（數字調查工具）PassMark OSForensics Professional 3.0

OSForensics是一種新的數字調查的工具，它可以讓你取證提取資料或從電腦上發現隱藏的訊息。 OSForensics具有許多獨特的功能，這使得關聯的取證資料速度更快，如高效能很深的檔案搜尋和索引，電子信件和電子信件歸檔檢索和分析最近的系統活動和主動記憶能力的發現。 它可以建立，讓您檢視事件的時間軸，顯示你的活動範圍和時間。你甚至可以恢復資料和已刪除使用者的檔案。 OSForensics配備了一個內建的檔案檢視器，它可以讓你檢查檔案內容，屬性和元資料，以及電子信件閱讀器這是最流行的信件用戶端格式相容。

在檔案中搜尋
如果基本的檔案搜尋功能是不夠的， OSForensics也可以在硬碟上建立檔案的索引。這樣就可以對包括在文件中的文字快如閃電的搜尋。本站由背後Wrensoft備受好評的縮放搜尋引擎的技術。

搜尋電子信件
是能夠對檔案內搜尋另外一個特點是搜尋電子信件檔案的能力。索引過程中可以開啟和閱讀最流行的電子信件檔案格式（內含PST） ，並確定各個訊息。
這樣就可以快速的文字內容搜尋的系統上發現的任何電子信件

恢復刪除的檔案
後一個檔案被刪除，甚至一度從回收站中刪除，它往往仍然存在，直到另一個新檔案取代它的位置在硬碟上。 OSForensics可以追蹤這個ghost檔案資料，並嘗試將其返回到可用狀態恢復硬碟機上。

揭開最近活動
找出哪些使用者已經達到。 OSForensics可以發現最近在系統上執行的使用者操作，內含但不限於：
開啟檔案
網頁瀏覽歷史記錄
連線USB裝置
連線網路共享

收集系統訊息
瞭解什麼是電腦內定。關於硬體系統的詳細訊息正在運行：
CPU類型和CPU數量
數量的RAM和類型
安裝硬碟機
連線的USB裝置
等等。

檢視活動記憶體
直接看目前什麼是在系統主記憶體。試圖揭開密碼和，否則將無法進入其他敏感訊息。
從活動程式的系統檢查的清單。 OSF還可以轉儲它們的記憶體到磁碟上後檢查的檔案。

OSForensics is a new digital investigation tool which lets you extract forensic data or uncover hidden information from computers. OSForensics has a number of unique features which make the discovery of relevant forensic data even faster, such as high-performance deep file searching and indexing, e-mail and e-mail archive searching and the ability to analyze recent system activity and active memory. OSForensics can build and let you view an events timeline which shows you the context and time of activities. You can even recover data and files that have been deleted by users. OSForensics comes with a built-in file viewer which lets you examine a file contents, properties and meta-data, as well as an e-mail viewer which is compatible with most popular mail client formats.

Search within Files
If the basic file search functionality is not enough, OSForensics can also create an index of the files on a hard disk. This allows for lightning fast searches for text contained inside the documents. Powered by the technology behind Wrensoft's acclaimed Zoom Search Engine.

Search for Emails
An additional feature of being able to search within files is the ability to search email archives. The indexing process can open and read most popular email file formats (including pst) and identify the individual messages.
This allows for a fast text content search of any emails found on a system

Recover Deleted Files
After a file has been deleted, even once removed from the recycling bin, it often still exists until another new file takes its place on the hard drive. OSForensics can track down this ghost file data and attempt to restore it back to useable state on the hard drive.

Uncover Recent Activity
Find out what users have been up to. OSForensics can uncover the user actions performed recently on the system, including but not limited to:
Opened Documents
Web Browsing History
Connected USB Devices
Connected Network Shares

Collect System Information
Find out what's inside the computer. Detailed information about the hardware a system is running on:
CPU type and number of CPUs
Amount and type of RAM
Installed Hard Drives
Connected USB devices
and much more.

View Active Memory
Look directly at what is currently in the systems main memory. Attempt to uncover passwords and other sensitive information that would otherwise be inaccessible.
Select from a list of active processes on the system to inspect. OSF can also dump their memory to a file on disk for later inspection.

Extract Logins and Passwords
Recover usernames and passwords from recently accessed websites in common web browsers, including Internet Explorer, Firefox, Chrome and Opera.

What is new

（數字調查工具）PassMark OSForensics Professional 3.0  | Home Page: www.osforensics.com