DATA ANALYTICS

LINKS BETWEEN CONTACTS

Links and Stats section provides a convenient way to explore social
connections between device owner and his contacts by analyzing calls,
all kinds of messages and applications activities.

Table view presents in-depth analysis of communications including all

contacts, phone numbers, total number of communications, their over-
all duration and time period.

Switching to the diagram view with a graphical chart oers a quick

overlook of communication circles, allowing forensic experts to determine
and analyze the device users closest contacts with all details at a glance.
One click on any contact on the diagram opens a card with the detailed
information about this contact and all the communications he/she had in all
the sources: messengers, social networks, etc.

The diagram can be saved as picture to PC or exported together with the

links data to a report in PDF, RTF and other formats.

LINKS BETWEEN DEVICES

Social Graph visualizes complex connections inside crime groups. This
is a highly adjustable workplace that allows to review connections
between mobile device owners and their contacts and detect their
common contacts.

The graph is not static, experts are free to manipulate the way it looks
like by moving, hiding and merging contacts. Investigator can change
the date range to reveal most popular connections in a certain period of
time or/and set the minimum number of connections for the contacts to
be displayed.

Social Graph contains information about each displayed owner and

contact like preferable types of communication, the rst and the last
date of communications, total time spent in talk and number of mes-
sages sent each other.

The analytical sections are available AT NO ADDITIONAL CHARGE in Oxygen Forensic Analyst and Oxygen Forensic Detective.

ABOUT OXYGEN FORENSICS

Oxygen Forensics was founded in 2000 as a PC-to-Mobile Communication soware company. This experience has allowed our team of mobile device
experts to become unmatched in understanding mobile device communication protocols. With this knowledge, we have built innovative techniques into
our Oxygen Forensic Detective allowing our users to access much more critical information than competing forensic analysis tools. We oer the most
advanced forensic data examination tools for mobile devices and cloud services. Our company delivers the universal forensic solution covering the
widest range of mobile devices running iOS, Android, Windows Phone, BlackBerry and many others.

Oxygen Forensic products have been successfully used in more than 100 countries across the globe including the USA, UK, Germany, Austria, France,
Netherlands, Italy, Norway, Finland, Australia, China, Singapore, Brazil, etc. Our customers include various US and European federal and state agencies,
such as the IRS, US Army, FBI, US Department of Defense (DOD), US Department of Justice, US Department of Homeland Security, US Department of
Transportation, US Postal Service, US Supreme Court, European Commission, Interpol, London Metropolitan Police, French National Police and Gendar-
merie, German Federal Criminal Police Oce, Italian Financial Guard, Spanish Civil Guard, Hong Kong Customs as well as Big Four companies, like Price-
waterhouseCoopers, Ernst & Young, Deloitte and many others.

EVENTS TIMELINE
Timeline section allows to view all device events in one list: messages and
chats in applications, calls, web browsers activity, Wi-Fi connections
history, photos with time stamps, etc. Events can be viewed for one device
or a group of devices thus allowing to quickly track the gang activity.
Rich ltering and sorting capabilities help investigators to focus only on
required evidence. Events can be ltered by date, time period, activity with
most active days on top, contact, remote party and more.
CONTACTS FROM VARIOUS SOURCES
Aggregated Contacts groups all contacts from multiple sources: device
phonebook, messages, calls and hundreds of applications. It automatically
reveals same people in dierent sources and aggregates them together in
one meta-contact. When the contacts have no matches, but forensic expert
detected that the contacts in various sources are the same person, he can
manually merge these contacts. Section oers quick lter functionality,
convenient data sources lter and sorting for faster analysis.
DEVICE ACTIVITY FOR A SELECTED PERIOD
A graphical chart is available to display user activities for selected periods of
time. It groups all possible mobile device events over dierent time intervals
(from one second to one year) and lters them by various parameters.
DATA ANALYTICS
LOCATIONS VISUALIZATION
Timeline section also shows all device owners locations in a single list. It
groups geo coordinates extracted from all possible sources: applications,
photos and more. Locations can be opened on online and oine Oxygen
Forensic Maps or exported to Google Earth program.
Routes can be built from selected geo points. This helps to visualize device
owners movements within a particular period of time.
POWERFUL DATA SEARCH
Global Search allows discovering required evidence in a single device, all
devices of the case, or all acquired devices. Tool oers searching for text,
phone numbers, emails, geo coordinates, IP addresses, MAC addresses,
Credit Card numbers. Regular expressions library is available for custom
search. Keyword list manager allows creating a set of keywords and
perform search during or aer data extraction. Global Search tool saves all
results and oers printing reports for any number of searches.
ACTIVE PERIODS OF DEVICE USAGE
Activity matrix reveals the most active periods of device usage. Investigators
can apply various lters to view activity statistics for a particular remote party
or time period.
 Oxygen Forensics, Inc
901 N. Pitt St, Suite 170
Alexandria, VA 22314
Tel: 844 537-2537

support@oxygen-forensic.com
www.oxygen-forensic.com