OSForensics 4.0.1000

4.6 out of 5 stars 4.6 (31 votes)


Windows 7/8/10/Vista/XP / Shareware; $899.00 / 4,541 downloads

OSForensics will allow you to extract forensic data from computers, quicker and easier than ever. Uncover everything hidden inside a PC. Discover relevant forensic data faster with high performance file searches and indexing. Restore deleted files. Identify suspicious files and activity with hash matching, drive signature comparisons, and look into e-mails, memory, and binary data. Manage your digital investigation. Organize information and create reports about collected forensic data.

  • Homepage


  • Limitations

    Yes - 30 day timeout

  • Latest Changes

    - Licence changes

    - Free version has been replaced by a 30 day trial

    - USB installation is now available only in the Pro version

    - Changed the maximum number of items that can be indexed (in create index) to 2500 for the Trial version

    - Recent activity exported list is now limited to 10 items in the Trial version

    - Changed the maxium number of browser passwords displayed to 5 per browser for the Trial version

Reviews of OSForensics

  1. 5 out of 5 stars

    Reviewing 3.1.1005 (Feb 19, 2015)

    this is a bump for my previous review. This software helped me complete a research paper regarding the possibility of completely scrubbing a system and leaving no traces behind.

  2. 5 out of 5 stars

    Reviewing 2.1.1000 (Aug 12, 2013)

    Pretty interesting. Has a serious learning curve attached to it. Don't expect to be a CSI right out of the gate. Compared to enCase, this has a nicer interface, and has the same challenge to learning where everything is, and how it all ties together. Haven't completed a full case in this one yet, but so far it's worked decently. Get it and try it. Certainly useful for any Information Assurance students.

    Also sets itself as transportable which is ridiculously useful. I'll give it a 5 because it all comes together well.

  3. 4 out of 5 stars

    Reviewing 2.0.1001 (Feb 4, 2013)

    Most interesting +

  4. 3 out of 5 stars
    some guy

    Reviewing 1.2.1003 (Oct 7, 2012)

    wholemkt9 go fu*** your self!

Discuss OSForensics