OSForensics

What is OSForensics?

OSForensics is a comprehensive digital investigation suite. It enables swift file location on Windows systems or forensic images, supports numerous file types, and facilitates deleted evidence recovery. It uncovers user activities, cracks passwords on live systems or forensic images, and reveals hidden hard disk areas. OSForensics also allows browsing of Volume Shadow copies, organizes evidence into secure case files, and generates customizable reports. It's a versatile tool for managing and conducting digital investigations.

OSForensics is primarily a Windows tool, but it can analyze data from other operating systems (like macOS or Linux) if that data is accessible on a Windows machine or in a disk image.

Abilities of OSForensics:

Identifies files whose contents do not match their file extension. Uncover a user's attempt at concealing photos, documents or other evidence (also known as "dark data") by using the Mismatch File Search.

Creates a forensic signature of a hard disk drive, preserving information about file and directory structures present on the system at the time of signature creation. Identify changes to directories and files by comparing signatures created at different times.

Shows a Timeline View, helping you to identify date ranges where significant activity has occured, or build up a pattern of behaviour over years, months or days.

Provides a suite of tools to view and analyze files, emails, and other system information including: File viewer, Email viewer, Registry Viewer, File system browser, Raw disk viewer, Web browser ThumbCache viewer, SQLite database browser, ESEDB viewer, Prefetch viewer, Plist viewer, $UsnJrnl viewer.

Uncovers and cracks passwords on a live system or forensic image, which can be crucial in accessing protected information.

Pricing per user:

Free Trial

Monthly subscription for full service ($79.00)

Annual subscription for full service ($799.00)

Annual subscription for full service with support and Maintenance ($1,499.00)

36 month subscription for full service with support and Maintenance ($3,299.00)