OSForensics
7.0#2 in computer forensics softwareFrom $945 a yearFree planAndroidSelf-hostedWindows
VisitOSForensics vs Plaso
What both publish
| Fact | OSForensics | Plaso |
|---|---|---|
| Purpose | OSForensics is digital investigation software for extracting forensic data from computers. | Plaso is a Python-based engine used by tools to create super timelines or more targeted timelines for digital forensic analysis. |
| Support | Purchases include business-hours support by phone, email or online forums; the trial edition includes free public forum support. | The project directs users to its discussion mailing list, Open Source DFIR Slack community, troubleshooting guide, and GitHub issue tracker; contributions are best effort. |
OSForensics plans
- OSForensics Trial EditionFree
- OSForensics FreeFree
- OSForensics Subscription$95 a month
- OSForensics Subscription$945 a year
- OSForensics Perpetual License (12 months support)$1,680, paid once
- OSForensics Perpetual License (36 months support)$3,675, paid once
Plaso plans
- Open-source Plaso packageFree
- PlasoFree
Pick OSForensics if…
OSForensics suits investigators who need to examine computer evidence, create case reports and maintain an audit trail. Its listed evidence sources include mobile file systems, disk images and memory dumps.
Pick Plaso if…
Plaso suits digital forensic practitioners who need to collect and analyze timelines from files, devices, logs, or storage images. Its parser and plug-in framework may also suit users extending forensic workflows.