OSForensics lets you extract forensic evidence from computers quickly with high-performance file searches and indexing. Identify suspicious files and activity with hash matching, drive signature bank comparisons, e-mails, memory, and binary data. Manage your digital investigation and produce reports from collected forensic data. Enjoy! OSForensics can index the content of a huge variety of file types. This includes: DOC, DOCX, PDF, PPT, XLS, RTF, WPD, SWF, DJVU, JPG, GIF, PNG, TIFF, MP3, DWF, DOCX, PPTX, XLSX, MHT, ZIP, PST, MBOX, MSG, DBX, ZIP, ZIPX, RAR, ISO, TAR, 7z and more. Recursive containers are supported. So it is feasible to correctly index a DOCX file attached to an E-mail in a PST file which is in change compressed in a ZIPX file. It provides one of the fastest and most powerful ways to locate files on a Windows computer. You can search by filename, size, creation and altered dates, and other criteria. Results are returned and made available in a number of different useful views. This includes the Timeline View which allows you to sift through the matches on a schedule, making evident the pattern of user activity on the machine. The 1st stage in being able to search emails is to create an index of the archives in question. This can take some time but it will be what allows for repeated fast searches later on. OS Forensics allows you to perform full-text searches within email archives used by many popular e-mail programs such as Microsoft Outlook, Mozilla Thunderbird, Outlook Express, and more. OSForensics allows you to recover and search deleted files, even after they have been removed from the Recycle Bin. This allows you to review the files that this user may have attempted to destroy. Each deleted file found is displayed with a corresponding Quality indicator between 0-100. A value towards 100 means that the deleted file is largely undamaged, with only a few missing clusters of data. OSForensics scans your system for evidence of recent activity, such as accessed websites, USB drives, wireless networks, recent downloads, website logins, and website passwords. This is especially useful with regard to identifying trends and patterns of the user, and any material or accounts that have been accessed recently. With the program, you can recover browser passwords from Chrome, Edge, IE, Firefox, and Opera. This can be done on the live machine or from an image of a hard drive. Data recovered include, the URL of the web site (usually HTTPS), the login username, the site's password, the browser used to access the site