PassMark OSForensics Professional 3.2 Build 1002 Portable
PassMark OSForensics Professional 3.2 Build 1002 Portable | 53.18 MB
OSForensics allows you to identify suspicious files and activity with hash matching, drive signature comparisons, e-mails, memory and binary data. It lets you extract forensic evidence from computers quickly with advanced file searching and indexing and enables this data to be managed effectively.
Search within Files
If the basic file search functionality is not enough, OSForensics can also create an index of the files on a hard disk. This allows for lightning fast searches for text contained inside the documents. Powered by the technology behind Wrensoft's acclaimed Zoom Search Engine.
Search for Emails
- An additional feature of being able to search within files is the ability to search email archives. The indexing process can open and read most popular email file formats (including pst) and identify the individual messages.
- This allows for a fast text content search of any emails found on a system
Recover Deleted Files
After a file has been deleted, even once removed from the recycling bin, it often still exists until another new file takes its place on the hard drive. OSForensics can track down this ghost file data and attempt to restore it back to useable state on the hard drive.
Uncover Recent Activity
- Find out what users have been up to. OSForensics can uncover the user actions performed recently on the system, including but not limited to:
- Opened Documents
- Web Browsing History
- Connected USB Devices
- Connected Network Shares
Collect System Information
- Find out what's inside the computer. Detailed information about the hardware a system is running on:
- CPU type and number of CPUs
- Amount and type of RAM
- Installed Hard Drives
- Connected USB devices
- and much more.
View Active Memory
- Look directly at what is currently in the systems main memory. Attempt to uncover passwords and other sensitive information that would otherwise be inaccessible.
- Select from a list of active processes on the system to inspect. OSF can also dump their memory to a file on disk for later inspection.
Extract Logins and Passwords
Recover usernames and passwords from recently accessed websites in common web browsers, including Internet Explorer, Firefox, Chrome and Opera.
Whats New:
• Create Index
- Improved MSG/EML/MBOX indexing support. Now using MIMETIC.
- Fixed many common errors and warning messages and file recognition
- Fixed many issues with .zip, .gz, and .tar.gz archives. And recursive archives.
- Fixed filter buttons/checkboxes not working when viewing a failed/cancelled index
- Added fix for "Core engine is not responding" when indexer was stuck in "Finishing" stage due to large index or slow disk write
• Email Viewer
- Added right-click option to jump to the message ID of an e-mail file
- Added progress details when scanning for deleted e-mails
- fixed bug with deleted e-mails not being displayed in the EmailViewer
- Fixed 'assert' error appearing when Subject field is missing in MIME headers
• Index Log Viewer
- Fixed crash when trying to view a previous index log while an indexing job is running.
• Recent activity
- Fixed an issue when trying to get IE10+ URLs from a read only drive
- Fixed an issue with "dirty" IE10+ databases that were displaying a "Failed to attach IE10 database" error in some cases
- Fixed an "autofill_dates" missing error caused by a Chrome update removing this table
- Fixed a "malformed" database error when getting Chrome cookie information
- Fixed some display and sorting issues with shellbag items on the file details tab
• Registry Viewer
- Fixed a crash when opening a corrupt registry file
• Misc
- exFAT partitions are now properly detected as opposed to being identified as "Unknown"
OS: Microsoft Windows XP/Vista/7/8
