OSForensics great program for computer forensic analysis

By | 13 July 2011

OSForensics is a new Windows program for forensic analysis really fully featured and easy to use. It’s hard to find a such software available also as free version (the paid version has more features).
The download is actually available as beta, the version 1.0 will be available too.

Main features of the program are: find files quickly and you can view the results in the form of a file listing, a thumbnail view, or a timeline view ; search inside files allows you to find specific text; search emails with the support of various mail formats; recover deleted files feature, even if deleted from recycle bin, uncover recent activity providing an history of users actions, collect system information like CPU, RAM, hard disk, etc…; view activity memory: with this feature the program attempts to uncover passwords and other sensitive information that would otherwise be inaccessible; extract logins and passwords from recently visited websites.

There is also a tools where you can download other useful programs for free: OSFMount to mount image files, OSFClone to clone a disk, ImageUSB to write an image to multiple USB drives.

In download section you can also download hash sets that allows the program to identify which files are safe and which not.

In the same section you can download the rainbow tables that are used to retrieve passwords given that you have the hash (encrypted text) of that password.

AGGIORNAMENTO:

The software has been updated to version 1, don’t miss the chance to win a license of the pro version by partecipating to the contest. A big thanks to Passmark!

Iscriviti al gruppo Telegram Italian Spaghetti Geeks

https://t.me/ItalianSpaghettiGeeks

News e discussioni sulla tecnologia (internet, computer e mobile, telefonia, sat/DTT e streaming, ecc...), giveaways esclusivi prodotti tech, sconti ed offerte e molto altro ancora!

Category: Uncategorized

Leave a Reply

This site uses Akismet to reduce spam. Learn how your comment data is processed.