Drive Preparation with OSForensics

OSForensics lets you extract forensic evidence from computers quickly with high performance file searches and indexing. Identify suspicious files and activity with hash matching, drive signature comparisons, e-mails, memory and binary data. Manage your digital investigation and create reports from collected forensic data.

This module provides three different features. Firstly it can test a drive for reliability, potentially identifying any faulty drives before they are put into active use in an investigation. Secondly it can set all bytes of a drive to a specified byte pattern (and verify the byte pattern has been written to the entire drive), making sure there is no chance of data contamination between investigations. Lastly, it can format the drive to either NTFS or FAT32 file system to be ready to be used for investigation.