The following are the features of Oxygen Forensic Detective:
- It supports logical filesystem and physical acquisition. Logical acquisition recovers the active files on the device. Deleted data may be obtained if the SQLite database is recovered. Physical and filesystem acquisition provides access to the raw filesystem data of the iOS device.
- It supports password recovery from a keychain.
- It enables cloud data extraction and decryption.
- It reads backup or images obtained using other forensic tools.
- It provides rooting and jailbreaking assistance for devices.
- The timeline provides a single-place access to all the user's activities and movements, arranged by date and time.
- It supports aggregated contacts. ...