#OSFORENSICS RECENT ACTIVITY PDF#
#OSFORENSICS RECENT ACTIVITY INSTALL#
#OSFORENSICS RECENT ACTIVITY ARCHIVE#
#OSFORENSICS RECENT ACTIVITY FULL#

Report Generation, Added certificate verification information to non HTML reports.Report Generation, Added 'Software Verification' link in report sidebar.Report Generation, added ability to toggle the inclusion of signature certificate verification information in report generation dialog.

#OSFORENSICS RECENT ACTIVITY FULL#

Report Generation, updated 'Link to case files' and 'Copy files to report location' options to 'Create Redacted Report' and 'Create Full Length Report' to be more descriptive.

Report Generation, added the details of OSFOrensics digital signature to generated reports.

#OSFORENSICS RECENT ACTIVITY PDF#

Report Generation, separated the HTML and PDF report options into different templates, no longer need to generate a HTML report to get a PDF copy.Added time zone names to time zone drop down and case report.Add Device, changed the default display name to include the date the shadow copy was taken.Added ability to rename case devices after they have been added.Added ability to save and load custom templates for evidence categories.Support for adding recovered partitions to case.Added support for password bypass for Win 10/Server 2016 Builds 1771 (via PEPassPass v1.2.3).Added check and display error for partition-only images without a supported OS before mounting as physical disk.Added check for whether VirtualBox extension pack is installed if USB 2.0 or USB 3.0 controller is selected.Will now display a proper error message when booting from VirtualBox failed (eg.Added ability to find shadow copies from analyze dialog without adding to case first.Added splash screen and progress bar when running auto triage as a standalone option.

#OSFORENSICS RECENT ACTIVITY INSTALL#

Added option to enable running auto triage automatically on startup, which can be enabled in the install to usb dialog and use settings last set.

ESEDB viewer to view and analyze the contents of ESE DB (.

SQLite database browser to view the and analyze the contents of SQLite database files.

ThumbCache viewer to browse the Windows thumbnail cache database for evidence of images/files that may have once been in the system.

Web browser to browse and capture online content for offline evidence management.

Raw disk viewer to navigate and search through the raw disk bytes on physical drives, volumes and images.

File system browser for explorer-like navigation of supported file systems on physical drives, volumes and images.

Registry viewer to allow easy access to Windows registry hive files.

#OSFORENSICS RECENT ACTIVITY ARCHIVE#

Email viewer that can display messages directly from the archive.

File viewer that can display streams, hex, text, images and meta data.

Timeline viewer provides a visual representation of system activity over time.

Create and compare drive signatures to identify differences.

Find misnamed files where the contents don't match their extension.

Verify and match files with MD5, SHA-1 and SHA-256 hashes.

Browse Volume Shadow copies to see past versions of files.

Discover and reveal hidden areas in your hard disk.

Password recovery from web browsers, decryption of office documents.

Uncover recent activity of website visits, downloads and logins.

Search through email archives from Outlook, ThunderBird, Mozilla and more.

Search within file contents using the Zoom search engine.

Find files faster, search by filename, size and time.

It lets you extract forensic evidence from computers quickly with advanced file searching and indexing and enables this data to be managed effectively. OSForensics allows you to identify suspicious files and activity with hash matching, drive signature comparisons, e-mails, memory and binary data. Please contact us for a custom quote, to place an order, or with any questions you may have.

Osforensics recent activity