Discover all relevant forensic evidence from a system, quickly and easily!

OSForensics 8.0.1005

December, 30th 2020 - 197.51 MB - Trial

Free Download

Security Status

Latest Version

OSForensics 11.0.1007
Operating System

Windows Vista / Windows 7 / Windows 8 / Windows 10
User Rating

Click to vote
Author / Product

PassMark Software / External Link
Filename

osf.exe
MD5 Checksum

bf517fcabd3ed2039db540824d11fb33

Sometimes latest versions of the software can cause issues when installed on older devices or devices running an older version of the operating system. Software makers usually fix these issues but it can take them some time. What you can do in the meantime is to download and install an older version of OSForensics 8.0.1005.

For those interested in downloading the most recent release of OSForensics or reading our review, simply click here.

All old versions distributed on our website are completely virus-free and available for download at no cost.

We would love to hear from you

If you have any questions or ideas that you want to share with us - head over to our Contact page and let us know. We value your feedback!

Download OSForensics 8.0.1005

OSForensics 8.0.1005 Screenshots

The images below have been resized. Click on them to view the screenshots in full size.

What's new in this version:

Auto Triage:
- Upgraded the screen capture to take screenshots of all running program windows.
- Removed the drive selection drop-down list and changed it to select the OS boot drive to perform live acquisition scanning

Case manager:
- Fixed an issue when exporting a report using the copy files option, if a source file was read only then multiple error messages could be show during the file copy process
- Improved speed of export when large amounts of files are being exported as part of the report

USEDB viewer:
- updated to library code for compatibility with newer helper libraries

Verify Hash:
- Fixed a bug where clicking the "upper case output" option after generating a hash would not update the primary hash and instead replace the secondary hash with the upper case primary

File system support:
- Updated library code for reading E01 and L01 files. While there were multiple changes under the hood, the most visiible change should be better support for L01 image files. In particular it fixes a case where a NTFS directory entry in a L01 could point to the wrong file.