Primary01
Oxygen Detective
Our default for mobile extraction — strong iOS and Android coverage with deep cloud reach.
- iOS
- Android
- Cloud
The extraction engine
behind every mobile brief.
Oxygen Forensic Detective is the primary mobile extraction platform we run. Full file-system access, cloud collection and 35,000+ supported devices — applied with court-grade discipline from acquisition through to report.
- Class
- Mobile extraction
- Devices
- 35,000+ supported
- Coverage
- iOS · Android · cloud
What We Examine
What Oxygen
What Oxygen
brings to the brief.
Tooling alone doesn't make a case — but the right tooling, applied consistently, ensures nothing recoverable is left behind.
Layer01
Full file-system extraction
Logical, file-system and physical acquisitions across modern iOS and Android — including locked, BFU and AFU device states where supported.
Layer02
Cloud account collection
Lawful collection from iCloud, Google, Microsoft 365, social platforms and 100+ services with token or credential authority.
Layer03
Communications parsing
WhatsApp, Signal, Telegram, iMessage, SMS and 20,000+ app artefacts decoded into reviewable timeline.
Layer04
Deleted-data recovery
SQLite carving, journal recovery and unallocated-space analysis to surface deleted messages, photos and call logs.
Layer05
Location reconstruction
Cellular, Wi-Fi and GPS artefacts cross-referenced for movement timelines suitable for court.
Layer06
Unified case workspace
Multiple devices, accounts and sources combined into one searchable case for cross-correlation.
Coverage
How it compares
How it compares
across the field.
No single tool is best at everything. Here is how Oxygen sits beside the other extraction platforms we maintain access to.
Reference02
Cellebrite UFED
Government-grade mobile extraction with strong locked-device pathways. Used as corroborating tool.
- Locked
- BFU
Reference03
GrayKey
Specialist iOS access tooling for older locked devices. Used selectively where the matter requires it.
- iOS
- Locked
Reference04
MSAB XRY
Mobile extraction platform with broad device support — used for corroboration on contested briefs.
- Mobile
- Recovery
The Approach
Tooling is the means,
Tooling is the means,
evidence is the outcome.
We run multiple extraction platforms because no single tool wins on every device. Oxygen is the default; Cellebrite, GrayKey and MSAB are kept current for the matters where they out-perform it.
Every extraction is hash-verified, write-blocked where applicable and chain-of-custody documented. The report tells the bench what was acquired, with which tool, and how each finding was verified.
Devices
35,000+
Apps
20,000+
Cloud
100+ services
Verification
Hash + cross-tool
The Process
Calm, methodical,
Calm, methodical,
court-grade from intake.
Step01
Acquisition
Write-blocked, hash-verified extraction of the device or cloud source under chain-of-custody.
Step02
Decoding
Native parsing of communications, location, media and app artefacts into a single case workspace.
Step03
Verification
Critical findings re-acquired or corroborated using a second tool to remove single-tool risk.
Step04
Reporting
Plain-English report with technical appendix, exhibits and tooling trail ready for court.
Frequently Asked
Frequently asked about Oxygen.
Request A Consultation
Send A Brief.
Send A Brief.
We'll Take It From There.
Every enquiry is read by a licensed investigator and treated in strict confidence.
Step01
You send a brief
A short note about your matter — no detail required upfront.
Step02
We reply within one business day
From a licensed investigator, not a chatbot or call centre.
Step03
If we're the right fit, we book a call
Confidential. No obligation. Fixed-fee quote where possible.