Download Download OSForensics 9.1.1006 Free

Computer investigations are quite difficult, especially because it is easy to hide electronic evidence or get rid of it altogether. However, you can manage to retrieve all this information by using software designed specifically to discover and identify various suspicious files and documents.

Scan the entire computer and retrieve suspicious files

Operating system forensics It is an application that, by checking any content in email archives, deleted files, or even web browsing history, you can thoroughly check and scan your computer for any evidence that might provide you with insight. In addition, you can organize the evidence by creating separate cases that can separate the data from each other.

If you are dealing with encrypted files, the utility can use popular SHA-256 or MD5 hashes to verify and match the files to check if their signatures match. In addition, almost any area of ​​the hard disk and operating system can be accessed, including the registry, shadow copies and even cache.

Generate a large number of reports and rebuild the RAID array

Since investigations tend to accumulate large amounts of information, it is difficult to track and categorize them, especially when you are dealing with multiple cases at the same time. In this case, you can use the app’s report generator feature, which enables you to synthesize the data into more accessible blocks and view the overall progress of each block.

The utility also provides some slightly advanced functions that can be used to recover specific types of data, such as RAID arrays or SQL database files. In addition, you can also identify the operating frequency of various other applications installed on the target computer, and view the information recorded by the operating system prefetcher.

In summary

Thanks to the comprehensive feature list, few things go through OSForensics, especially when it comes to deleted or hidden files. In addition, due to the intuitive interface and the overall simplicity of the application, you can easily use all the provided components.