Previous versions of Oxygen Forensic Suite, the company’s flagship forensic software product, were already able to extract blocks of deleted information from supported devices. The new update adds on-the-fly analysis of recovered data block, extracting and displaying user information that’s been erased from the device. The new Cluster Analysis feature can recover deleted texts and e-mail messages, wiped browsing cache and logs, erased contacts, and cleared call history. Certain restrictions may apply depending on device’s make, model, and usage scenario.

Oxygen Forensic Suite 2011 helps investigators and forensic specialists access and analyze data from a variety of mobile devices such as cell phones, smartphones, communicators, PDAs, and tablet PCs. Oxygen Forensic Suite 2011 currently supports more than 2,500 different models and allows fully automated acquisition and analysis of supported devices.

The unique Timeline feature offers convenient, single-place access to all activities and movements performed by the user arranged by date and time. Investigators can track user location at every moment, build and map their historic routes, and clearly see all activities performed by the user at each location.

Another signature feature of Oxygen Forensic Suite allows investigators performing a global search on all devices ever analyzed with the toolkit. The global search quickly reveals any connections (e.g. common contacts, exchanged calls, texts, or e-mails) between the phone owners.

Oxygen Forensic Suite 2011 guarantees zero-footprint operation, leaving no traces and making no modifications to the content of the devices.

Information Extracted with Oxygen Forensic Suite
Oxygen Forensic Suite extracts basic and extended information stored in the phone and on the SIM card, offering investigators complete and easy access to essential user, system, and application data from a single convenient interface. The phone forensics tool can extract contacts and address books, call and messaging history, calendar events, tasks, notes, and other organizer information. Logins and passwords to Web sites and e-mail accounts can be recovered. Certain deleted text messages can be recovered and displayed.

Oxygen Forensic Suite can access the complete file system of both phone memory and the removable media card, and perform a physical acquisition analysis of available devices, often allowing investigators to recover information that was deleted. Application data including information from installed, pre-installed, and third-party apps is analyzed.

For devices equipped with wireless functions such as Wi-Fi and GPRS, the Wi-Fi traffic, Web connections, and geolocation history are investigated. Other user information such as photos, videos, documents, and Lifeblog data including all events supplemented by geographic coordinates is also extracted.

For more information, visit www.oxygen-forensic.com.