The 10 best analytical tools available in Oxygen Forensic® Detective.

Digital forensics tools are important to investigators due to the increasing use of computers and mobile devices by criminals when committing crimes.

Analytical tools are useful in helping to piece together a case while providing in-depth analysis and examination that can be used in court proceedings.

Analytical tools available in Oxygen Forensic® Detective
At Oxygen Forensics we saw the benefit of providing software that not only offered the ability to extract data from digital devices but also provided built-in analytical tools.

In 2010, we introduced Timeline, our first analytics tool. Today we offer 10 analytical tools at no additional cost.

Timeline
Our Timeline section provides a view of all device events in a single list. The Timeline tool allows researchers to view events and geographic coordinates, filter data, and track activity through the activity matrix.

Events
Events that can be viewed include:

In-app chats
calls
Web activity
web connections
Photos
Videos
Calendar events
Events can be viewed for a device or a group of devices, allowing easy identification of common group activities.

Geographic location
The Geographic Locations tab contains the complete list of geographic coordinates from all sources including photos, videos, apps, drone flight logs, and more.

Filter
Sort and filter by date, time, activity frequency, contact, remote party, or other data points to focus on only the most relevant data.

Activity matrix
Additionally, the Activity matrix helps detect when the device was used the most.

Smart filters
This feature is designed to make investigations more efficient and insightful by offering a variety of intuitive filters that help narrow down timeline searches.

Social Graph
The integrated Social Graph provides a convenient platform to explore social connections between a device owner, their contacts, or between devices.

Contacts
Using Social Graph, researchers can identify device owners' closest contacts with a single click. Click on any contact to open a card containing detailed information about the selected contact and all communications between device sources.

Drag and drop
The Social Graph interface is dynamic and agile. Investigators can drag and drop to move, hide or merge contacts while producing a clear view of device and case connections.

Define contact routes
It is also possible to define the shortest path between selected contacts. This capability allows investigators to visually see that the device owner did not speak directly to someone, but instead spoke to a contact, who spoke to another, and then spoke to the identified target.

Image Categorization
Oxygen Forensic® Detective provides the ability to categorize images of different classes:

Aircraft
Alcohol
Chat
Child abuse
Credit cards
Badge
Documents
Drugs
Extremism
Game
Graphic violence
ID
Maps
Doctor
meme
Nakedness
offensive gesture
Pornography
QR/Barcodes
Schematic
Tattoos
Vehicles
Arms
Our Image Categorization tool is available when importing device data and also on previously imported extracts.

Face categorization
Oxygen Forensic® Detective offers investigators the ability to categorize human faces with the facial categorization tool.

The facial categorization tool is available in the Faces section. Unique features include:

Detailed facial analysis (gender, age, accessories)
Detect similar faces and “familiar” people
Multithreaded categorization using CPU and GPU
Support for massive volumes of data.
When researchers use this tool, they will save valuable time looking at thousands of photos or videos in mobile, cloud, or drone extractions.

Maps
Oxygen Forensic® Detective acquires geographic coordinates from all possible sources, including mobile devices, drones, cloud storage, media cards, and imported images.

Once analyzed, the data can be viewed on our Maps, either online or offline.

The Maps module includes the ability to:

Identify frequently visited places on a device
Identify common locations of multiple devices
View a device's movements within specific time periods.
Plays an animated route showing the direction of travel.
Analyze geographic activity in the Activity Matrix

Data search
Oxygen Forensic® Detective allows investigators to search a single device, all devices in a case, or all devices in a database.

Researchers can search by:

Texts
Telephone numbers
Emails
Geographic coordinates
IP addresses
MAC Addresses
credit card numbers
File hashes that include the VIC Project
hexadecimal lists
Regular Expressions
Keywords
face sets
Additionally, there are four (4) ways to perform a search: on parsed data, on files, on file metadata, and on the contents of files such as SQLite databases.

Key evidence
The Key Evidence section displays all records that the investigator has marked as favorites in other sections. This section is where all the entries identified as relevant to a case are located, making data analysis easier and saving valuable time.

Marker
Investigators can flag important evidence on a single device or across multiple devices and later export it to a data report.

Tags
Oxygen Forensic® Detective also offers a number of predefined tags, including: nudity, weapon, guns, important, and many others.

Create labels
Researchers can also create and configure their own tags and export entries to data reports simply by selecting the relevant tags.

Optical character recognition
Optical character recognition (OCR) automatically identifies typed, handwritten, or printed text located within an image and converts it to machine-encoded text. Whether it's a scanned document, a photo of a document, a screenshot of a conversation, or an image with captions, it can be converted to text.

Using the built-in automated OCR module, researchers can easily perform searches for words located in images. This is done by converting images containing text to allow searchable recognizable characters.

This feature is an incredible time saver as investigators no longer need to manually search image data for potential evidentiary material. The OCR tool becomes even more useful when dealing with large backups as it requires little time to recognize and convert all the text from the device's images and screenshots.

Statistics
Oxygen Forensic® Detective offers investigators a Statistics section that displays detailed statistics about the extraction:

activity table
Activity matrix
Top 10 applications with the highest number of communications
10 best groups
Top 10 contacts
First contact
Last contact
Key evidence with labels and notes.

Translation module
The translation module is our latest addition and is available at no additional cost. To start using it, go to your Client Area, download the Oxygen TextTranslate plugin and install it. Once you've installed it, it works offline, so you don't need internet access to use it. The list of supported languages ​​will appear in the Options/Translations menu of Oxygen Forensic® Detective.

The following languages ​​are supported:

Arabic
Belarusian
Bengali
Simplified Chinese
traditional chinese
Dutch
English
Farsi
French
German
Hindi
Italian
Polish
Portuguese
Russian
Spanish
Turkish
Ukrainian
Vietnamese
Translations can be done in the Messages, Timeline and Applications sections.

read it inoxygenforensics.com