
OSForensics
7.0#2 in computer forensics softwareFrom $945 a yearFree planAndroidSelf-hostedWindows
Visit
| Fact | OSForensics | Volatility 3 |
|---|---|---|
| Purpose | OSForensics is digital investigation software for extracting forensic data from computers. | Volatility 3 extracts digital artifacts from volatile memory (RAM) samples to provide visibility into a system’s runtime state. |
| Support | Purchases include business-hours support by phone, email or online forums; the trial edition includes free public forum support. | The project directs bug reports to GitHub Issues and community support questions to its Slack. |
OSForensics suits investigators who need to examine computer evidence, create case reports and maintain an audit trail. Its listed evidence sources include mobile file systems, disk images and memory dumps.
Volatility 3 is suited to investigators and practitioners examining RAM artifacts, including users in law enforcement, military, academia, and commercial investigations. It requires familiarity with Python and symbol table preparation for Mac and Linux.