They can be used in conjunction with OSForensics for password recovery and quickly identifying known safe files (such as operating system and program files) and suspected malicious files (viruses, trojans, script files).

The actual rainbow tables and hash sets are available from a number of sources for free howeables in OSForensics see thisver the entire collection is very large (approximately 2.5TB). See the Free Download Locations section for more information about the external sources for the tables.

Included Rainbow Tables

Rainbow tables are tables of plain text passwords and hashes. They allow a password to be quickly looked up if a hash for that password is known. For more information on using rainbow t password recovery tutorial. These tables are in RTI1.0 format.

*HalfLM, NTLM and hybrid tables are not currently compatible with OSForensics but can be used with other rainbow table software.
*FreeRainbowTables is no longer online.

Included Hash Sets

Hash Sets are used in a data analysis technique called Hash Analysis, which uses the MD5, SHA1 and SHA256 hash of files to verify the files on a storage device. A hash uniquely identifies the contents of a file, regardless of filename and can be used to identify the presence of malicious, contraband, or incriminating files such as bootleg software, pornography and viruses. See this video of hash sets in use in OSForensics.

Software

Also included on the disk are trial versions of OSForensics and WirelessMon and these free utilities;

• DiskCheckup
• OSFClone
• OSFMount
• RamMon

Hard Drive compatibility

There are issues using large hard drives on older Windows machines. The rainbow table drives are formatted with what is know as GPT formatting (GUID Partition Table). This is necessary as the older MBR partition format can't deal with drives over 2TB. Older computers will have a problem with large hard drives. Windows XP and Windows 2000 are incompatible with this drive for example! Older BIOSs may also not recognise the full capacity of the drive. While BIOS limitations can sometimes be avoided by using a USB dock with the hard drive, you should check compatibility with yout motherboard and O/S before you purchase.

Free Download Locations

Please note the rainbow tables (about 2.5TB worth) were downloaded from a source that is no longer available online. The hash sets are available for free from the National Software Reference Library, approximately a 1.7GB download, and there is a OSForensics tutorial on how to convert them for use within OSForensics. Please note that conversion may take several days.
The hash sets and rainbow tables created by PassMark are also available from the OSForensics Download page. We are not selling the tables, only the service of copying them onto a 3TB hard drive and shipping.