Oxygen Forensic Suite 2
The list of supported features depends on a certain phone model.
Besides the general data extracted by similar products, Oxygen Forensic Suite can extract a lot of unique information. Using low-level protocols allows the program to extract: phone basic information and SIM-card data, contacts list, caller groups, speed dials, missed/outgoing/incoming calls, standard SMS/MMS/E-mail folders, custom SMS/MMS/E-mail folders, deleted SMS messages (with some restrictions), SMS Center timestamps, calendar events schedule, tasks, text notes, photos, videos, sounds, LifeBlog data (SMS messages, camera snapshots and other phone events with their geographical coordinates), Java applications, file system from phone memory and flash card, GPRS and Wi-Fi activity, voice records and much more.
UK Training available
4-5 Oct 2010 in London
22-23 Nov 2010 in London
Please email andy@dataduplication.co.uk for a link to the demo version of Oxygen Forensic Suite Pro
Device Seizure
Mobile Phone & PDA Forensic Software
Acquire and analyse logical data and full data dumps of mobile devices.
Paraben's Device Seizure is your first line of defense in handheld forensics. Unlike data management software turned forensic tool, Device Seizure has its roots in digital forensics with such things as PDD (Palm DD command line acquisition), deleted data recovery, full data dumps of certain cell phone models, logical and physical acquisitions of PDAs, data cable access, and advanced reporting.
The amount and quality of data you can get from a full physical acquisition far surpasses the information you can get from a simple logical acquisition. Accessing phones via IrDA and Bluetooth should only be used when other data connections are not available due to the insecure nature of these communication methods. With support for more devices than ever before and the addition of Symbian 6.0 support, no toolbox will be complete without Device Seizure.
What's the difference between Device Seizure and other commercial or free products to view Mobile Phone data?
Most commercial or free software devices is designed to not only view data but to upload data. This is not a safe way to perform a forensic evaluation. In fact, even some software marketed as forensic software warns of possible data loss. Device Seizure does not allow data to be changed on the device. Paraben can also add support for unsupported Mobile phone models from supported manufacturers with simple log files and a little time. Add all this together and there's no comparison for forensic acquisition, analysis, and reporting of handheld device data.
Paraben focuses on the physical level of acquisition offering more physical downloads of devices than any other company. Logical data acquisitions can't acquire more data than the device Operating System was designed to allow. The physical acquisition plug-in is unique to Paraben offering memory imaging on most of the devices supported in Device Seizure.
Device Seizure Toolbox
CRIME SCENES DON'T ALWAYS COME WITH ALL THE RIGHT CABLES
That's why we've put a collection together for you!
The Device Seizure Toolbox was designed as a collection of the items that would be needed in different scenarios for Device Seizure. The items in this toolbox in combination with the appropriate software allow for acquisitions of hundreds of Mobile Phones & PDAs. Please note that the supported model list in the PDF is not comprehensive. These cables and charging tips may support many more models.
Paraben DS Field Kit

Paraben's Device Seizure Field Kit is a completely portable handheld forensic solution. The kit includes everything you need to perform a comprehensive digital forensic analysis of over 2,200 cell phones, PDAs, and GPS devices anywhere, anytime. Better yet, you can use your Device Seizure dongle that comes in the kit on any lab machine making it more than just a field kit. Does your mobile phone forensic solution have comprehensive analysis features? If not, it's probably not getting enough data from devices to warrant analysis.
The Device Seizure Field Kit Includes:
- One license of Device Seizure to acquire, analyse, and report on over 2,200 different devices
- All the components of the Device Seizure ToolBox including data cables, power management, a SIM card reader, and more
- A 1.6 GHz Laptop with 1 GB RAM and a 120 GB hard drive used to perform acquisitions and analysis
- One Porn Detection Stick for fast, portable searches of illicit images on any drive.
- One Chat Stick for fast, portable searches and analysis of chat logs on any drive.
- One license of Forensic Replicator to acquire data from different media you may encounter in the field
- One license of P2 eXplorer to mount images as a virtual drive
- One license of Point to Point to view GPS coordinates in Google Earth
- Various media card readers
- Rugged carrying case
- One year software and new cable subscriptions
Other Features:
- Expandable kit allows you to:
- Install other forensic software so you're entire toolbox can go with you anywhere
- Perform comprehensive analysis of acquired data
- Bookmarking
- Data Carving of Multi-Media Files
- Deleted Data Recovery
- Read Backup Files from a PC
- File Sorting
- Windows CE Registry Viewer
- Built in File Viewers
- Built in Hex Viewer
- Over 250 Other File Viewers
- Examine various types of media such as USB drives and SD Cards
- Add more cables and components to your kit
- Recover deleted data with physical acquisitions
- Search for illicit images and chat logs on computers
- Created by a trusted forensic company
- Less expensive than other portable solutions that aren't expandable
- Easily update your existing Device Seizure and Toolbox with the Field Kit Conversion Kit
Paraben DS Rugged Field Kit

Paraben's Device Seizure Rugged Field Kit is a completely portable handheld forensic solution. The kit includes everything you need to perform a comprehensive digital forensic analysis of over 2,200 cell phones, PDAs, and GPS devices anywhere, anytime. Does your cell phone forensic solution have comprehensive analysis features? If not, it's probably not getting enough data from devices to warrant analysis.
The Device Seizure Rugged Field Kit Includes:
- One license of Device Seizure to acquire, analyse, and report on over 2,200 different devices
- All the components of the Device Seizure ToolBox including data cables, power management, a SIM card reader, and more
- A Ruggedised Tablet PC to perform acquisitions and analysis:
- Intel Core Duo ULV U2500 - 1.2GHz, 533MHz FSB, 2MB L2 cache
- 8.4" SVGA Color TFT LCD (800 x 600), Digitizer and Passive Touch Screen Standard
- 2GB DDR2 RAM
- 80GB 2.5? Shock Mounted Hard Drive
- Windows XP Tablet PC Edition
- Meets or exceeds MIL-STD 810F, 506.5 IV: 26 Drop/Shock Standards
- Integrated RJ-11 Fax/Modem, RJ-45 Ethernet
- Two Built-in Stereo Speakers
- 2 - USB 2.0 Ports / 1 Mini-USB Port
- PC Card Slot Type 2, Compact Flash Type 2, PCI Exp
- High-Capacity Li-ION Battery Pack (6600 mAh)
- 4.60 lbs. 2.08 kg (With High Capacity Battery)
- One Porn Detection Stick for fast, portable searches of illicit images on any drive.
- One Chat Stick for fast, portable searches and analysis of chat logs on any drive.
- One license of Forensic Replicator to acquire data from different media you may encounter in the field
- One license of P2 eXplorer to mount images as a virtual drive
- One license of Point to Point to view GPS coordinates in Google Earth
- Various media card readers
- Rugged carrying case
- One year software and new cable subscriptions
Other Features:
- Expandable kit allows you to:
- Install other forensic software so you're entire toolbox can go with you anywhere
- Perform comprehensive analysis of acquired data
- Bookmarking
- Data Carving of Multi-Media Files
- Deleted Data Recovery
- Read Backup Files from a PC
- File Sorting
- Windows CE Registry Viewer
- Built in File Viewers
- Built in Hex Viewer
- Over 250 Other File Viewers
- Examine various types of media such as USB drives and SD Cards
- Add more cables and components to your kit
- Recover deleted data with physical acquisitions
- Search for illicit images and chat logs on computers
- Created by a trusted forensic company
- Less expensive than other portable solutions that aren't expandable
Point 2 Point
GPS Point Analysis made easy
View GPS data or call detail records and export into usable formats.Paraben's Point 2 Point is a point analysis tool that allows you to import GPS location data from call detail record spreadsheets, Device Seizure, or other GPS data points and export them to PDF or KML format for use with Google Earth. Imagine being able to take raw data from cell phone providers such as call detail records or GPS devices for review in a visual map for easy analysis.
FEATURES:
- Import and view data exported from Paraben's Device Seizure GPS Plug-in (to be available in Device Seizure v1.3).
- Import and view data from Tower Location spreadsheets directly from the provider
- Import and view data in Google Earth Map Files (.kml)
- Export all imported data to either .kml files to be viewed with Google Earth or to .pdf files.
Now incorporated into Parabens Device Seizure software
Mobile Phone Faraday Bag
One of the big problems with mobile phones is the issue of not being able to keep them secure from any incoming communications from the networks at the point of capture.
Not having the mobile phone switched on means that critical time and date stamps cannot be verified, which means that the evidence captured can be questioned.
Benefits.
- Potentially avoids the problem of the mobile phone becoming PIN locked.
- Faraday Window ensures that the Phone Shield bag is the first faraday bag to allow the examiner to view the phone in a ‘faraday’ condition, thus enabling an ‘immediate preview of evidence’
- Re-useable
- Portable – The Phone-Shield Faraday Bag can be fit onto the utility belt of a beat officer, or pocketed for simple, light transportation.
- Negates the need for an expensive faraday cage
- When spread over the cost of several examinations, the Phone-Shield Faraday Bag will pay for itself in little or no time.
- To prevent the data from the networks communicating with the device, therefore stops any chance of evidence being tainted.
- Prevents any chance of evidence being manipulated during covert acquisition.
- Mobile Phone can still be turned on during flight, thus not losing any data.
- Inexpensive.
Approx Size of Mobile Phone Faraday Bag:
When Sealed: 180mm x 160mm
When Open: 230mm x 160mm
The bag is sealed simply by opening the conductive Hook and Loop at the top of the bag, dropping the phone into the bag, then folding the sealed top over twice, sealing the bag again with more conductive Hook and Loop.
Specially designed plastic coated material is used to provide the main component of the bag, (made with Silver, Nickel and Copper), then a conductive mesh is used to ensure that there is visibility into the Mobile Phone Faraday Bag. The stitching is conductive, the materials are conductive, as is the Hook and Loop.
Faraday Laptop Shield Bag

The Laptop Shield bag uses the same high level technology as the Mobile Phone Shield bag. This Laptop bag is used for transporting computer laptops around under faraday conditions.
Many laptops of today hold a SIM for communications, (Del Latitude D620, 820, Samsungs Q40, Fujitsu Siemens E8210, Sony Vaio’s TZ21WN/B amongst others).
By having the SIM slot, it means that the computer can be used in the same way as a mobile phone that uses the internet or sends TXT messages which of course means that the laptop is now a fully remote communication device, which means that the laptop could be used for nefarious means.
Putting the laptop into the Laptop-Shield bag ensures that even if there is a SIM and that the laptop is set to remotely start up, there won't be any way that the laptop will be able to connect to the networks and possibly pass on information that could instigate a bomb blast.
Handheld First Responders Kit

This specialised kit was designed with the first responder in mind. Whenever there is a handheld device at an incident, there are recommended proceedures to follow. Two of the most important steps are to secure the device from unwanted wireless signals that could contaminate or eliminate data and to provide power to the device to prevent losing data. Paraben's Handheld First Responder Kit provides for both of these steps. The kit includes one Wireless Stronghold Bag one Remote charger, and first responder cards for the handling of PDAs and Cell Phones.
Every first responder should have this kit available to them because you never know when you'll run accross a handheld device that could possibly contain evidence.
» Paraben's Wireless StrongHold Bag
» Remote Charger
Wireless Stronghold Bag

And keep unwanted wireless signals out.
Paraben's Wireless StrongHold Bag (Patent Pending) is the perfect evidence bag for any type of wireless device. First responders can use this bag to ensure proper wireless procedures are kept and that the evidence is protected from potential case killers - after seizure wireless communications.
The special tri-weave material used in the Wireless StrongHold Bag is made of a Nickel, Copper, Silver Plated Nylon plain woven fabric. This fabric is key in preventing unwanted signals from your evidence.
Dimensions: 10" x 7 "
CSI Stick
Paraben's CSI Stick is THE portable mobile phone forensic and data gathering tool. Paraben's CSI Stick opens the world of digital forensics to anyone needing to gather forensic grade data from mobile phones.
Get Mobile Phone Data Anywhere, Anytime
- Phonebook
- Call Logs
- Camera Pictures
- Text Messages (SMS)
- Multi-media Messages (MMS)
- and much more...
Includes:
- One CSI Stick Base Unit
- Two Motorola Tips
- One Samsung Tip
- One Remote Charger
- Carrying Case
**The CSI Stick can only be read and analysed by Paraben's Device Seizure or Device Seizure Lite software**
Project-a-phone ICD-5200

Even with advanced forensic tools like Device Seizure, you never know when you'll run into a device that has no way of electronically processing the data. Sometimes, you just have to process a phone or PDA "old school" by scrolling through the screens and taking pictures. Project-a-Phone securely clamps your handheld device in place under a software-controlled camera that can take screen shots or video recordings of your phone screen. It also delivers a clear video image of the screen to your computer, so you can display live evidence on your monitor, through a projector, or over the Web. The ICD-5200 model boasts a resolution of up to 5.2 megapixels.
Product Features
- Fits most major mobile phones and handheld devices
- Delivers live video or still images
- Lets you record audio and video and take screen captures
- Lightweight and compact for excellent portability
- Includes durable, custom carrying case
- Can be set up in minutes
- Extremely affordable
- Software can simultaneously display multiple screens
Product Specifications
- Accommodates screens up to 12.0cm/4.75" wide and 8cm/3.5" tall.
- Takes screen shots of up to 5.2 megapixels
- Delivers 40 frames per second at SVGA
- Packs into a sturdy 10" x 9" x 2" case
Forensics RF Shielded Test Enclosure

Forensics RF Shielded Test Enclosure with camera
- • ½” 24dB RF foam liner
- RF tight screen-view window
- Double-lip RF tight gasket
- Color OSD video camera
- Easy release handles
- 40GB video DVR system
- Gas filled cover strut
- Inside LED illumination system
- Universal I/O panel
- 6-pole RF filtered power feed through
- Tamper-proof hardware
- (2) RF filtered DB9/USB1.1
- Dual padlockable latches
- Data port feed through
- RF tight silver mesh gloves
- 6-outlet UK power strip
Mobile Phone Examiner - AD
FTK® Mobile Phone Examiner (MPE) integrates with the industry-standard, court-validated Forensic Toolkit® solution to deliver the broadest support for mobile phone analysis. Now you can correlate computer evidence with phone evidence in the same intuitive interface, as well as analyse multiple phones simultaneously. With support for more than 800 phone models, FTK MPE is the ultimate in mobile phone investigations.
http://www.accessdata.com/supported_phones.asp
Product Features
Click the image for a pdf specification sheet
Click the image for a pdf specification sheet
Click the image for a pdf specification sheet
Click the image for a pdf specification sheet
Click the image for a pdf specification sheet
Click the image for a pdf specification sheet
Click the image for a pdf specification sheet