OSForensics 5.2.1000
OSForensics е мощен пакет стратегии, който се употребява за компютърна експертиза. OSForensics най-често се употребява от проверяващите органи, специфичните структури и експертните правосъдни органи за сформиране на неоспорими доказателства за осъществена противозаконна активност от конфискувания компютър. Най-често се употребява за сформиране на напълно точни копия на дисковата система, които се изследват от самостоятелни специалисти.
Основни благоприятни условия на OSForensics: Няколко пъти по-бързо търсене, в сравнение с общоприетото търсене на Оценка за съвместимост WindowsИндексиране, ускоряващо още повече търсенетоТърсене в историята на всички известни клиенти за електронна пощаВъзстановяване на изтрити файловеПреглед на наскоро употребяваните документиПреглеждане интензивността на потребление на компютъраСъбиране на цялостна информация за хардуера и софтуера на компютъраПреглеждане и сформиране на тъкмо копие копие на оперативната паметИзвличане на потребителските имена и паролите от браузърите
OSForensics може да се употребява и за решение на по-прости, само че значими задания, като да вземем за пример търсене на изгубени файлове, възобновяване на пароли и откриване на разнообразни вирусни болести. Лиценз: Безплатен (Freeware) .
Промени в OSForensics 5.2.1000:
NEW Triage wizard Wizard launch icon on Start page. Huge amount of data can now be rapidly collected by inexperienced users with single click.
Customize workflow Now also removes icons from the Start page (and the menu)
It is possible to lock down the workflow with a password so inexperienced users can’t re-enable all the features so easily.
Case Manager Items added to a case can now be categorized into a type of Crime, this list can be customised by editing the “Categories.txt” file in the ProgramData folder.
On the “add to case” dialog when using the “Use same details for all” option if the title has not been changed by the user a special <Use item name> flag will be displayed. This will then be replaced by each item’s name when added to the case.
PDF reporting bug fix.
Fixed sorting by clicking on title in Case Management window.
Added new tag <!–OSF_CASE_CASEINFOTABLE–> to customisable reports for generating Case Info table. Only non-blank fields shall be outputted
File Index Fixed a buffer overflow bug due to illegally long filenames in ZIP files
Recent Activity Started sanitising the HTML output for some items when exporting to HTML so that HTML special characters (eg <>&) are safely encoded.
Thumbnail Viewer Now has a faster option to switch between the various thumbnail files found on drive via a drop down list.
Drive preparation 1 click drive preparation function. Can wipe, verify, format drive with 1 click. A log file is also now written to the drive recording the preparation steps.
Hash Set Lookup Added check if SHA256 hash is stored in the hash set. If not, SHA256 is not calculated. This saves a small amount of CPU time.
Email viewer A bug fix for parsing some rare corrupted PST flies
Misc Correction of various multi-threading bugs, which came to light when running a large number of tasks simultaneously. Registry access code wasn’t thread safe & could crash if multiple tasks were reading registry entries at same time, especially password recovery.
Caching of disk’s MFT into RAM didn’t work well with multiple threads. Solution was to enlarged cache slightly and unified it into a shared cache. Multiple threads should run significantly faster than before.
Some handles to various internal resources were not being free. Resulting in memory leaks and possible crashes.
Even larger cache sizes and more advanced cache lookup algorithm to speed up various operation that involve reading MFT (is a RAM usage / speed trade off). Slightly more RAM is used, but disk operations are faster. For example file name searches are now 33% faster.
Some help file updates
Fixed up the opening of the Help file to get the navigation menu showing again. The Edge browser in Win10 unexpectedly broke some of the help functions.
Fixed a crash in the 32bit version when trying to start a filename search
#td_uid_40_59dc682235ca1.td-doubleSlider-2.td-item1{background:url(https://www.kaldata.com/wp-content/uploads/2016/11/osforensics-welcomescreen-80x60.png) 0 0 no-repeat}#td_uid_40_59dc682235ca1.td-doubleSlider-2.td-item2{background:url(https://www.kaldata.com/wp-content/uploads/2016/11/comparesig-80x60.jpg) 0 0 no-repeat}#td_uid_40_59dc682235ca1.td-doubleSlider-2.td-item3{background:url(https://www.kaldata.com/wp-content/uploads/2016/11/osfmount-mainscreenshot-80x60.png) 0 0 no-repeat}Екрани1 от 3
Официална страница
Изтегли: OSForensics 5.2.1000 (67.2 MB)
Основни благоприятни условия на OSForensics: Няколко пъти по-бързо търсене, в сравнение с общоприетото търсене на Оценка за съвместимост WindowsИндексиране, ускоряващо още повече търсенетоТърсене в историята на всички известни клиенти за електронна пощаВъзстановяване на изтрити файловеПреглед на наскоро употребяваните документиПреглеждане интензивността на потребление на компютъраСъбиране на цялостна информация за хардуера и софтуера на компютъраПреглеждане и сформиране на тъкмо копие копие на оперативната паметИзвличане на потребителските имена и паролите от браузърите
OSForensics може да се употребява и за решение на по-прости, само че значими задания, като да вземем за пример търсене на изгубени файлове, възобновяване на пароли и откриване на разнообразни вирусни болести. Лиценз: Безплатен (Freeware) .
Промени в OSForensics 5.2.1000:
NEW Triage wizard Wizard launch icon on Start page. Huge amount of data can now be rapidly collected by inexperienced users with single click.
Customize workflow Now also removes icons from the Start page (and the menu)
It is possible to lock down the workflow with a password so inexperienced users can’t re-enable all the features so easily.
Case Manager Items added to a case can now be categorized into a type of Crime, this list can be customised by editing the “Categories.txt” file in the ProgramData folder.
On the “add to case” dialog when using the “Use same details for all” option if the title has not been changed by the user a special <Use item name> flag will be displayed. This will then be replaced by each item’s name when added to the case.
PDF reporting bug fix.
Fixed sorting by clicking on title in Case Management window.
Added new tag <!–OSF_CASE_CASEINFOTABLE–> to customisable reports for generating Case Info table. Only non-blank fields shall be outputted
File Index Fixed a buffer overflow bug due to illegally long filenames in ZIP files
Recent Activity Started sanitising the HTML output for some items when exporting to HTML so that HTML special characters (eg <>&) are safely encoded.
Thumbnail Viewer Now has a faster option to switch between the various thumbnail files found on drive via a drop down list.
Drive preparation 1 click drive preparation function. Can wipe, verify, format drive with 1 click. A log file is also now written to the drive recording the preparation steps.
Hash Set Lookup Added check if SHA256 hash is stored in the hash set. If not, SHA256 is not calculated. This saves a small amount of CPU time.
Email viewer A bug fix for parsing some rare corrupted PST flies
Misc Correction of various multi-threading bugs, which came to light when running a large number of tasks simultaneously. Registry access code wasn’t thread safe & could crash if multiple tasks were reading registry entries at same time, especially password recovery.
Caching of disk’s MFT into RAM didn’t work well with multiple threads. Solution was to enlarged cache slightly and unified it into a shared cache. Multiple threads should run significantly faster than before.
Some handles to various internal resources were not being free. Resulting in memory leaks and possible crashes.
Even larger cache sizes and more advanced cache lookup algorithm to speed up various operation that involve reading MFT (is a RAM usage / speed trade off). Slightly more RAM is used, but disk operations are faster. For example file name searches are now 33% faster.
Some help file updates
Fixed up the opening of the Help file to get the navigation menu showing again. The Edge browser in Win10 unexpectedly broke some of the help functions.
Fixed a crash in the 32bit version when trying to start a filename search
#td_uid_40_59dc682235ca1.td-doubleSlider-2.td-item1{background:url(https://www.kaldata.com/wp-content/uploads/2016/11/osforensics-welcomescreen-80x60.png) 0 0 no-repeat}#td_uid_40_59dc682235ca1.td-doubleSlider-2.td-item2{background:url(https://www.kaldata.com/wp-content/uploads/2016/11/comparesig-80x60.jpg) 0 0 no-repeat}#td_uid_40_59dc682235ca1.td-doubleSlider-2.td-item3{background:url(https://www.kaldata.com/wp-content/uploads/2016/11/osfmount-mainscreenshot-80x60.png) 0 0 no-repeat}Екрани1 от 3
Официална страница
Изтегли: OSForensics 5.2.1000 (67.2 MB)
Източник: kaldata.com
КОМЕНТАРИ