Feature comparison

There are free, professional and self booting editions of OSForensics available. The pricing and feature differences can be found below.

Feature Free Edition Pro Edition Bootable Edition
Memory viewer and dumper
Raw disk viewer
Detect recent activity
Verify & create hash
Create and compare signatures
Drive zeroing & testing
Drive imaging
Install and run from USB
Mismatched file search
Hash Set Management
File name searching
Search for Deleted Files
File system browser
Find passwords & file decryption
Collect system information
Rebuild RAID arrays
Hidden disk areas
Volume shadow copies
E-mail viewer
Registry viewer
Prefetch viewer
SQLite database browser
ESE database viewer
Web browser screen capture Image is watermarked
List and Search for Alternate File Streams
Sort Files by Color
Multi-core acceleration for file decryption
Customizable System Information Gathering
Import / Export Hash Sets
Manage Cases Limited to 3 cases at a time
Disk indexing and searching Limited to 25,000 files or EMails
Restore Deleted Files Limited to one file at a time.
View NTFS $I30 directory entries
Runs without a valid Operating System
Support & Maintenance Free Public Forum
Or
$190 per year for Phone & Email
Phone, E-mail, Forum support, plus free upgrades, for 6 months after purchase.
Then $190 per year
Phone, E-mail, Forum support, plus free upgrades, for 6 months after purchase.
Then $190 per year
License conditions For Personal, Educational & Home use only (or as 30 day commercial trial) Commercial and Government use Commercial and Government use
Purchase Price $0 $499 Now included with OSF

Rainbow tables and hash sets that can be used with OSForensics can be purchased as a set and come pre-loaded on a 3TB hard disk.

Upgrade