Discover all relevant forensic evidence from a system, quickly and easily!

OSForensics

OSForensics 9.1.1003

  -  210.4 MB  -  Trial

Sometimes latest versions of the software can cause issues when installed on older devices or devices running an older version of the operating system.

Software makers usually fix these issues but it can take them some time. What you can do in the meantime is to download and install an older version of OSForensics 9.1.1003.


For those interested in downloading the most recent release of OSForensics or reading our review, simply click here.


All old versions distributed on our website are completely virus-free and available for download at no cost.


We would love to hear from you

If you have any questions or ideas that you want to share with us - head over to our Contact page and let us know. We value your feedback!

  • OSForensics 9.1.1003 Screenshots

    The images below have been resized. Click on them to view the screenshots in full size.

    OSForensics 9.1.1003 Screenshot 1
  • OSForensics 9.1.1003 Screenshot 2
  • OSForensics 9.1.1003 Screenshot 3

What's new in this version:

Case Management:
- Fixed "Verify" option on case items not working correctly
- Fixed "Verify" option on case items without hash values not displaying an error message

Deleted File Recovery:
- Fixed bug, OSForensics will now proceed with File Carving (if enabled) even if the image file contains mixed file system partition types

JSON Viewer:
- Added right-click menu to view HTML format conversations using internal/system web browsers, also double-click to open browser
- Added TXT and CSV exporting options
- Added support to parse Google Hangouts archive JSON format file downloaded from Google Takeout. It provides a summary view of the Hangouts conversation history and allows export of the selected Hangouts conversations to HTML with nicely formatted chatting app-like style so users can easily read through the messages.
- Added right-click menu to export HTML files to case
- Removed Compress JSON button as it may cause crash on large files

Remote Acquisition:
- Fixed logical image creation on remote machine
- Delete temporary config file passed to remote machine when acquisition finished

Start Window:
- Fixed constant CPU usage due to redrawing

Verify/Create Hash:
- Fixed hash function not starting if "none" was selected for the secondary hash