10 Facts About Oxygen Forensic® Cloud Extractor

In October 2014, Oxygen Forensics changed the DFIR landscape by bringing the first Cloud extraction tool to the forensic industry.

This innovative and built-in tool was available within the powerful Oxygen Forensic® Detective and Oxygen Remote Explorer software and allowed the acquisition of data from Google, iCloud, and Microsoft cloud services, as well as Box, Dropbox, and Bitcasa.

Since then, cloud services have evolved – and so have we.


Oxygen Forensic® Cloud Extractor

Many digital forensic companies jumped onto the “cloud bandwagon” and now offer a cloud extractor, but Oxygen Forensic® Detective and Oxygen Remote Explorer offers the only software that has a Cloud Extractor built into the software at no additional charge.

Let’s go through the 10 most important things investigators need to know about our Oxygen Forensic® Cloud Extractor.

  1. Offers fast data extraction
  2. Conducts corporate investigations
  3. Extracts complete IoT data from Amazon Alexa and Google Home
  4. Decrypts WhatsApp backups of SD cards from Android devices or cloud services
  5. Extracts cloud data from drones
  6. Extracts Data from Fitness Apps
  7. Finds the login credentials, phone number, or token necessary to access any cloud service
  8. Supports 100+ cloud services
  9. Comprehensive analytic tools
  10. Always up-to-date


Run Fast Data Extraction

Oxygen Forensic® Cloud Extractor offers fast data extraction from WhatsApp, Telegram, Discord, Viber, and Line Messengers. Just scan the QR code in the app with a mobile device, and you’ll get Messenger data extracted on your PC in a matter of minutes.


Scan QR code in Oxygen Forensic® Cloud Extractor to quickly extract data from messenger platforms.


Conduct Corporate Investigations

Use Cloud Extractor to conduct corporate investigations. We offer a variety of corporate cloud services, like iCloud, Google Drive, OneDrive, Dropbox, Box, Outlook, Email Server, MEGA, Slack, LinkedIn, Wickr, Messenger, and more.

Extract IoT Data from

 Extract complete  IoT data from Amazon Alexa and Google Home. You can acquire IoT data like voice recordings, contacts, and even shopping lists via username/password or token found on mobile devices or PC.

Decrypt WhatsApp

Decrypt WhatsApp backups of SD cards from Android devices or cloud services. It’s easy – just import an encrypted WhatsApp backup and type the phone number it is assigned to. Enter the code sent to the target phone and decrypt the backup.

Learn more about WhatsApp extraction methods


Screenshot of the Data Extraction window in Cloud Extractor and choosing to decrypt WhatsApp backup file


Extract Cloud Data from Drones

We can extract cloud data from drones. If you thought drone data could only be extracted from the devices themselves, you’re in for a surprise. You can access data including complete drone flight history from the cloud with login credentials or a token. We currently support DJI and Parrot clouds.

Extracts Data from Fitness Apps 

 Even Fitness apps have helped to solve crimes. Health data can now be extracted from the cloud, not just from mobile devices and fitness bracelets. Our Cloud Extractor offers you access to Apple Health, Samsung Health, Mi Fit, RunKeeper, Fitbit, and Google  Fit accounts. 

Finds the Correct Credentials to Access Cloud Services

Our software finds the login credentials, phone number, or token necessary to access any cloud service. Usually, this data can be extracted from a mobile device, but our software also finds them on Windows, macOS, and Linux computers. Just run our free Oxygen Forensic® KeyScout on the subject’s PC, Mac, or Linux computer to collect credentials.


Running Oxygen Forensic® KeyScout on the subject’s PC, Mac, or Linux computer to collect credentials


Access 100+ Cloud Services  

Our Cloud Extractor now supports 100+ cloud services: Popular social networks like Facebook, Twitter, Instagram; travel data from Uber, BlaBlaCar, Airbnb, Booking.com; device accounts from Samsung, Huawei, Mi Cloud; and many others. If you see an app that isn’t on our list, send us a request.

Comprehensive Analytic Tools

Comprehensive data analysis in Timeline, Social Links, Image Categorization, Facial Categorization, and other analytical sections. You can choose time range and specific data categories, share saved extractions, and merge them with other extractions. All features in one software platform.

Always up-to-date

The cloud security protocols are constantly changing, which is why we place great importance on keeping our Cloud Extractor solution up-to-date. We regularly

test Oxygen Forensic® Cloud Extractor, adding support for new service, artifacts, and fixing extraction problems caused by the cloud service provider. Users can expect our Cloud Extractor to update every 1-2 months.