Discover all relevant forensic evidence from a system, quickly and easily!

OSForensics

Browse by Company

Adobe, Apowersoft, Ashampoo, Autodesk, Avast, Corel, Cyberlink, Google, iMyFone, iTop, Movavi, PassFab, Passper, Stardock, Tenorshare, Wargaming, Wondershare

OSForensics 11.0.1001

  -  273.23 MB  -  Trial
Free Download

Security Status

Sometimes latest versions of the software can cause issues when installed on older devices or devices running an older version of the operating system.

Software makers usually fix these issues but it can take them some time. What you can do in the meantime is to download and install an older version of OSForensics 11.0.1001.


For those interested in downloading the most recent release of OSForensics or reading our review, simply click here.


All old versions distributed on our website are completely virus-free and available for download at no cost.


We would love to hear from you

If you have any questions or ideas that you want to share with us - head over to our Contact page and let us know. We value your feedback!

Download OSForensics 11.0.1001

  • OSForensics 11.0.1001 Screenshots

    The images below have been resized. Click on them to view the screenshots in full size.

    OSForensics 11.0.1001 Screenshot 1
  • OSForensics 11.0.1001 Screenshot 2
  • OSForensics 11.0.1001 Screenshot 3

What's new in this version:

Android Artifacts:
- OSForensics now receives contact photos from OSFExtract and saves them to disk but does _not_ display them in any way nor does it associate them with the actual contact to whom they belong
- Added play button to MMS video thumbnails
- Added contact name to SMS/MMS list
- Added missing conversation view information
- Added contact photos to contact window
- Fixed GDI Bitmap handle leak in MMS thumbnail cache
- Fixed showing invalid string when no contact name present
- Fixed bug where OSForensics wasn't consuming and decoding the new forensic data element counts
- Fixed bug in OSFExtract where ".jpg" was added to the contents of all ContactParts instead of only the "Photo" one, to make the contact photo URI into a jpg file name
- Changed default string for calls with no associated name from 'null' to 'unknown'
- Improved contact name resolution for conversations

File Name Search:
- Added detection of the store.vol Windows Email database file in the UnistoreDB folder, in the preset email search option
- Update the email preset search to exclude some false positives and also include .msg files in the search

User Activity:
- Added a few columns that can be of great forensic value, such as MAC timestamps, File size, Access count (retrieved from DestList), MAC address and System boot timestamp from Birth Object, New&Birth volume IDs
- Added some extended info retrieved from DestList entry of OneDrive Jump List file (available from Windows 11), for example: Title, User ID, Local path, App name, MAC Timestamps
- Updated Jump Lists to support for parsing OneDrive Jump List file (5a2098e080cf7ac4.automaticDestinations-ms) on Windows 11
- Jump Lists, Fixed bug where some Windows 11 were parsed incorrectly

Top Downloads

More Popular Software »