Oxygen Forensics, is a global leader in digital forensics software, enabling law enforcement, government agencies, enterprises, law firms, and service providers to gain critical insights into their data faster than ever before. Specializing in remote and onsite access to digital data from cloud services, mobile and IoT devices, drones, device backups, UICC, and media cards, Oxygen Forensics provides the most advanced digital forensics data extraction capabilities, innovative analytics tools, and seamless collaborative analysis for criminal and corporate investigations to bring insight and truth to data.

Key Features Include :

• WhatsApp chat extraction via iOS Agent public data method
• Geolocations section
• Malware scan in KeyScout
• File-to-app linking
• Key Evidence enhancements

Enhancements of the iOS Agent public data method:

We have incorporated several enhancements to the iOS Agent functionality for extracting publicly available data:

• Added the ability to manually select and extract exported chats from WhatsApp and WhatsApp Business. Chats can be exported either with media files or without them. All iOS devices running iOS 15.1 and later are supported.
• Added the ability to manually select and extract files and folders. In a single request, you can download files from one folder or an entire folder at once. All iOS devices running iOS 12.0 and later are supported.
• Added functionality for extracting reminders and wireless connections data. All iOS devices running iOS 12.0 and later are supported.

New artifacts!

The following new computer artifacts are supported for extraction:

• Event logs of the atop utility from GNU/Linux
• Voice Memos data from macOS
• Zoom Workplace data from GNU/Linux
• Obsidian data from Windows, macOS, and GNU/Linux
• Program Compatibility Assistant data from Windows

Import Updates:

• Added the ability to import and decrypt E01 images of all previously supported encrypted SD cards, including those formatted as Android Adoptable Storage, with a FAT32 file system
• Added the ability to perform selective file analysis when importing memory card dumps
• Updated the import mechanism to support extended timestamps from GrayKey extractions
• Updated the ability to import and parse the binary keychain format for GrayKey extractions
• Updated the import and parsing of data from Facebook Warrant returns

Other Updates:

• Added the ability to filter files and exclude system files for saving in OFBR format
• Implemented tag separation by origin into User tags and Image categorization tags
• Added a new Coordinates column with a pop-up filter in the Messages section
• Added new filters to the advanced search settings in the Search section
• Added cryptocurrency search at data import
• Added the ability to translate data from Burmese, Kannada, Khmer, Malayalam, Marathi, Mongolian, Odia, Somali, and Tagalog languages.

System Requirements:

• Minimum Memory: 32 GB DDR4 RAM
• Processor: Intel Core i7 or higher
• Minimum USB Ports: 2x USB 3.0
• Storage: Minimum 1 TB SSD
• Microsoft Windows 64-bit Operating System
• Dedicated Graphics Card

Additional Updates:

Mobile Forensic Updates:

Automatic device detection improvements – Extended device information is now shown, with enhanced auto-detection of vulnerabilities in the full file system method. The most relevant exploit is prioritized to ensure the best extraction results.

checkm8 extraction updates – New device support includes iPad Pro 12.9” (1st gen), iPad Pro 9.7” (iOS 12.0–16.7.11), iPad 7th gen (iOS 18.0–18.6.2), and all supported iOS devices running iOS 12.0 and above.

Brute Force Module Updates:

Adobe Acrobat PDF decryption – KeyDiver can now brute force encrypted PDF files. Supported Acrobat versions range from 2–11, including PDF 1.1–1.7 (Extension Levels 3 & 8).

1Password account brute force – New ability to recover 1Password account credentials by brute forcing known hashes.

Computer Artifacts Updates:

File carving – JPEG and PDF files can now be extracted from unallocated space on NTFS partitions. Navigation has been simplified, with easier profile configuration for carving rules.

New artifacts – Support added for The Bat! (Windows), Battle.net (Windows), and Imo Messenger (macOS).

OS support – Added compatibility with macOS 26 Tahoe (beta 8).

Search Updates:

Mnemonic phrase search – The Search section now includes a Mnemonic Phrase tab, where users can search for words from mnemonic (seed) phrases and view results as word lists of the defined length. Detect BIP39 phrases in 8 languages (Chinese, Czech, English, French, Italian, Japanese, Portuguese, Spanish) and SLIP39 in English.

Verizon CDR support – Users can now import Verizon call data records and cell tower libraries, with towers, sectors, and beamwidth displayed on Maps.

Applications:

Android parsing updates – Improved parsing of telemetry and system information from Android devices, including app launches, usage history, granted permissions, power events, and default app settings.

Supporting over 35,000 devices for seamless data collection:

With support for over 35,000 devices, our tool ensures you can collect data from nearly any mobile device, no matter the brand or model. Say goodbye to juggling multiple tools—everything you need is in one place. It’s simple, fast, and reliable, so you can focus on getting the insights you need.

Bypassing mobile encryption to access critical data:

Encryption can block access to vital information, but our tool makes it easy to unlock and extract data quickly. With advanced decryption capabilities, you can bypass security measures and access the data you need without delay. Get the critical insights faster, without the barriers.

Accelerating mobile data collection for faster investigations:

The lengthy process of collecting and analyzing mobile data can delay investigations, making it challenging to act quickly when time is critical. Our tool is 5 to 10 times faster than our competitors, ensuring rapid mobile data collection and quicker insights.

Collecting artifacts across Windows, macOS, and Linux:

With each operating system storing data differently, collecting from Windows, macOS, and Linux systems can be a challenge. Our solution simplifies the process, offering seamless data collection across all platforms, ensuring you can gather evidence no matter the system your case involves.

The leading cloud forensic software:

Extract from more cloud services than any other tool on the market. Get the data you need from platforms like WhatsApp, Telegram, iCloud, Google, and more—all in one place.

Activation :

1- Download and install the "Oxygen Forensic Detective 18.2.0.300 setup".
2- Download and extract the "1601_ Act Files_Key_Gen".
3- Replace the original files in the installed folder with the cracked files.
4- Run Oxygen Forensics Detective.
5- The hardware key will be copied to your clipboard.
6- Open the keygen (WLGen_Oxygen.exe) and click on "License Manager."
7- Add a new license with the following information:
        - Customer Name: user
        - Company Name: BlackHat
        - Hardware ID: Paste the copied hardware key
8- Click "Save."
9- Select your user in the list and click "Create License Key."
10- A "user-BlackHat" folder will be created.
11- Open the "user-BlackHat" folder and copy the "Oxygen.dat" file.
12- Paste the "Oxygen.dat" file into the following locations:
        - Installed Oxygen Detective root folder
        - Data folder
        - DeviceExtractor folder
        - Documents folder
        ... and any other sub-folders
13- Copy the "oxydetectivekey.dat" file from the crack zip and paste it here:
        C:/Users/BlackHat/AppData/Roaming/OxygenEngine
        (Use your system username instead of BlackHat)
14- Copy the "Passware" folder from the crack zip and paste it here:
        C:/Users/BlackHat/AppData/Roaming
        (Use your system username instead of BlackHat)
15- Run Oxygen Forensic Detective from your desktop and enjoy!

QualcommEDL_Image_v3_pack.zip – 21.1 MB
Spreadtrum_Image_pack_v3 2023.09.zip – 28.0 MB
Oxygen Forensic Viewer_x64_Setup_16.0.1.121.zip – 129.5 MB
Exynos_Image_pack 2023.05.zip – 194.3 MB
OCR Languages Setup v4.0.0.zip – 408.3 MB

HOW TO ACTIVATE ?

• First, you need to download the zip file from the below link.
• Download and extract the “Activation File“.
• Next, you can unzip all files at c: drive (important).
• Ensure you have “disabled the Antivirus” before running the installation.
• Next, open the folder and install the setup file with some basic instruction.
• Run the shortcut from the desktop “Oxygen Forensic Detective.exe”
• Next, you can install all drivers (included in the tool only need to one-click) if you already installed skip this step.
• Connect the phone and try to do any function.
• Enjoy !!!

Take a Backup: If you are willing to try the above tool, then please take a backup of your personal data from your Android Smartphone or Tablet. As flashing any Firmware or recovery may brick the device.

Credits: The Tool is created and distributed by the developer. So, full credits go to the developer for sharing the tool for free.