Discover all relevant forensic evidence from a system, quickly and easily!

OSForensics 9.1.1004

December, 9th 2021 - 210.26 MB - Trial

Free Download

Security Status

Latest Version

OSForensics 11.0.1007
Operating System

Windows Vista / Windows 7 / Windows 8 / Windows 10
User Rating

Click to vote
Author / Product

PassMark Software / External Link
Filename

osf.exe
MD5 Checksum

bb7692bb5aac6740fc7bdd5aad6f50d4

Sometimes latest versions of the software can cause issues when installed on older devices or devices running an older version of the operating system. Software makers usually fix these issues but it can take them some time. What you can do in the meantime is to download and install an older version of OSForensics 9.1.1004.

For those interested in downloading the most recent release of OSForensics or reading our review, simply click here.

All old versions distributed on our website are completely virus-free and available for download at no cost.

We would love to hear from you

If you have any questions or ideas that you want to share with us - head over to our Contact page and let us know. We value your feedback!

Download OSForensics 9.1.1004

OSForensics 9.1.1004 Screenshots

The images below have been resized. Click on them to view the screenshots in full size.

What's new in this version:

Boot VM:
- Support for booting MacOS Catalina and Big Sur. Fixed EFI script to detect boot.efi location for booting

Case Management:
- Enhanced USB Write Block block more kinds of removable storage devices

Disk Image and Filesystem Support:
- APFS, added additional file system caching for better performance. Result was up to 30X performance improvement for file searching.
- Support for APFS Sealed Volumes
- APFS, handle compression algorithm 5

File Viewer:
- Fixed hang when a file system read error occurs when attempting to generate thumbnails

JSON Viewer:
- Added new feature to parse Google Location History JSON format archive file exported via Google Takeout service, shows a summary of the locations list
- Selected locations can be exported in KML/GPX/CSV formats for use in applications like Google Earth, Google Maps My Maps and OSForensics Map Viewer
- Updated right-click menu to view locations on internal Map Viewer

Web Capture:
- When downloading large videos the connection to remote server could end with windows error 10060 (connection drop) and/or 10054 (server terminate connection). Previous behaviour: OSForensics reported failed download. Now if OSForensics detects the download is because of above errors, it try attempt to retry the download (the download should continue where it left off). If it fails three (3) times, it will ask user if they want continue to retry or stop.