Oxygen Software announces Oxygen Forensic Suite 2.9, a more powerful version of its software for forensic extraction of data from a mobile phone. Version 2.9 includes three new features: extraction of data from iPhone 4; Blackberry IPD Backup Reader, for extraction of data from a Blackberry device backup, including encrypted backups protected by a password; Blackberry IPD Backup Viewer, to examine an original source IPD file in a table view; and Nokia PM Viewer, to view and analyze a physical memory dump of a Nokia phone.
Oxygen Forensic Suite 2.9 adds iPhone 4 to the list of supported handhelds which currently contains more than 1,700 of the most popular cell phones and smart phones from different manufacturers. Now criminal investigators can extract and view forensically important data from the iPhone, including general phone information and SIM-card data; address book; fast dials; calendar events; text notes; incoming, outgoing, and missed calls history, including time and duration; SMS, MMS, and e-mail messages, including messages from custom folders; camera snapshots, video clips, and voice records; files and directories from the phone memory; Skype address book, chats, Skype-to-Skype calls, SkypeOut calls, and SMS messages sent from Skype. In addition, the program extracts data related to Wi-Fi networks that users connected their device to. For each network, it retrieves date and time of the first connection, date and time of the last connection, and shows an approximate geographic location of a network on Google Maps.
Version 2.9 also introduces Blackberry IPD Backup Reader. Much as users can acquire data from a mobile device connected to a PC, they can now extract data from a Blackberry device backup created by Blackberry Desktop Manager and examine contacts, calls, messages, phonebook, calendar, and file system in Oxygen Forensic Suite. Thanks to cooperation with Elcomsoft company, the IPD reader provides decryption and extraction of data from an encrypted backup protected with a password. This new feature complements the ability to extract data from iTunes and DMG backups (file system snapshots of Apple devices) that was introduced in the previous versions of the product. The development team plans to introduce support for extracting backups of other phone brands later this year.
To view an original source IPD file, forensic experts can utilize new Blackberry IPD Backup Viewer, the tool for examining a database in a table view with all fields and values. Earlier, the developers added the SQLite Viewer that allows forensic experts to view and analyze iPhone, Android, and Symbian databases, including deleted data such as contacts, messages, calls, and other forensically important information.
Oxygen Forensic Suite 2.9 also features Nokia PM Viewer, which allows users to view and analyze a physical memory dump of a Nokia phone (PM file). Users can view this data on the level of data blocks, rather than on the logical level.
For more information, visit www.oxygensoftware.com.