Discover all relevant forensic evidence from a system, quickly and easily!

OSForensics

OSForensics 8.0.1006

  -  197.53 MB  -  Trial

Sometimes latest versions of the software can cause issues when installed on older devices or devices running an older version of the operating system.

Software makers usually fix these issues but it can take them some time. What you can do in the meantime is to download and install an older version of OSForensics 8.0.1006.


For those interested in downloading the most recent release of OSForensics or reading our review, simply click here.


All old versions distributed on our website are completely virus-free and available for download at no cost.


We would love to hear from you

If you have any questions or ideas that you want to share with us - head over to our Contact page and let us know. We value your feedback!

  • OSForensics 8.0.1006 Screenshots

    The images below have been resized. Click on them to view the screenshots in full size.

    OSForensics 8.0.1006 Screenshot 1
  • OSForensics 8.0.1006 Screenshot 2
  • OSForensics 8.0.1006 Screenshot 3

What's new in this version:

Auto Triage:
- Updated select drives dialog.
- Renamed "Deleted Files" to "List of Deleted Files"
- Renamed "File Listing (Signature)" to "File Listing"
- Added timezone to Process List and File Listing exporting CSV
- Updated to add not only the OS boot drive but also all the other available logical and physical drives to case, and then scan all of them to create file listing
- Deleted file search, updated to scan all drives available and export to CSV files separately
- Added drive selecting options for file listing and deleted files searches

Case Manager:
- Add Device, Added debug output when populating device dropdown
- More robust handling of case device dropdown
- Added more verbose logging during case load

Forensic Imaging:
- Removed unnecessary refreshing of drive dropdown when loading Create Image tab
- Added more verbose logging when opening Forensic Imaging window
- Added debug output when populating device dropdown

Direct File Access:
- ImageFile, add check for opening physical drive when calling FSCTL_ALLOW_EXTENDED_DASD_IO and reading "imageUSB" signature. This fixed an issue when reading the physical disk for an McAfee encrypted drive ( a bug in the McAfee software that caused a read of the physical disk to fail if the read request was not sector aligned)
- libesedb, increased fixed-array size, update for performance issues