: Added "lightning-fast" imaging speeds to reduce the time required to acquire forensic disk images.
: Added support for carving Master File Table (MFT) records on non-NTFS quick-formatted volumes, which allows for recovering files that would otherwise be lost after a format. Improved Media Handling : Added a quality level indicator for thumbnail previews.
: A new housekeeping button verifies the digital signatures of the OSForensics executable itself to ensure the program has not been tampered with. Using the OSForensics Workflow PassMark OSForensics Professional 10.0 Build 10...
: This module evolved from a simple prefetch viewer to include a wider range of program activity traces.
: Introduced the ability to automatically create a Virtual Machine (VM) directly from forensic disk images, allowing investigators to boot the suspect's OS in a safe, sandboxed environment. 🔍 Advanced Data Recovery & Carving : Added "lightning-fast" imaging speeds to reduce the
Implemented minimum size requirements for carved files (e.g., 126 bytes for JPGs) to reduce false positives. 🕵️ New Artifact Analysis
The release (originally launched around July 2022) introduced significant enhancements focused on speed and deeper data recovery capabilities. : A new housekeeping button verifies the digital
: Users can reorder navigation buttons to match their specific investigative workflow and lock the workflow with a password to prevent unauthorized changes.