Oxygen Software updates Oxygen Forensic Suite 2012, the company’s flagship mobile forensic tool, offering investigators a greatly improved experience with more information accessible in easier ways. The newly added Spyware section allows analyzing logs and activities performed by common spyware applications, and allows accessing chunks of data that would be otherwise inaccessible to an investigator.

• Added support for 1000+ new devices based on Android OS, Symbian OS and Mediatek chipsets. The total number of supported devices is now 5200+.
• Added support for Amazon Kindle Fire based on Android OS.
• Added support for iOS 5.1.1.
• Added the Passwords section. The new section displays passwords obtained frоm the keychain-backup.plist file from iTunes backups and iOS devices. Available in the Analyst edition.
• Added the Spyware group. It allows detecting spyware applications installed in the acquired devices.
• Spyware. Added support for Mobistealth Lite for Android OS deices. It allows analyzing detected spyware configurations and logs. Available in Analyst license with Android rooting add-on.
• Spyware. Added support for FlexiSPY Lite for Android OS devices. It shows spyware configurations and logs. Available in Analyst license with Android rooting add-on.
• Spyware. Added support for Mobile Spy for Android OS devices.  It displays spyware configurations and GPS logs. Available in Analyst license with Android rooting add-on.
• Messages, Event Log. Added support for recovered iOS messages and calls. Deleted messages, iMessages, calls and Facetime calls can now be shown. Available in the Analyst edition.
• Phonebook, Messages. Added support for Blackberry Messenger contacts and correspondence. Available in Analyst license.
• Key Evidence, Aggregated Contacts. Added exporting and printing.
• Added the Source Blackberry Tables section. The section visualizes uploaded BBB backups or data extracted from a Blackberry device in IPD Viewer. Available in Analyst license.
• Timeline. Added the Geo items bookmark. It collects all geo data from the device.
• Time zone settings. Added support for Symbian OS 9.2 and higher as well as  Windows Mobile OS devices.
• Added the Organizer group that includes Calendar, Tasks and Notes sub-sections.
• Applications. Now Categories panel can be hidden.
• Applications. Added the “filter by selected cell” option to allow filtering data by the content of a selected cell.
• Export. Added  table view XLS file format supported by Oxygen Forensic Suite versions 4.1.1. and older.
• Global Search. Accelerated grid drawing when “Highlight found results” is activated.
• Skype. Accelerated loading of 2000+ chat messages.
• Aggregated Contacts. Improved contact merging engine. 
• Key Evidence, Applications. Interface improvements.
• General. Improved support for devices based on the Mediatek chipset.
• Interface. Fixed a problem when a separate window of File Browser viewer, Global search and Communication Statistics diagram appeared in the foreground when switching to another section or device.

Stay tuned to smartphone forensics with Oxygen Software! Stay tuned to success!

The first Standard license training and certification will be held in June 2012, Myrtle Beach, USA. After the training all the attendees receive unique official certificates and prolonged license keys containing information about the certification that is displayed in Oxygen Forensic Suite interface and reports.

About Advanced iOS and Android Forensic Training

Advanced iOS Forensic Training and Android Forensic Training programs are designed for experienced investigators, IT security and forensic specialists. The sessions give an overview of state-of-the-art operating systems, hardware and software available for supported platforms, provide detailed information about forensic differences between prior and current generation platforms, and teach attendees the most effective techniques of extracting protected information out of supported devices.

More information about the upcoming forensic training series will be announced on the company’s Web site at http://www.oxygen-forensic.com/en/training/

Pricing, Venues and Dates

The training event will be held in London, UK on June 18-19 and 20-21. Online registration is now open:

• Advanced iOS Forensics Training
• Advanced Android Forensics Training

Participation costs 999 GBP and includes a 2-day training course on either iOS or Android forensics.

Attendees are eligible for a 30% discount towards an Oxygen Forensic Suite 2012 edition of their choice. Companies with four or more attendees will be eligible for one free Analyst license.

Free Standard license Training and Certification   

Oxygen Software has recently updated its licensing policy, making the Standard edition of Oxygen Forensic Suite 2012 available free of charge for the first 6 month. Under the new terms, the Standard edition of the company’s flagship mobile forensic tool becomes free to eligible customers providing they take Oxygen-approved forensic training. Customers passing a certified training may not only keep their free license, but also receive one year of free updates. Under the current terms, certified customers receive the time-unlimited right to use Oxygen Forensic Suite 2012 Standard at no charge. With certified training courses, Oxygen offers forensic specialists an opportunity to obtain the tool and skills necessary to extract evidence out of the many mobile devices available on the market today.

Customers passing the training will also receive a status as a Certified Oxygen Forensic Suite User, accompanied by newly issued license keys containing certification information. Certification information will be displayed in the program’s main window, and will be embedded in all reports created by Oxygen Forensic Suite.

Oxygen Certified Forensic Training Series

The Myrtle Beach event is the first of the coming Oxygen Certified Forensic Training Series. The training event will be held in Myrtle Beach, USA on June 2, 2012. Online registration is now open:

http://www.oxygen-forensic.com/en/training/2012_06_us_myrtlebeach.php

Participation costs USD 795 and includes a 1-day intensive training.

Users of free 6-month licenses for Oxygen Forensic Suite 2012 are encouraged to participate in this event in order to keep their free licenses.

About Oxygen Forensic Suite 2012

Oxygen Forensic Suite 2012 helps investigators and forensic specialists access and analyze data from a variety of mobile devices such as cell phones, smartphones, communicators, PDA and tablet PCs. Currently supporting more than 4200 different models, Oxygen Forensic Suite 2012 covers the widest range of mobile devices compared to competition, and allows fully automated acquisition and analysis of supported devices.

The unique Timeline feature offers convenient, single-place access to all activities and movements performed by the user arranged by date and time. Investigators can track user location at every moment, build and map their historic routes, and clearly see all activities performed by the user at each location.

Another signature feature of Oxygen Forensic Suite allows investigators performing a global search on all devices ever analyzed with the toolkit. The global search quickly reveals any connections (e.g. common contacts, exchanged calls, texts or emails) between the phone owners.

Oxygen’s statistical analysis tools allow investigators discover social connections between the users of multiple mobile devices. Calls, text messages and Skype conversations are analyzed to produce charts and tables revealing the users’ closest circle at a glance.

Oxygen Forensic Suite 2012 guarantees zero-footprint operation, leaving no traces and making no modifications to the content of the devices, making it the tool of choice among government and law enforcement agencies, security services and forensic organizations in more than fifty countries.

About Oxygen Software

Founded in 2000, Oxygen Software offers the most advanced forensic data examination tools for smartphones and mobile devices. The company is dedicated in delivering the most universal forensic solution covering the widest range of mobile devices running Symbian, Windows Mobile, Blackberry, iOS, and Android operating systems. As a result, Oxygen Forensic Suite receives great response at forensic conferences, exhibitions and trainings, and occupies a spot in the top of the list in relevant tests for extracting more data than competition.

# # #

More information about the company and its forensic solutions is available at www.oxygen-forensic.com

Information about upcoming events and training series available at http://www.oxygen-forensic.com/en/training/

From compatibility standpoint, the updated Oxygen Forensic Suite 2012 now supports The new iPad, nearly 600 Mediatek-based Chinese branded phones, as well as about 100 Android devices that are new on the market. Today, Oxygen Forensic Suite 2012 boosts the number of recognized mobile devices to nearly 4,200.

All registered customers may download the new version immediately from their personal customer area.

New in Oxygen Forensic Suite 2012 v.4.2:

• Added support for more than 600 Chinese-branded mobile devices based on Mediatek chipset including Nokla, Nckia, Nktel, Nony, Nova, Nexian, Novo,  Narnia, Nasaki,TV-Mobile and Tvmobile ‘Fake Nokia’ phones, Samkung, Samsong, Samsonic and Samskin ‘Fake Samsung’ phones,  Suny-ericssom ‘Fake Sony Ericsson’ phones, HTC fake and Alcatel, Fly, Huawei, Motorola, Philips and Pantech MTK-based feature phones.
• Added support for more than 100 new Android OS devices.
• Added support for iTunes 10.6.1.
• Added preliminary support for Android OS 4.0.
• Added Key Evidence section. The new section displays device events that were marked as important by the investigator in one of the following sections: Phonebook, Calendar, Messages, Dictionaries, Web Connections and Location Services, etc. Available in Analyst license.
• Device Logs. Added support for Blackberry devices.
• Desktop. Added Productivity (Business) group containing subsections for popular productivity applications such as Dropbox, Evernote, Remember The Milk. Available in Analyst license.
• Productivity (Business). Added support for Evernote application for iOS devices. Displays device owner’s notes with time stamps and geo coordinates, account information, etc. Available in Analyst license.
• Productivity (Business). Added support for Remember The Milk application for Android OS and iOS devices. Displays device owner’s tasks and account information. Available in Analyst license.
• Messengers. Added support for Textie for Android OS devices. Messages, contacts and account information are displayed. Available in Analyst license.
• Messengers. Added support for HeyTell for Android OS and iOS devices. Account details, contacts and user communications are displayed. Available in Analyst license.
• Web Browsers. Added support for Ninesky Web Browser for Android OS devices. Saved bookmarks, cached files and cookies are displayed. Available in PRO and Analyst licenses.
• Web Browsers. Added support for Atomic Web Browser and Atomic Lite Web Browser for iOS devices. Web history, bookmarks, cookies, etc. are displayed. Available in PRO and Analyst licenses.
• Web Browsers. Added support for UC Browser Lite for Android OS devices. Cookies, passwords, web form data, cached files, etc. are displayed. Available in PRO and Analyst licenses.
• Web Browsers. Added support for UC Browser for Android OS devices. Web history, bookmarks, cookies, etc. are displayed. Available in PRO and Analyst licenses.
• Communication Statistics. Added the ability to calculate statistics for several devices.
• Communication Statistics. Added date range filter allowing filtering events by the time period.
• Communication Statistics. Added Show Communications button to the diagram window. A click on this button opens communications summary for the selected contact.
• New export engine. Exporting becomes much faster and no longer uses excessive memory.
• SQLite Viewer. Added the ability to filter actual and recovered records.
• SQLite Viewer. Added Unicode support for cell data.
• Desktop. Added sorting in Devices and Cases tree.
• Event Log. This section is now named “Phone Call Logs” for Blackberry devices.
• Tools. Added Time zone settings to support custom time zones. Acquired data can now be displayed according to the correct time zone.
• Hex Viewer. Selected data is displayed in the converter.
• File Browser. Added thumbnail support for iTunes backups.
• Device Extraction Wizard. Added support for encrypted bbb backups made under  Mac OS.
• Device Extraction Wizard. Added support for non encrypted bbb backups made in Blackberry Device Manager under Windows OS.
• Global search. Added application icons to the export.
• Global search. After sorting entries with N/A values are always at the bottom of the grid.
• Global search: Added information about found Applications to the Object Details panel.
• Phonebook. Redesigned Favorites and Birthday Center panels.
• Messengers. Small interface improvements.
• Calendar. Fixed a phenomenon of incorrectly displaying birthdays  from Apple devices.
• Dictionaries. Fixed a phenomenon where Unicode words were not shown on the Phrase simulation panel for Blackberry devices.

Stay tuned to smartphone forensics with Oxygen Software! Stay tuned to success!

All registered customers may download the new version immediately from their personal customer area.

New in Oxygen Forensic Suite 2012 v.4.1.1:

• Chinese phones support add-on is available for purchase now. It provides access to the Chinese-branded cell phones based on the MTK (Mediatek) chipset. Available to all users of Oxygen Forensic Suite 2012 at additional charge.
• Added support for 140+ Chinese-branded mobile devicesbased on MediaTek chipset: Cinte i66, Cinte i4GS+, Cinte Compass 4GS, Cinte 4G+++, Lenovo CA12, Lenovo BA22, Lenovo F10, Lenovo Z-MK189, etc. Available with a Chinese phones support add-on.
• Added support for 120+ new Android OS devices: Samsung Galaxy S II GT-I9100, Dreambook W7 Tablet, Cinte ZT-180 A9 EPAD Tablet, etc.
• Added support for 20+ Windows Mobile OS devices: Cinte YotaMAX4G, Cinte Verizon Droid X, etc.
• Added support for iTunes 10.6.
• Added support for iOS 5.1.
• Connection. Concurrent acquisition of multiple devices.
• Connection. Added ability to connect Android OS 1.5 devices.
• Calendar. Added end date information for calendar events for iOS devices.
• Applications. Improved section loading.
• Messengers. Skype. Small interface improvements.
• Messengers. Skype. Fixed problem when SMS messages were not shown on SMS Messages tab.

Stay tuned to smartphone forensics with Oxygen Software! Stay tuned to success!

• Deleted SMS messages information is stored in ‘SMS.db’ or ‘SMS.sqlite’ files which can be opened with SQLite Database viewer. Double-click on a file and then click on ‘Recover deleted data’, wait until the process finishes, then click on ‘All deleted data’ and find the cell that matches ‘Messages’ row and ‘Data’ column. Deleted iMessages data is also stored in the same files.
• Deleted calls information is stored in call_history.db file which can be opened with SQLite Database viewer in the File Browser section.
• Deleted e-mail messages information can be viewed in ‘Envelope Index’ file (doesn’t have an extension). ‘Envelope Index’ file is available in jail-broken devices only.
• Deleted e-mail accounts information is located in /private/var/mobile/Library/Mail folder which subfolders have the names of the deleted accounts and can be viewed in the File Browser section.
• Deleted images information is stored *.ithmb databases for some period of time and can be viewed on the Thumbnail tab in the File Browser section.
• Deleted contacts images can be found in AddressBookImages.sqlitedb file and opened with SQLite Database viewer in the File Browser section.
• Traces of deleted data can be found in all SQLite databases stored in the mobile device and therefore recovered with SQLite Database viewer.

Find more details about forensic deleted data recovery in Deleted Data Traces document.

Analytics for Social Networks on the Go

Oxygen Forensic Suite 2012 offers forensic specialists an automated toolkit quickly revealing users’ communications occurring in popular social networks. Supporting Facebook, Twitter, and Google+ networks in both Apple iOS and Android as well as Twinkle (iOS only), Oxygen Forensic Suite 2012 provides the ability to examine the device user’s friend lists, communications, photos, geo location and search history. The social network analysis tools allow studying the user’s communication circles, chats, uploaded files, and similar information.

“With social networks such as Facebook and Twitter quickly gaining in popularity, mobile communications are no longer limited to phone calls, email and text messages”, says Oleg Fedorov, Oxygen Software CEO. “With more and more mobile communication occurring outside of the usual boundaries, we feel it’s extremely important to provide forensic specialists a usable toolkit for investigating users’ activities in social networks”.

Supporting Mobile Web Browsers

More mobile Web browsers are supported in Oxygen Forensic Suite 2012. The new toolkit extracts information from three more popular Web browsers, providing forensic access to users’ bookmarks, browsing history, cookies, login credentials to certain Web sites, passwords and stored form data.

Oxygen Forensic Suite 2012 supports three additional browsers for the Android OS, adding support for Mozilla Firefox, SkyFire and Dolphin.

Analyzing Android System Logs

Oxygen Forensic Suite 2012 adds the ability to analyze the Device Logs section of Android OS devices. Android devices generate a wide range of logs, recording core and system events, and containing information about installed applications and the current state of the phone. The new tool allows viewing initialization script output recorded during the last boot, information about applications and the state of the phone, as well as accessing the internal log of the Android system.

Meet Oxygen Software at Department of Defense Cyber Crime Conference 2012

The first official presentation of Oxygen Forensic Suite 2012 v. 4.0 will take place at DoD Cyber Crime Conference (January 23-25). The DoD Cyber Crime Conference annually draws over 1200 participants from federal agencies, the law enforcement community and the defense investigative organizations and aims to address current trends in cyber crime and those of the future. Oxygen Software is proud to make it to the list and invites everyone to visit its booth #623 during the expo in Atlanta, GA.

About Oxygen Forensic Suite 2012

Oxygen Forensic Suite 2012 helps investigators and forensic specialists access and analyze data from a variety of mobile devices such as cell phones, smartphones, communicators, PDA and tablet PCs. Currently supporting more than 2,500 different models, Oxygen Forensic Suite 2012 covers the widest range of mobile devices compared to competition, and allows fully automated acquisition and analysis of supported devices.

The unique Timeline feature offers convenient, single-place access to all activities and movements performed by the user arranged by date and time. Investigators can track user location at every moment, build and map their historic routes, and clearly see all activities performed by the user at each location.

Another signature feature of Oxygen Forensic Suite allows investigators performing a global search on all devices ever analyzed with the toolkit. The global search quickly reveals any connections (e.g. common contacts, exchanged calls, texts or emails) between the phone users.

Oxygen’s statistical analysis tools allow investigators discover social connections between the users of multiple mobile devices. Calls, text messages and Skype conversations are analyzed to produce charts and tables revealing the users’ closest circle at a glance.

Oxygen Forensic Suite 2012 guarantees zero-footprint operation, leaving no traces and making no modifications to the content of the devices, making it the tool of choice among government and law enforcement agencies, security services and forensic organizations in more than fifty countries.

About Oxygen Software

Founded in 2000, Oxygen Software offers the most advanced forensic data examination tools for smartphones and mobile devices. The company is dedicated in delivering the most universal forensic solution covering the widest range of mobile devices running Symbian, Windows Mobile, Blackberry, iOS, and Android operating systems. As a result, Oxygen Forensic Suite receives great response at forensic conferences, exhibitions and trainings, and occupies a spot in the top of the list in relevant tests for extracting more data than competition.

# # #

More information about the company and its forensic solutions is available at www.oxygen-forensic.com

Social Connections and Statistical Analysis Tools

Oxygen Forensic Suite 2012 introduces several new statistical analysis tools offering forensic specialists the ability to quickly reveal social connections between users of mobile devices under investigation and their contacts. The newly added Communications Statistics section provides a convenient tool to explore social connections between device users and their contacts by analyzing calls, text messages and Skype activities. The activities are analyzed and presented in a table or diagram view. Table view offers in-depth analysis, while diagram view presents a quick overlook of communication circles, allowing forensic experts to determine and analyze suspects’ communications at a glance.

“Automating the analysis is utterly important for our forensic customers”, says Oleg Fedorov, Oxygen Software CEO. “Manually tracking down users’ connections is an extremely time-consuming and labor-intensive task. The new analysis tools brought by Oxygen Forensic Suite 2012 produce a concise summary, with a graphical chart presenting the connections visible at a glance”.

New High-Performance Storage

The addition of new statistical analysis tools called for the change in the underlying engine. To facilitate the increased computational demands, Oxygen Forensic Suite 2012 upgrades its internal storage to a newly implemented, advanced storage format. The new storage offers even better performance, shorter load times and faster response, while providing better integrity and reliability compared to the older format. Previous version databases will be automatically converted to the new format with all data correctly migrated.

Extended Compatibility: iPhone 4S Support, Android 2.3.5 – 3.0.1 Rooting

Oxygen Forensic Suite 2012 supports more smartphone devices than ever. The new release adds support for iPhone 4S and offers Android rooting add-on for Android OS devices versions 2.3.5 and higher. The complete list of supported Android devices includes Android platforms 1.6 through 3.0.1, which covers over 96% of all Android devices on the market.

Meet Oxygen Software at Department of Defense Cyber Crime Conference 2012

Oxygen Forensic Suite 2012 v.4.0 will be officially presented at Department of Defense Cyber Crime Conference 2012 (January 23-25). Visit Oxygen Software at booth #623 during the upcoming expo in Atlanta, GA.

About Oxygen Forensic Suite 2012

Oxygen Forensic Suite 2012 helps investigators and forensic specialists access and analyze data from a variety of mobile devices such as cell phones, smartphones, communicators, PDA and tablet PCs. Currently supporting more than 2,500 different models, Oxygen Forensic Suite 2012 covers the widest range of mobile devices compared to competition, and allows fully automated acquisition and analysis of supported devices.

The unique Timeline feature offers convenient, single-place access to all activities and movements performed by the user arranged by date and time. Investigators can track user location at every moment, build and map their historic routes, and clearly see all activities performed by the user at each location.

Another signature feature of Oxygen Forensic Suite allows investigators performing a global search on all devices ever analyzed with the toolkit. The global search quickly reveals any connections (e.g. common contacts, exchanged calls, texts or emails) between the phone users.

The newly added and improved statistical analysis tools allow investigators discover social connections between the users of multiple mobile devices. Calls, text messages and Skype conversations are analyzed to produce charts and tables revealing the users’ closest circle at a glance.

Oxygen Forensic Suite 2012 guarantees zero-footprint operation, leaving no traces and making no modifications to the content of the devices, making it the tool of choice among government and law enforcement agencies, security services and forensic organizations in more than fifty countries.

About Oxygen Software

Founded in 2000, Oxygen Software offers the most advanced forensic data examination tools for smartphones and mobile devices. The company is dedicated in delivering the most universal forensic solution covering the widest range of mobile devices running Symbian, Windows Mobile, Blackberry, iOS, and Android operating systems. As a result, Oxygen Forensic Suite receives great response at forensic conferences, exhibitions and trainings, and occupies a spot in the top of the list in relevant tests for extracting more data than competition.

# # #

More information about the company and its forensic solutions is available at www.oxygen-forensic.com

• Added Android rooting add-on for Android OS devices version 2.3.-2.3.2 and 3.0- 3.0.1.
• Added support for Android OS tablets with OS version 3.x.
• Added support for Dropbox application for Apple and Android OS devices. This section allows to examine account settings, custom folders and uploaded files. Android Rooting add-on is required for Android OS devices to see this data. Available in Analyst version only.
• Web Browsers Cache Analyzer. Added support for a default web browser of Android OS devices. Now web cache, bookmarks, cookies and geo location cache are extracted. Android Rooting add-on is required to see this data. Available in Analyst version only.
• Added support for Google Maps for Android OS devices. Android Rooting add-on is required to see this data. Available in Analyst version only.
• Skype. Added support for Android OS devices. Android Rooting add-on is required to see this data. Available in PRO and Analyst versions only.
• Licensing policy. After the expiration date you can acquire the devices supported by most recent program version available at your personal page. Previously any device connection and data extraction after the expiration date were not allowed.
• Skype. Added support for Skype version 3.5 for Apple devices.
• Messages. Added MMS messages extraction from Android OS devices.
• General. Preliminary support for unencrypted BlackBerry OS 7 backups extraction.
• Added support for Nokia Series 30 phones. Contacts, messages and calls are acquired. More than 10 old and new Series 30 phones added: Nokia 1006 CDMA, Nokia 1100b, Nokia 1200b, Nokia 1202-2, Nokia 1202-2b, Nokia 1220 Phase 2 DAMPS, Nokia 1260 Phase 2 DAMPS, Nokia 1508 CDMA, Nokia 1508i CDMA, Nokia 1606 CDMA, Nokia 1610/1611/1620/1630/1631, Nokia 5030 XpressRadio etc., Nokia 1600/1600b and Nokia 1650/1650b support updated.
• SQLite Viewer. Added ability to search for clusters of deleted records. There is no guarantee that these found clusters are 100% true to life and reliable therefore they cannot be used as evidence in the court.
• Extraction Wizard. Export option is available right after data extraction is finished.
• Added support for Apple iTunes 10.4.1 and iTunes 10.5.
• Added support for more than 30 mobile devices: Acer ICONIA TAB A500, Acer ICONIA TAB A100, HTC Stallion (Inspire 4G), HTC Incredible S (Vivo), HTC Pyramid (Sensation), HTC Rider (Evo 4G), HTC Vivo_w (Incredible 2), HTC Wildfire S (Marvel), Motorola DEFY+, Motorola DROID 3,Motorola FIRE, Motorola MOTO XT531, Motorola TRIUMPH, etc.
• Messages. Improved messages support for Blackberry devices.
• Plist Viewer. Improved support for Base64 converter.
• Google Services, Google Mail, Google Talk. Improved support for Android OS devices.
• Foursquare. Improved support for iPhone dump images and jailbroken devices.
• Backup Extraction Wizard. Fixed error when an .ofb backup from a previous version could not be uploaded in a Trial and USB dongle versions of Oxygen Forensic Suite 2011.
• Extraction Wizard. Fixed error when a USB dongle key code was not recognized by Extraction Wizard.
• General. Fixed error that appeared when running Oxygen Forensic Suite 2011 under Windows XP.
• Full list of changes and improvements

The devices covered by the training are:

•Android smartphones
•iPhone and iPod Touch devices
•Symbian OS smartphones
•Windows Mobile 5/6 smartphones
•Blackberry smartphones
•Nokia S40 phones
•Sony Ericsson cell phones
•Samsung cell phones
After completed training the students receive official Oxygen Forensic Suite Expert certificates.

New Application Lets Forensic Investigators View Plist Files Used in Apple and Android Smart Phones to Store Private User Data, Logs and Settings

Oxygen Software, a leading developer of iPhone forensic software products, today announces Oxygen Forensic Plist Viewer, a new Windows utility for viewing Plist files used in Apple and Android smart phones. Earlier this tool was available only as part of Oxygen Forensic Suite 2011.

Plist is a data file with the .plist extension. This format is used in Apple and Android smart phones to store various data, including forensically important information. Many built-in and external user applications store their settings, logins, passwords, history, logs in Plist files. The format is binary, which means that a plist file cannot be opened in a text editor such as Notepad. To view these files, forensic experts can use Oxygen Forensic Plist Viewer, which provides a user-friendly interface for examining data of the smart phone itself, or its backup file.

Oxygen Forensic Plist Viewer automatically unpacks a plist file and displays its content as a folder tree. The expert can view data, convert text entries to different encodings, and convert numeric values to Unix, Windows, or iOS dates. What’s more, the program can show binary content of cells, such as images, video and sound and export the content of a plist file to XML format for further analysis in other forensic software.

Viewing a plist file in Oxygen Forensic Plist Viewer is very easy. Simply select a node of a plist file in the folder tree, and its content will open in the viewer. For example, if the user downloaded a file from the file sharing website, the investigator can see a direct link to that file, date of downloading, title of the webpage the file was downloaded from, as well as the number of visits to that webpage. In case of viewing binary content, the tool will detect its format and display an image, or play a sound automatically.

Oxygen Forensic Plist Viewer is available for immediate download and purchase.

Here is the short video introducing iPhone forensics with Plist Viewer.