Download OSForensics Download (2022 Latest) Free

OS Forensics allows you extract forensic evidence from computers fast with high performance file searching and indexing. Detect suspicious files and activities with hash matching, disk signature matching, email, memory, and binary data matching. Manage your digital investigation and generate reports based on the collected forensic data. Enjoy!

OS Forensics can index the contents of a huge number of file formats. This includes: DOC, DOCX, PDF, PPT, XLS, RTF, WPD, SWF, DJVU, JPG, GIF, PNG, TIFF, MP3, DWF, DOCX, PPTX, XLSX, MHT, ZIPPST, MBOX, MSG, DBX, ZIP, ZIPX, RARISO, TAR, 7z and more. Recursive containers are also supported. In this way, it is possible to correctly index a DOCX file attached to an email in a PST file, which in turn is compressed in a ZIPX file.

It provides one of the fastest and most powerful ways find files on windows computer

. You can search by file name, size, creation and modification date, and other criteria. The results are returned and made available in several different convenient views. This includes a timeline view that allows you to view matches on the timeline, making a pattern of user activity on the machine obvious.

The first stage in ability email search is to create an index of the archives in question. This may take some time, but this is what allows you to repeat the quick search later. Forensics OS allows you to perform full-text searches in email archives used by many popular email programs such as Microsoft Outlook, Mozilla ThunderbirdOutlook Express and more.

OS Forensics allows you recovery and search for deleted files, even after they have been removed from the trash. This allows you to view files that the user may have tried to destroy. Each deleted file found is displayed with a corresponding quality indicator between 0 and 100. A value close to 100 means that the deleted file is largely intact, except for a few missing data clusters.

OS Forensics scans your system for recent activity such as visited websites, USB drives, wireless networks, recent downloads, logins and website passwords. This is especially useful for identifying user trends and patterns, as well as any recently accessed content or accounts.

With the program you can recover browser passwords from Chromium, edge, IE, fire foxas well as Opera. This can be done on a live machine or from a hard disk image. The recovered data includes the website URL (usually HTTPS), login username, site password, browser used to access the site, and Windows username. Blacklisted URLs are also reported, indicating that the user visited the site but chose not to save the password in the browser.

He can detect and reveal hidden areas of HPA and DCO hard drive that can be used for malicious purposes, including hiding illegal data. Host Protected Area (HPA) and Device Configuration Overlay (DCO) are features for hiding hard disk sectors from end user access.

The application includes built-in support for access Volume Shadow Copies. Shadow copies provide a view of a volume at a specific point in time in the past. This will allow you to detect changes in files and even view possible deleted files.

It provides basic web viewer with the ability to download web pages from the Internet and save screenshots of web pages on the case.
Web browser can be further configured to grab web pages from a user-specified list of URLs. In addition, the web browser can capture all or part of the linked pages (up to one level).

Features and Features

• Import and export of hash sets
• Customizable collection of system information
• There is no limit to the number of cases managed with OSForensics.
• Recovering multiple deleted files in one operation
• List and search for alternative file streams
• Sort image files by color
• Indexing and searching on disk is not limited to a fixed number of files
• No watermark on web captures
• Multi-core acceleration for file decryption
• Customizable collection of system information
• Find files faster, search by file name, size and time
• File content search using the Zoom search engine
• Search email archives from Outlook, ThunderBird, Mozilla, and more.
• Recovery and search for deleted files
• Uncover recent activity of website visits, downloads and logins
• Gather detailed system information
• Password recovery from web browsers, decryption of office documents
• Find and open hidden areas on your hard drive
• View volume shadow copies to see past versions of files

NoteA: 30 day trial. Limited functionality.