Oxygen Forensic® Detective 12.5 also imports and parses complete evidence from Android E01 images to include app data, deleted information, files, contacts, messages, calls, and other artifacts. Currently E01 images of NTFS file systems are supported.
The evidence set will include user data and credentials from the most popular Messengers, Email clients, and Web browsers. Investigators will be able to merge it with other extractions (i.e mobile or cloud) for comprehensive analysis in Files, Social Graph, Timeline and other sections. Once the image is parsed the extraction will be added to the device list in the Oxygen Forensic® Detective interface. To import a PC image, click the Desktop Extractions link on the software Home Screen and follow the instructions. Oxygen Forensic® Detective 12.5 comes equipped with E01 PC and Android image support.
0 kommentar(er)
