OSForensics

You're investigating files and system tracks within a digital investigation case.

Developer PassMark Software

Paid · Windows

OSForensics bundles tools for searching, inventorying and analyzing data on a computer. You can organize findings in a case.

It's specialized research software. Working on an original disk can change tracks; a responsible working method requires knowledge of images and verifiable steps.

Get more from OSForensics

Digital research requires that you keep track of origin and changes. If possible, work with a copy and identify the source you're investigating. This way you prevent normal actions on the system from affecting the tracks that you want to look at.

Limit access to research data and note which functions you have used. Search results should be assessed in their context. A found file or entry does not in itself prove who did an action or why.

Version and updates

For OSForensics check the version number of the release you are actually installing.

Who is it for?

You're doing qualified digital research.

Getting started

Open the official download page of OSForensics and choose the execution for your device.

Privacy

Research can expose very personal data; restrict access and use only authorized data.

Good to know

Specialist knowledge needed. Paid functions.

Please note

Save originals and document research steps.

Advantages

  • Research tools together Business-oriented work Search in System Data

Things to consider

  • Specialist knowledge needed Paid functions

Download OSForensics

The download page opens in a new tab.

Version history

No previous versions are listed yet.

Report a new version

Is there a newer version of OSForensics? Send the version number and a link to the official announcement. Our editors will check it. No login is required.

More from PassMark Software

MemTest86 11.7 build 1000

You test the working memory outside your regular operating system from a bootable USB stick.

View all software from PassMark Software →

Our verdict

OSForensics is intended for targeted digital research, not just cleaning up. Record purpose and method and work on a controlled copy where necessary. The software does not automatically make conclusions reliable. For an ordinary missing photo, a simpler recovery program is usually a better fitting start.

Ratings

No ratings yet. Share your experience.

Log in to rate this software.

Comments

Share your experience. Comments appear after approval.

No comments yet.