• 
  • Find files faster
  • Search within files
  • Search for E-mails
  • Recover deleted files
  • Uncover Recent Activity
  • Collect system information
  • Password recovery
• 
  • Verify and match files
  • Find misnamed files
  • Compare drive signatures
  • Timeline viewer
  • File viewer
  • Binary String Extraction
  • Email viewer
  • Registry viewer
• 
  • Case management
  • Generate reports
  • Portability
  • Support

   

Ranked #1 free
forensics tool

• 

Verify and Match Files

OSForensics™ makes use of number of advanced hashing algorithms to create a unique, digital fingerprint that can be used to identify a file.
Confirm that files have not been corrupted or tampered with by comparing hash values, or identify whether an unknown file belongs to a known set of files.

Create and Verify Hash Values

Create a unique, digital identifier for a file or disk volume by calculating its hash value using the Verify/Create Hash module in OSForensics. Choose from a number of cryptographic algorithms to create a hash, such as SHA-1, MD5 and SHA-256. Hash values uniquely identify the contents of a file and can be used to discover other files with the same content, regardless of differing file name or file extension.

For disk volumes, a single hash value is created which describes the content of files, directory structures as well as unallocated space on the specified volume. Verify that a disk volume has not been corrupted or tampered with by comparing the new hash value with the original and expect hash value. such as, verifying exact disk duplicates created by the free OSForensics disk cloning tool, OSFClone.