OSForensics will allow you to extract forensic data from computers, quicker and easier than ever. Uncover everything hidden inside a PC. Discover relevant forensic data faster with high performance file searches and indexing. Restore deleted files. Identify suspicious files and activity with hash matching, drive signature comparisons, and look into e-mails, memory, and binary data. Manage your digital investigation. Organize information and create reports about collected forensic data.
- Added warning when attempting to add the entire image to case when there is a partition table
- Allow the option to select the "entire image file" when adding images to case
- New Zoom builds with added recognition for extensions .plt and .dxf to index filename only
- Fixed stack/buffer overflow issue when indexing PST emails
- When viewing the raw sectors of entire images, the partition table info is now decoded
- Fixed special characters such as '&' in the filepath from the search results not being decoded properly
- Device dropdown list now includes the image file's partition (or "Entire image")
- Fixed bug with not being able to read the raw bytes of image files using UNC paths
- Accessing the entire image file with a valid partition table (ie. without specifying a partition) no longer returns error
Reviewing 3.1.1005 (Feb 19, 2015)
this is a bump for my previous review. This software helped me complete a research paper regarding the possibility of completely scrubbing a system and leaving no traces behind.
Reviewing 2.1.1000 (Aug 12, 2013)
Pretty interesting. Has a serious learning curve attached to it. Don't expect to be a CSI right out of the gate. Compared to enCase, this has a nicer interface, and has the same challenge to learning where everything is, and how it all ties together. Haven't completed a full case in this one yet, but so far it's worked decently. Get it and try it. Certainly useful for any Information Assurance students.
Also sets itself as transportable which is ridiculously useful. I'll give it a 5 because it all comes together well.
Reviewing 2.0.1001 (Feb 4, 2013)
Most interesting +
Reviewing 1.2.1003 (Oct 7, 2012)
wholemkt9 go fu*** your self!
No comments yet