OSForeniscs
Description
OSForensics lets you extract forensic evidence from computers quickly with high performance file searches and indexing. Identify suspicious files and activity with hash matching, drive signature comparisons, e-mails, memory and binary data. Manage your digital investigation and create reports from collected forensic data.
Complete suite for forensic investigation
Extract forensic data from computers, quicker and easier than ever. Uncover everything hidden inside a PC.
Discover data
- Discover relevant data faster through high performance file searching and indexing. Extract passwords, decrypt files and recover deleted files quickly from Windows, Mac, Linux file systems and Android phones.
Identify evidence
Identify evidence and suspicious activity through our hash matching and drive signature analysis features. Identify and analyze all files and even automatically create a timeline of all user activity.
Manage your case
360° Case Management Solution. Manage your entire digital investigation with OSF’s new reporting features. Build custom reports, add narratives and even attach your other tools’ reports to the OSF report.
Capabilities of OSForensics
Extensive file type support
Office and Acrobat documents, image files (with OCR), e-mails
(Outlook, Thunderbird, Mozilla and more), attachments, ZIP files,
and even binary files and unallocated clusters.
Recover deleted evidence
destroy or have been removed from the Recycle Bin.
Uncover user activity
accessed websites, USB drives that have been connected,
wireless networks, recent downloads, website logins and
website passwords.
Browse Volume Shadow copies
Use OSF to access Volume Shadow Copies. This allows you to
look at how a disk appeared at a point of in time in the past and
see what has changed. Discover changes to files and even view
deleted files.