Osforensics recent activity install#
Osforensics recent activity android#
Osforensics recent activity Offline#

This allows the user to use Print-Screen and Alt-Print Screen keys to capture screen shots quickly. screenshots) and Copy/Paste Text to case. Fixed buffer overrun crash when parsing slack space for $I30 record on NTFS volumes Fixed bug with jumping to an LBA from the MBR/GPT Fixed buffer overrun crash when parsing slack space for $I30 record

Fixed attributes for mounted device partition Show the disk size for devices/partitions Show the total/used/free space for 'partition' folders.

Will scan for photo info from data\.photos\db\gphotos0. Added quick text filtering and GUI usability changes. Added column sorting and reordering for details list Added support for OSFDevMgr Group Devices Fixed hang when error occurs while attempting to read from deleted files Fixed crash with internal viewer when clicking prev/next after file system browser is closed ab), added right-click option to save file to disk. When viewing compress archived (e.g.7z or. Fixed a bug when searching for deleted files Fixed file type string not appearing correctly for 'partition' folders Partial support for scanning 'group' devices for deleted files When displaying the volume shadow info to add to case, the creation time now includes the GMT offset Partitions are listed as a folder of the top device. Added support for mounting an image file as a 'group' device. Changed timezone drop down for GMT/UTC 0 from 'GMT +0:00' to 'GMT 0:00' to visually stand out more in list Contained partitions are mounted as 'subdevices' and appears as folders under the parent device Preliminary support for mounting 'group' devices such as entire physical disks.

Fixed incorrect filenames due to incorect length truncation

Osforensics recent activity install#

Added new commands to get Windows information (product name, build and install date) and last shutdown time from the registry Added 'Add to case' action on start screen and left hand menu button to allow quick access to add a device to a case Updated report templates to include Mobile Artifacts Fixed a bug where subitems counts in the treeview was not actively reflecting the actual filtered counts.

Osforensics recent activity android#

Single Email Viewer can view Gmail email stored within Android Artifacts Device names over 12 characters caused problems in the system information module. Fixed crash bug due to buffer overflow with long case device names. This can correct the error message, 'Initialize MFT summary Message: The parameter is incorrect', which was seen on some systems. Fixed NTFS MFT record size calculation, which can prevent parsing of the MFT in the raw disk viewer and in deleted files module. Changed SQLite Browser into a viewer so users can have multiple instances open (Up to 10). Currently only supports Android disk image (looks for items in data folder) and/or backup (apps folder) Addition of new module to scan for mobile device information The bug caused the header of the first E01 file to be corrupted (it could be manually corrected, but it was a lot of work to do ti). E01/.Ex01 files, which resulted in uncompressed images larger than 100GB in size and more than 64 files being unreadable. Ex01) are created to work around an issue that limited the final image creation to a maximum of 64. Made some changes to how Encase format images (.E01 and.

Osforensics recent activity Offline#

Fixed memory estimation (was previously not including some offline buffers) Fixed multi-threaded indexing problems when accessing Linux EXT2 file systems. Updates to handle accessing Apple's new APFS file system. If you find any problems, either post them in the forum here, or EMail us.