Merging extractions is simple in Oxygen Forensic® Detective. In this case, investigators will be asked to drag the extraction icon to another extraction in order to add the files.
#Oxygen forensics yelp android#
We recommend picking this option when merging partial extractions of the same device, such as when merging an Android physical dump with a physical extraction of its external SD card. When merging at a file system level, a merged file system is first built and then analyzed. We recommend using this method when merging extractions of different devices and platforms, such as when merging an Android extraction with its cloud data. In this case, each file system is analyzed separately and their data is added to the merged extraction. Data Level Extractionsīy default, extractions are merged at a data level. For example, investigators can acquire data extracted from physical dumps, SD cards, and cloud services, and merge them at the data level or file system level. Our “Merge Extraction” feature supports various different extraction methods of the same device. Let’s take a closer look into this latest feature. When enabled, this feature will automatically merge the extractions acquired using different extraction methods. Luckily, our latest update, Oxygen Forensic® Detective v.14.0, presents a “Merge Extraction” option, intended to save investigators time by eliminating the need to manually compile data. Oftentimes, it requires various extraction methods to gain a comprehensive view of a case. Have you ever acquired data from the same device using different methods and then faced the need to merge those extractions in order to view and analyze them properly? It is rare that an investigator will find all the data they need to make a case using one extraction method.