Nowadays, computer forensics is used more frequently by security and law-enforcing agencies to detect traces of wrongdoings among employees and particular users. This program performs an in-depth analysis of systems to detect evidence that can convict cyber criminals and other delinquents.
Although its functions are very specialized, it is really easy to use. You can start by creating a case by typing its name and that of the investigator, as well as other data regarding the custody of information, the body requesting the investigation, and so on. The program has powerful capabilities. You can search files by name and select those you want to inspect. This process is done in mere seconds, unlike other file search methods, which can take several minutes or even hours. You can also search among the deleted files those that were destroyed by the delinquent to erase any evidence. This process takes a while, since, as I've said, it is a very in-depth search.
The program has many other functions, such as a recent activity research function, a built-in web browser so you don't need to perform Internet functions outside the program, and much more. Thus, you will need to read the full manual to become familiar with all the program's functionalities.
Since the program is aimed at corporate and law-enforcing users, its cost is not affordable for common users. Nevertheless, if you need to research a computer in search of specific data for security purposes, then you may find it useful.
You can use the shareware version of the program during 30 days. If you find it useful and want to use it longer, then you will need to purchase a license.
v0.9 [Apr 19, 2011]
- Moved beta expiry to 15th of October
- Fixed crash in sig creation when creating hashes and first file hashed is 0 length.
- Fixed potential infinite loop in sig creation when creating hashes.
- Fixed possible buffer overflow issue in signature creation when trying to hash a file that is inaccessible.
- Added ability to change color of bookmarks in case management window.
- Added file name search presets for video and audio files.
- Fixed a crash when comparing signatures that had extermely long registry key paths.
- Fixed a index search crash relating to certain exact phrase searches.
- Several fixes and improvements to Rainbow Table generation and recovery.
- Rainbow Table changes have rendered any previously generated tables unusable. Tables will have to be re-generated.
- Fixed problems with not extracting From: and To: for some emails during indexing.
- Added button to minimise/maximise navigation buttons to make low resolution use easier.
- Added right click menu to navigation bar to make the buttons thinner.
- Can now use the raw disk viewer on unpartitioned or corrupted drive images.
- Added a second check for locked chrome database.
- Added a way of remembering the copy on locked choice so user doesn't have to sit though multiple dialogs.
- Renamed "Get Network drive Info" to "Get Network Info".
- Added Edit option to command list management to edit customised (not default) commands.
- Internal viewer can now view office documents and pdf files.
- Fixed keyboard shortcuts in email list of index search.
- Fixed a thumbnail bug in index search lists.
- Fixed a bug where bookmarks would not be removed from case management window when they were removed elsewhere in OSF.
- Fixed a bug preventing the creation of a new case.
- New file bookmarking functionality.
- Can now see which files have already been viewed for a particular case.
- Can now brute force passwords using random passwords and specify the randok pattern.
- Can get Chrome and Firefox password even if the browsers are still open.
- Updated a few of the password dictionaries.
- Updated indexer executable with some minor bug fixes. Most noteably fixed a crash that occured indexing emails on Windows XP.
- Fixed a bug preventing overwriting USB installs with more recent versions of OSF
Share images, video and music between your Android and Windows devices
