軟體下載 OSForensics 11.0.1001

• 1

  版本確認

• 2

  檔案準備中

• 3

  檔案下載

What's new in this version:

Android Artifacts:
- OSForensics now receives contact photos from OSFExtract and saves them to disk but does _not_ display them in any way nor does it associate them with the actual contact to whom they belong
- Added play button to MMS video thumbnails
- Added contact name to SMS/MMS list
- Added missing conversation view information
- Added contact photos to contact window
- Fixed GDI Bitmap handle leak in MMS thumbnail cache
- Fixed showing invalid string when no contact name present
- Fixed bug where OSForensics wasn't consuming and decoding the new forensic data element counts
- Fixed bug in OSFExtract where ".jpg" was added to the contents of all ContactParts instead of only the "Photo" one, to make the contact photo URI into a jpg file name
- Changed default string for calls with no associated name from 'null' to 'unknown'
- Improved contact name resolution for conversations

File Name Search:
- Added detection of the store.vol Windows Email database file in the UnistoreDB folder, in the preset email search option
- Update the email preset search to exclude some false positives and also include .msg files in the search

User Activity:
- Added a few columns that can be of great forensic value, such as MAC timestamps, File size, Access count (retrieved from DestList), MAC address and System boot timestamp from Birth Object, New&Birth volume IDs
- Added some extended info retrieved from DestList entry of OneDrive Jump List file (available from Windows 11), for example: Title, User ID, Local path, App name, MAC Timestamps
- Updated Jump Lists to support for parsing OneDrive Jump List file (5a2098e080cf7ac4.automaticDestinations-ms) on Windows 11
- Jump Lists, Fixed bug where some Windows 11 were parsed incorrectly