Find Misnamed Files

View a visual representation of the distribution of system activity over time.

OSForensics™ can identify files whose contents do not match their file extension. Uncover a user's attempt at concealing photos, documents or other evidence (also known as "dark data") by using the Mismatch File Search!

Mismatch File Search

The Mismatch File Search module analyzes the content of files and identifies any files whose raw bytes are not consistent with their file extension. Configure the file search to include inaccessible files, or use your own customized file filter!

View a timeline of system activity including file creation dates, web browsing, cookies and MRU records!

Once discovered, mismatched or inaccessible files can be previewed from the File List and analyzed further from the Thumbnails view.

Conference banner