This will show you a list of all the cases you’re working on. GrayKey is one of the most recent additions to the list, so these images can now also be imported.Ĭlicking ‘Open Case’ takes you to the case management screen. Supported images include Apple, Android, BlackBerry, Nokia, Windows, UFED, memory card, UICC and drones Oxygen Forensic Detective also supports other companies’ images such as those from XRY, ElcomSoft and Lantern. Importing a backup into Oxygen Forensic Detective is easy – just click ‘Import File’ and it will give you a breakdown by image type. Disabling the screen lock means you can get a logical backup, although LG have now encrypted the user partition by default, so you will get a physical image with no data. It is also possible to disable lock screens on the initial page, specifically with LG devices. Oxygen have also partnered with MITRE to bring Android Jet-Imager into their list of features this allows devices to be imaged in about half the normal tiem.
There is no need to do a chip-off acquisition with the drones, since a full physical image can be acquired through the micro USB port. Oxygen Forensic Detective supports lots of physical device acquisitions, including LG devices, Android dumps, Samsung, MTK, Motorola, and DJI drones, which run on an Android operating system.
Each Extractor runs independently, so you can have several going at once. This is significant because it means you can image a number of devices at one time you are only limited by what your machine can handle. Oxygen’s Extractor tool runs independently of Detective.