Feature | Trial Edition | Subscription Edition | Perpetual Edition | Bootable Edition |
Memory viewer and dumper | ||||
Raw disk viewer | ||||
Verify & create hash | ||||
Create and compare signatures | ||||
Drive zeroing & testing | ||||
Drive imaging | ||||
Mismatched file search | ||||
Hash Set Management | ||||
File name searching | ||||
Search for Deleted Files | ||||
File system browser | ||||
Collect system information | ||||
Rebuild RAID arrays | ||||
Hidden disk areas | ||||
Volume shadow copies | ||||
E-mail viewer | ||||
Registry viewer | ||||
Prefetch viewer | ||||
SQLite database browser | ||||
ESE database viewer | ||||
Plist property file viewer | ||||
$UsnJrnl file journal viewer | ||||
Detect user activity | Can only export 10 at a time | |||
Web browser screen capture | Image is watermarked | |||
Face Detection | ||||
Python Scripting | ||||
Cloud Imaging | ||||
Email Exporting | ||||
Illicit Image Detection | ||||
AFF4 File Format Support | ||||
Web Server Log Filtering | ||||
Install and run from USB | ||||
List and Search for Alternate File Streams | ||||
Sort Files by Color | ||||
Multi-core acceleration for file decryption | ||||
Customizable System Information Gathering | ||||
Import / Export Hash Sets | ||||
Manage Cases | Limited to 3 cases at a time and max of 10 items per case | |||
Disk indexing and searching | Limited to 2,500 files or EMails & 250 results per search | |||
Find passwords & file decryption | Max of 5 password per browser type | |||
Restore Deleted Files | Limited to one file at a time. | |||
View NTFS $I30 directory entries | ||||
Investigation of Android Phones | ||||
Investigation of Apple Mac Drives | ||||
Runs without a valid Operating System | ||||
Support & Maintenance | Free Public Forum |
Phone, E-mail and Forum support | Phone, E-mail, Forum support for length of purchased support period | Phone, E-mail, Forum support for length of purchased support period or subscription |
License Validity | 30 day trial | Software valid for length of subscription | Software never expires | Software validity length based on license type |
License Activation | N/A | Requires internet connection | No internet required | No internet required |
Purchase Price | $0 | $89.00 per Month or $899.00 per Year |
$1599.00 with 12 months of Support or $3499.00 with 36 months of Support |
Now included with OSF License |
Download | Purchase Options | Purchase Options |
Rainbow tables and hash sets that can be used with OSForensics can be purchased as a set and come pre-loaded on a 3TB hard disk.