Having the ability to obtain addresses from geo coordinates is important when piecing together an investigation. Knowing this, we incorporated it as a new feature in Oxygen Forensic® Detective. This new feature allows investigators to receive addresses utilizing either OpenStreetMap or Mapbox directly in the Oxygen Forensic® Detective. OpenStreetMap OpenStreetMap…
Analysis of Volume Shadow Copies in Oxygen Forensic® Detective
What is Volume Shadow Copy? Volume Shadow Copy is a technology included in Microsoft Windows that can create backup copies or snapshots of computer files or volumes, even when they are in use. It requires the file system to be NTFS in order to create and store these backup copies.…