Oxygen Forensic Extraction in a Box (XiB)

This course provides a focused introduction to mobile data extraction using Oxygen Forensic® Extractor — a core component of the Oxygen Forensic® Detective suite.
It is ideal for students entering the mobile forensics field or professionals seeking to enhance their practical extraction skills. Participants will explore physical, logical, and OxyAgent extraction methods for Android, iOS, and other devices such as drones, UICC, and SD cards.

The course also covers advanced techniques including bypassing screen locks, using ADB commands, firmware management, and brute-force approaches to overcome encryption barriers (FDE/FBE). Through guided practice, learners will gain a complete understanding of extraction workflows and data integrity preservation.

Course Information
Field of Study: Specialized Knowledge
Advanced Preparation: None
Prerequisites: No prerequisites required
Program Level: Basic
Delivery Method: Classroom
Duration: 4 Days

Modules

Install and Support
Introduces students to the Oxygen Forensic® Extractor environment. Covers installation, driver setup, use of ADB commands, and configuration for optimal results. Emphasizes maintaining data integrity throughout extraction.

Where to Begin
Explains how to assess and identify devices before extraction. Students learn research techniques to understand device characteristics, ports, and configurations to determine the correct extraction method.

Oxygen Forensic® Extractor
Provides a guided walkthrough of the Extractor interface. Covers exploitation tools, restoration options, device support lists, and extraction hashing for data verification and validation.

Practical Exercises and Scenarios
Applies learned techniques to real-world cases. Students perform live extractions, analyze results, and prepare data for reporting — building confidence through hands-on experience.