History of OSForensics

Last update Jan. 18^th 2020 6:45:50 PM

Creation date Jan. 7^th 2020 2:52:37 AM

• 
  xr on Jan. 18^th 2020 6:45:50 PMReport

  Documents (.odt, .pdf, .txt, xls)

  2

• 
  xr on Jan. 18^th 2020 5:45:23 PMReport

  Documents (.odt, .pdf, .txt, xls)

  1

  Compressed Files (Zip/Rar)

  2

  Executable Files (.exe)

  0

  Other File Formats

  0

• 
  xr on Jan. 18^th 2020 5:30:16 PMReport

  Number of hidden files

  0

  Number of corrupted/damaged/partially recovered files

  0

• 
  xr on Jan. 18^th 2020 5:19:30 PMReport

  Number of total artifacts

  8

  Documents (.odt, .pdf, .txt, xls)

  0

  Pictures (.jpeg)

  4

  Audio (.mp4)

  0

  Audio

  0

  System Files

  0

  Number of deleted files

  8

• 
  xr on Jan. 18^th 2020 4:22:47 PMReport

  Time for creation (min:sec)

  04:55

• 
  xr on Jan. 18^th 2020 4:08:31 PMReport

  Integrity verification

  yes

• 
  xr on Jan. 18^th 2020 4:03:29 PMReport

  File size (GB/MB/BYTES)

  7.48 GB

• 
  xr on Jan. 15^th 2020 5:02:40 AMReport

  Supported File System

  NTFS (Windows) * · FAT16/FAT32 (DOS/Windows) · exFAT (Windows) · Ext2/Ext3/Ext4 (Linux/Android)** · HFS+/HFSX (Mac/iPhone/iPad)

• 
  xr on Jan. 15^th 2020 2:12:16 AMReport

  Static acquisition

  yes

  Live acquisition

  yes

• 
  xr on Jan. 8^th 2020 2:04:40 AMReport

  Mount virtual machines

  yes

• 
  xr on Jan. 8^th 2020 2:01:31 AMReport

  Auto verify image Checksum

  no

• 
  xr on Jan. 8^th 2020 1:59:55 AMReport

  Hashing

  md5, lm, ntlm, sha1

• 
  xr on Jan. 8^th 2020 1:36:09 AMReport

  Report Generator

  yes

  Log Reports

  yes

• 
  xr on Jan. 8^th 2020 1:33:14 AMReport

  Hashing

  md5, lm, ntlm, and sha1

• 
  xr on Jan. 8^th 2020 1:23:00 AMReport

  Data viewing

  yes

  Keyword searching

  yes

  Carving

  yes

  Decrypting

  yes

  Bookmarking

  yes

  Decompressing

  yes

• 
  xr on Jan. 8^th 2020 1:12:10 AMReport

  Supported Image Formats

  Raw Image (.IMG, .DD) Split Raw Image (.00n) Advanced Forensics Format Images* (AFF) Advanced Forensics Format Images w/ meta data* (AFM) Advanced Forensics Format Directories* (AFD) VMWare Image (.VMDK) EnCase EWF (.E01) EnCase 7 EWF (.EX01) EnCase Logical EWF (.L01) EnCase 7 Logical EWF (.LX01) SMART EWF (.S01) VHD Image (.VHD)

• 
  xr on Jan. 8^th 2020 1:06:39 AMReport

  Case managment

  yes

• 
  xr on Jan. 8^th 2020 12:56:27 AMReport

  Image-to-disk copy

  yes

  Partition-to-partition copy

  yes

  Image-to-partition copy

  yes

• 
  xr on Jan. 8^th 2020 12:46:51 AMReport

  Disk-to-disk copy

  yes

• 
  xr on Jan. 8^th 2020 12:38:40 AMReport

  Hashing

  Hash routines such as md5, lm, ntlm, and sha1 are available

  Filtering

  yes

  Analyzing file headers

  yes

• «
• ‹
• 1
• 2
• ›
• »