Oxygen Forensic® Detective

Find critical digital evidence
quickly and completely

A digital forensic software designed to extract, decode, and analyze data. Extract data and artifacts from multiple devices with the capability for both mobile and computer forensic investigations.

Unmatched Features for Comprehensive Data Extraction and Analysis

Oxygen Forensic® Detective offers unparalleled data extraction and analysis capabilities, allowing investigators to access encrypted, deleted, or hidden information. Extract from over 100 supported cloud services and more than 50,000 app versions.

Effortless data extraction

Quickly extract data from any device without hassle. Streamline investigations and gather evidence efficiently.

  • Easily extract data from locked and encrypted smartphones and tablets.
  • Gather evidence quickly from multiple sources to speed up investigations.
  • Ensure accuracy in data collection without compromising integrity.
Find out more
Bypass Encryption for Critical Insights

Breakthrough encryption

Unlock encrypted data without passwords or pins, ensuring crucial evidence is always accessible.

  • Decrypt data without requiring passwords.
  • Access protected evidence that would otherwise be unreachable.
  • Bypass modern encryption barriers to keep investigations moving.
Find out more
Powerful malware detection

Capture every conversation

Extract data from 25,000+ apps, including social media and messaging platforms, ensuring a complete investigative picture.

  • Retrieve messages from over 50,000+ app versions, including social media.
  • Ensure critical communication is captured across multiple platforms.
  • Gain a full view of digital conversations relevant to investigations.
Find out more
Extract from More

Need multiple connections?

Whether handling multiple devices or working with a team, Oxygen Forensic® Detective supports seamless multi-user access and data management.

Single Users

Working solo? Easily extract and analyze data from one or multiple devices with an optimized workflow.

Benefits
  • Simplified process for both single-device and multi-device investigations.
  • Access all data types, from apps to messages.
  • Quick, secure, and efficient data extraction.
Find out more

Multiple Users

Oxygen Forensic® Detective Network license gives your team full access to every feature while streamlining license management. With just one USB dongle, you can efficiently manage multiple connections, making it a cost-effective solution for organizations with multiple users.

Benefits
  • The Network server administrator can free up idle connections, ensuring resources are always available when needed.
  • Need to go offline? Borrow a license and continue your investigations without interruption.
  • Choose from 5, 10, 20, or 50 concurrent connections to match your team’s requirements.
Find out more

Transform your workflow

Unlock the power of our digital forensic solutions to streamline your workflow, gain insights from multiple sources, and speed up your investigations.

Full product features

Features built to empower you - dive deeper into what our comprehensive tools offer.

Collection

Cloud

Extract valuable information from 100+ cloud applications effortlessly.

Find out more
Collection

Mobile

Access data from over 35,000 supported devices, ensuring no lead is left behind.

Find out more
Collection

Computer

Extract and analyze artifacts seamlessly from Windows, Linux, and macOS.

Find out more
Import

Operating systems & platforms

Seamlessly import and analyze data from 35,000 supported devices.

Find out more
Import

Multiple data sources

Effortlessly handle desktop data, account data, call data records, drone logs, and more.

Find out more
Import

Third party extractions

Easily integrate memory cards and data from other leading digital forensic tools.

Find out more
Import

Legal & investigative data

Streamline investigations by importing documents directly into your workflow.

Find out more
Analysis

Extractions & processing

Leverage advanced tools for OCR, SQLite data parsing, .plist analysis, and seamless translation.

Find out more
Analysis

Malware detection & password recovery

Enhance security with cutting-edge malware detection and robust password recovery solutions.

Find out more
Analysis

Facial & image categorization

Analyze media to match faces, images, and videos with user-defined face sets and image categories.

Find out more
Analysis

Mapping & location services

Utilize advanced mapping and location services for real-time insights.

Find out more
Analysis

Timeline & link analysis

Uncover relationships and timelines with powerful link analysis and visualization tools.

Find out more
Export

Custom reports

Create tailored reports with ease, export in industry-standard formats, and share dynamic map exports seamlessly.

Find out more
Export

Project VIC integration

Identify and categorize sexually exploitative materials of children (CSAM).

Find out more

Frequently Asked Questions

Quick answers to common questions from law enforcement and government investigators about reducing backlogs, analyzing large datasets, and accelerating digital forensic investigations with Oxygen Forensic® Detective.

Contact us
  • What’s the fastest way to reduce a digital forensic case backlog without adding staff?

    The fastest way to reduce a digital forensic backlog is to accelerate data processing and analysis, not just extraction. Most examiner time is spent reviewing and filtering data. Oxygen Forensic Detective shortens the time between extraction and actionable findings by combining analytics, filtering, timelines, and reporting in one platform. Investigators can isolate relevant artifacts quickly instead of manually reviewing full datasets. By improving efficiency in the analysis phase, agencies can resolve cases faster.

  • How can I analyze large mobile extractions without crashes or performance slowdowns?

    Large mobile extractions require a stable processing architecture and efficient indexing of artifacts. Performance issues often stem from memory limitations and tool instability. Oxygen Forensic Detective is built on a 64-bit architecture designed to process large datasets efficiently. Its analytics engine allows investigators to search, filter, and visualize data without repeated reprocessing. This helps labs maintain workflow continuity and reduce disruption when handling high-volume or complex mobile investigations.

  • How does Oxygen Forensic Detective reduce investigation time from extraction to reporting?

    Oxygen Forensic Detective reduces investigation time by combining extraction, analysis, and reporting in a single environment. Investigators can extract data from supported devices and cloud services, analyze artifacts using timelines and behavioral tools, and generate structured reports without switching platforms. Eliminating tool transfers and redundant validation steps streamlines the full investigative workflow, helping agencies move from data acquisition to court-ready reporting more efficiently.

  • What devices and cloud services does Oxygen Forensic Detective support?

    Oxygen Forensic Detective supports extraction and analysis from a wide range of mobile devices, computers, IoT devices, and over one hundred cloud services. This includes smartphones, SD cards, drones, smartwatches, and major cloud platforms where user data is stored. Broad compatibility reduces reliance on multiple specialized tools and enables investigators to work within a single ecosystem. Strong cloud extraction coverage is particularly important as more digital evidence resides in online services rather than solely on physical devices.

  • How is Oxygen Forensic Detective different from Cellebrite and Magnet for law enforcement labs?

    Oxygen Forensic Detective differentiates itself through analytics speed, cloud extraction breadth, and a perpetual licensing model. While many tools are evaluated primarily on extraction capability, Oxygen emphasizes faster filtering, timeline analysis, and artifact review.  In addition, its perpetual licensing model offers long-term ownership without recurring subscription risk, which can support predictable public sector budgeting.