
OSForensics allows you to recover and search deleted files, even after they have been removed from the Recycle Bin. OS Forensics allows you to perform full-text searches within email archives used by many popular e-mail programs such as Microsoft Outlook, Mozilla Thunderbird, Outlook Express, and more. This can take some time but it is what allows for repeated fast searches later on. The first stage in being able to search emails is to create an index of the archives in question.

This includes the Timeline View which allows you to sift through the matches on a timeline, making evident the pattern of user activity on the machine. Results are returned and made available in several different useful views. You can search by filename, size, creation and modified dates, and other criteria.
Osforensics tool windows#
It provides one of the fastest and most powerful ways to locate files on a Windows computer. So it is possible to correctly index a DOCX file attached to an E-mail in a PST file which is in turn compressed in a ZIPX file. This includes: DOC, DOCX, PDF, PPT, XLS, RTF, WPD, SWF, DJVU, JPG, GIF, PNG, TIFF, MP3, DWF, DOCX, PPTX, XLSX, MHT, ZIP, PST, MBOX, MSG, DBX, ZIP, ZIPX, RAR, ISO, TAR, 7z and more. OSForensics can index the content of a huge variety of file formats. Manage your digital investigation and create reports from collected forensic data. Identify suspicious files and activity with hash matching, drive signature comparisons, e-mails, memory, and binary data.

OSForensics lets you extract forensic evidence from computers quickly with high-performance file searches and indexing.
