Searching an Index with OSForensics

OSForensics lets you extract forensic evidence from computers quickly with high performance file searches and indexing. Identify suspicious files and activity with hash matching, drive signature comparisons, e-mails, memory and binary data. Manage your digital investigation and create reports from collected forensic data.

In this video we take a look at how the search index module performs the actual search using the index generated via the Create Index module. Unlike the File Name Search, the contents of the file are searched (as opposed to just the filename or other file attributes) for the user-specified search words.