Oxygen Forensic
Oxygen Forensics is a US-based company that serves customers in 150+ countries and work with the best people around the world. We provide tools and solutions that benefit law enforcement, government agencies, organizations, and enterprises globally.
OFBC – Oxygen Forensic Boot Camp
This three-day instructor-led training event is geared toward students that have a working familiarity with mobile device extraction and analysis. Students will learn initial extraction methodology of an iDevice and Android device and follow up by importing multiple extraction formats of Android, Apple and other device and data types. While developing workflows that enable students to return to their environments to immediately apply new ideas, the course also prepares the student for the Oxygen Forensic Certification program and lays the foundation for the OFAA – Advanced Analysis course
OFCE – Oxygen Forensic Cloud Extraction
This one-day instructor-led training event is geared toward students that have a working familiarity with Oxygen Forensic® Detective and are ready to expand their investigations to cloud-based data. Students will use the Oxygen Forensic® KeyScout to gather credential-based target data from computer hard-drives and the Oxygen Forensic® Cloud Extractor to gather cloud-based target data from many platforms – including Amazon, Google, WhatsApp, and Apple services. Students will learn to address 2FA (two-factor authentication) and alternate authentication methods.
Xib – Oxygen Forensic extraction in a Box
This three-day instructor-led training event is geared toward students entering the mobile forensic arena that are ready to begin learning the art and science of extracting data from phones or to broaden already existing knowledge about Oxygen Forensic® Extractor. The course focuses on the physical, logical and OxyAgent methods of data extraction from Android, iOS and other devices (drone, UICC, SD card) using the Oxygen Forensic® Extractor, a component of the Oxygen Forensic® Detective. Other topics covered include bypassing screen lock pins, passcodes, and swipe patterns; using ADB (Android Debug Bridge) commands; upgrading and downgrading firmware and application versions, and brute force attacking secure start protection against FDE (full disk encryption) and FBE (file-based encryption).
OFAT – Oxygen Forensic Agent Triage
This one-day instructor-led training event is geared toward students that have a working familiarity with Oxygen Forensic® Detective and are ready to prepare to execute on-scene warrants, knock-and-talks, consents to search, or roadside interrogation. This course covers the Oxygen Forensic® OxyAgent and iOS Agent for on-scene mobile data triage purposes to ensure the ability to forensically collect Android and iOS artifacts. Oxygen Forensic® OxyAgent allows a user to collect Android mobile data with an on-the-go, logical extraction to include third party Applications. During this course students will learn how to prepare an on-the-go tool armed with the OxyAgent, gain permissions on the device, and selectively extract data or make a full logical acquisition of data. Oxygen Forensic® iOS Agent is an app for iOS devices that is installed directly to the device as a regular unprivileged user app. iOS Agent allows for the extraction of data, including available deleted files and data, from Apple devices without having to jailbreak the device. This module will educate students on the full potential of iOS Agent and its configuration and implementation – focusing on the data collection without putting the target device at risk.
OFKC – Oxygen Forensic KeyScout Collection
This one day instructor-led training event is geared toward students that have a working familiarity with mobile device extraction and analysis and focuses on extraction, use?case, and reporting capabilities of the Oxygen Forensic® Detective. This course takes a deep dive into the Oxygen Forensic® KeyScout performing dead box data recovery from hard drive computer forensic images and live machines. Students learn to customize search paths, create custom search profiles, to mine user credentials and tokens for cloud platform access, and save results for analysis in Oxygen Forensic® Detective.
OFDP – Oxygen Forensic Data Presentation
This instructor-led training event will take you from moment of device extraction all the way through to the presentation of the findings. Students will learn the process of maintaining forensically sound evidence, producing professional and accurate reports, supplying supporting documentation, and preparedness to deliver your findings in a more understandable way to the end user whether it is a manager, client, or a jury.
OFSA – Oxygen Forensic SQLite Analysis
This two-day instructor-led training event is geared toward students that have a working familiarity with Oxygen Forensic® Detective. This course will demystify low-level SQLite data analysis and recovery using our built-in and external SQLite Database Viewers. In this class, you will learn what SQLite is, and how to analyze and perform executable tasks on the many complex tables that make up a single database file to create reportable results. We will deep-dive into a better understanding of the usefulness and use cases of SQLite scripting to granularize your application-level analysis.
OFAI – Oxygen Forensic Analytic Investigations
This one-day instructor-led training event will deliver methodology to locate, recover, and process all image types in extracted datasets. During this course, students will learn to utilize Facial Categorization, subsequently searching faces found to quickly locate suspects such as registered sex offenders; process all images using Image Categorization to locate everything from CSAM images to license plates, maps, currency, and weapons while also performing searches of text values inside of images and screenshots using Optical Character Recognition. Diving further into the datasets, students will learn how to search HEX to locate potential hidden images.
OFDV – Oxygen Forensic Detective Viewer
The OFDV (Oxygen Forensic Detective Viewer) course centers on education for non-technical investigation review of collected mobile device and computer data using an interface modeled on Oxygen Forensic Detective. This platform allows responsive data to be searched, tagged and reported on by the personnel that know the most about it, putting the correct work in the correct hands. The platform also serves as a review environment for any facet of corporate or legal process. The viewer platform is an available component of Oxygen Forensic® Detective.
OFAA – Oxygen Forensic Advanced Analysis
This three-day instructor-led training event is a direct successor to the three-day OFBC course and continues with deep dives in to Oxygen Forensic® Detective analytics, database parsing, lost data recovery, alternate data sets and advanced tools such as the Call Data Record expert, the SQLite and Property list viewers and Oxygen Maps. Students will investigate IoT devices, take deep dives into application cache database files with the SQLite database and Property list viewers and learn to aggregate and correlate data from multiple sources to enhance the overall investigation in scenario-based exercises. A solid understanding of Oxygen Forensic® Detective will greatly enhance the deliverables of this course!