History of OSForensics

Last update 2020-01-18 18:45:50

Creation date 2020-01-07 02:52:37

xr on 2020-01-18 18:45:50
Documents (.odt, .pdf, .txt, xls)
2
xr on 2020-01-18 17:45:23
Documents (.odt, .pdf, .txt, xls)
1
Compressed Files (Zip/Rar)
2
Executable Files (.exe)
0
Other File Formats
0
xr on 2020-01-18 17:30:16
Number of hidden files
0
Number of corrupted/damaged/partially recovered files
0
xr on 2020-01-18 17:19:30
Number of total artifacts
8
Documents (.odt, .pdf, .txt, xls)
0
Pictures (.jpeg)
4
Audio (.mp4)
0
Audio
0
System Files
0
Number of deleted files
8
xr on 2020-01-18 16:22:47
Time for creation (min:sec)
04:55
xr on 2020-01-18 16:08:31
Integrity verification
yes
xr on 2020-01-18 16:03:29
File size (GB/MB/BYTES)
7.48 GB
xr on 2020-01-15 05:02:40
Supported File System
NTFS (Windows) * · FAT16/FAT32 (DOS/Windows) · exFAT (Windows) · Ext2/Ext3/Ext4 (Linux/Android)** · HFS+/HFSX (Mac/iPhone/iPad)
xr on 2020-01-15 02:12:16
Static acquisition
yes
Live acquisition
yes
xr on 2020-01-08 02:04:40
Mount virtual machines
yes
xr on 2020-01-08 02:01:31
Auto verify image Checksum
no
xr on 2020-01-08 01:59:55
Hashing
md5, lm, ntlm, sha1
xr on 2020-01-08 01:36:09
Report Generator
yes
Log Reports
yes
xr on 2020-01-08 01:33:14
Hashing
md5, lm, ntlm, and sha1
xr on 2020-01-08 01:23:00
Data viewing
yes
Keyword searching
yes
Carving
yes
Decrypting
yes
Bookmarking
yes
Decompressing
yes
xr on 2020-01-08 01:12:10
Supported Image Formats
Raw Image (.IMG, .DD) Split Raw Image (.00n) Advanced Forensics Format Images* (AFF) Advanced Forensics Format Images w/ meta data* (AFM) Advanced Forensics Format Directories* (AFD) VMWare Image (.VMDK) EnCase EWF (.E01) EnCase 7 EWF (.EX01) EnCase Logical EWF (.L01) EnCase 7 Logical EWF (.LX01) SMART EWF (.S01) VHD Image (.VHD)
xr on 2020-01-08 01:06:39
Case managment
yes
xr on 2020-01-08 00:56:27
Image-to-disk copy
yes
Partition-to-partition copy
yes
Image-to-partition copy
yes
xr on 2020-01-08 00:46:51
Disk-to-disk copy
yes
xr on 2020-01-08 00:38:40
Hashing
Hash routines such as md5, lm, ntlm, and sha1 are available
Filtering
yes
Analyzing file headers
yes

Go back to: OSForensics