About OSForensics
- Identify suspicious files and activity
- Extract evidence from computers quickly
- Manage your investigation
Digital investigations for a new era
| Publisher | PassMark Software |
|---|---|
| Version | 11.1.1017.0 |
| Release date | 2025-11-24 |
| License | Proprietary |
| Installer type | inno |
| Architecture | x86 |
| Package ID | PassMark.OSForensics |
| Admin rights | Required |
| Install scope | All users |
winget install --id=PassMark.OSForensics -ewinget upgrade --id=PassMark.OSForensics -ewinget uninstall --id=PassMark.OSForensics -e"OSForensics.exe" /VERYSILENT /SUPPRESSMSGBOXES /NORESTART /SP-OSForensics is proprietary software from PassMark Software. Check the publisher's license terms for pricing and usage rights.
The latest version is 11.1.1017.0, released on Nov 24, 2025.
The download button links to the official installer published on osforensics.com, the same file Windows Package Manager installs. You can verify the downloaded file by comparing its SHA-256 checksum with ece836ffc360aa0c3edccba3aa1827239b7c10aaa38e105e94c6225866813e80.
OSForensics runs on Windows and is available for 32-bit (x86) systems.
Run the offline installer with "OSForensics.exe" /VERYSILENT /SUPPRESSMSGBOXES /NORESTART /SP-, or install it with Windows Package Manager: winget install --id=PassMark.OSForensics -e --silent.
Open Settings › Apps › Installed apps, find OSForensics and select Uninstall. From the command line, run winget uninstall --id=PassMark.OSForensics -e.