, SGH-X497, SGH-X540, SGH-X550, SGH-X560, SGH-X560L, SGH-X566, SGH-X576, SGH-X600, SGH-X600A, SGH-X608, SGH-X620, SGH-X628, SGH-X640, SGH-X648, SGH-X650, SGH-X658, SGH-X670, SGH-X678, SGH-X690, SGH-X698, SGH-X700, SGH-X708, SGH-Z600, Showcase, SHW-M100S Galaxy A, SPH-i325, SPH-I350, SPH-M7350, SPH-M8400, Stratosphere Galaxy S, Transfix, Transform, Vibrant, WiTu Pro
	BenQ Windows Mobile, E72, P30, P31, P51, SX1
	550im, 658c, 901a, A8i, C510, C510a, C702a, C702c, C702i, C901, C902, C902c, C903, C903a, C905, C905a, C905c, D750i, K758c, F100i Jalou by Dolce Gabbana, F100i Jalou, F500i, G502, G502c, G700, G700c, G700i Business Edition, G702, G705, G705a, G705u, G900, J10, J105a (Naite), J105i (Naite), J108a Cedar, J108i Cedar, J10i2 Elm, J20 Hazel, J20i Hazel, K500c, K500i, K506c, K508c, K508i, K510i, K510c, K530i, K550i, K550c, K600i, K608i, K610i, K618i, V630i, K630i, K660i, K700c, K700i, K750i, K750c, K770i, K790a, K790i, K790c, K800i, K810i, K818c, K850a, K850i, K858c, Live with Walkman, M1a Aspen, M1i Aspen, M600i, M608c, P1c, P1i, P800, P802, P900, P908, P910a, P910c, P910i, P990i, S302, S500i, S700c, S700i, S710a, Satio U1a, Satio U1i, SO-01B, SO-01C Sakura Pink, SO-01C, Sony Ericsson Windows Mobile, T226, T228, T230, T290c, T290i, T300, T302, T310i, T312, T610, T618, T630, T650i, T68, T68i, T68ie, T700, T707, T707a, T715, T715a, U100a Yari, U100i Yari, U10a Aino, U10i, U5a Vivaz, U5at Vivaz, U5i Vivaz, U8a Vivaz Pro, U8i Vivaz Pro, V600i, V640i, V800, V802SE, Z800i, W20 Zylo, W200i, W200c, W20i Zylo, W300i, W300c, W350, W350a, W380a, W380i, W395, W508, W518a, W550i, W550c, W580i, W580c, W595, W600a, W600c, W600i, W610i, W610c, W660i, W700i, W700c, W705, W710i, W710c, W715, W760c, W760i, W800i, W800c, W810i, W810c, W830i, W830c, W850i, W880i, W888c, W890i, W900i, W902, W908c, W910i, W950i, W958c, W960i, W980, W995, W995a, Xperia Active, Xperia arc S, Xperia arc, Xperia mini pro, Xperia mini, Xperia neo, Xperia play SO-01D, Xperia play, XPERIA X1, Xperia X10 mini pro, Xperia X10 mini, Xperia X10a, Xperia X10i, XPERIA X1a, Xperia X2, Xperia X2a, Xperia X5 Pureness, Xperia X8, Z1010, Z310a, Z310i, Z500a, Z520a, Z520i, Z520c, Z525a, Z530i, Z530c, Z550i, Z550c, Z555a, Z555i, Z558i, Z558c, Z600, Z608, Z610i, Z710i, Z710c, Z750i, Z770i, Z780i
	A1000, A1010, A3000, A3100, A810, A845, A920, A925, ATRIX 4G, ATRIX, BackFlip, Bravo, C380, C650, C980, CHARM, CITRUS, CLIQ (DEXT), CLIQ 2, DEFY, DEFY+, DEVOUR, DROID 2 Global, DROID 3, DROID X, DROID, E1000, E1070, E380, E398, E550, E770, ES400, FIRE, FLIPOUT, FLIPSIDE, Franklin, i1, i930, L2, L6, L6i, MC35, MC55, MC9000, MC9090-G, MC909X-K, MC909X-S, MILESTONE 2, MILESTONE, MOTO A1260, MOTO A1680, MOTO GLAM XT800w, MOTO GLAM, MOTO MB612, MOTO ME525, MOTO ME811, MOTO MT620, MOTO MT870, MOTO Q, MOTO Q11, MOTO Q8, MOTO Q9c, MOTO Q9h, MOTO Q9m, MOTO QRTY, MOTO W388, MOTO XT301, MOTO XT316, MOTO XT531, MOTO XT701, MOTO XT702, MOTO XT711, MOTO XT800, MOTO XT806, MOTO XT882, MOTO Z9 (Z9N), MOTO ZN200, MOTOACTV W6, MOTOKRZR K1, MOTOKRZR K3, MOTOPEBL U3, MOTOPEBL U6, MOTORAZR maxx V6, MOTORAZR V3 (CLDC 1.0), MOTORAZR V3 (CLDC 1.1), MOTORAZR V3, MOTORAZR V3e, MOTORAZR V3i, MOTORAZR V3im, MOTORAZR V3r, MOTORAZR V3re, MOTORAZR V3t, MOTORAZR V3v, MOTORAZR V3x, MOTORAZR V3xx, MOTORAZR2 V8, MOTORAZR2 V9, MOTORAZR2 V9x, MOTORIZR Z3, MotoRizr Z8, MOTOROKR E1, MOTOROKR E8, MOTOROKR EM28 (EM330), MOTOROKR EM30, Motorola Windows Mobile, MOTOSLVR L7, MOTOSLVR L72, MOTOSLVR L7i, L7e, MOTOSLVR L9, MOTOZINE ZN5, Norman, PHOTON 4G, PRO XT610, Q9, QUENCH XT3, QUENCH XT5, QUENCH, ROKR EM25 (MOTO EM325), SPICE Key, SPICE, T720, T720i, T721, T725, TITANIUM, TRIUMPH, V1050, V1100, V180, V195, V197, V220, V300, V360, V400, V500, V550, V551, V600, V620, V635, V80, V975, V980, VE538, W230, W270, W490, XOOM, XT860 4G, Z10
	X700, X800
	Ascent 2004, Ascent M 2006, Ascent Ti, Constellation, Signature 2002, Signature 2006, Signature 2008

The list of supported models is constantly growing.

Oxygen Forensic Detective is generally recognized in police departments and law enforcement units of many countries: USA, United Kingdom, Germany, Netherlands, Australia, Finland, Norway, Sweden and others.
Oxygen Forensic Detective works under Microsoft Windows 2000, Windows XP and Windows Server 2003 operating systems family.
Supported connection types: DAU-9P cable, any technological F-BUS cable, DLR-3P cable, DLR-3P cable, DKU-5 cable, DKU-2 cable, CA-42 cable, CA-53 cable, CA-70 cable, DKE-2 cable, Infrared adapter, Bluetooth adapter.

Set includes:

• Oxygen Forensic Detective
• license for 1 computer delivered via e-mail
  
• free updates and technical support for 1 year since date of purchase