OSForensics

by PassMark Softwarev11.1.1014.0

PassMark.OSForensics

Last updated Apr 28, 2026

Digital investigations for a new era

Install with winget

$ winget install --id PassMark.OSForensics --exact --version 11.1.1014.0

Run in Command Prompt, PowerShell, or Windows Terminal. Prompts for any agreements.

Stop chasing app updates. Pckgr patches them for you.

Automated application patching for Microsoft Intune. Pckgr keeps a curated library of 1,000+ apps continuously up-to-date in your tenant via Microsoft Graph — no manual repackaging, no chasing vendor sites.

See Pckgr's app library

About

- Identify suspicious files and activity

- Extract evidence from computers quickly

- Manage your investigation

Installers · v11.1.1014.0

Architecture	Type	Scope	Install	Download
x86	inno	machine		Direct

Copy a command tailored to that specific architecture, type, and scope - useful when winget would otherwise pick a different default.

Related apps

DiskCheckupPassMark Software
PassmarkSoftware.DiskCheckupv3.6.1001.0
SMART hard drive monitoring utility
SoundCheckPassMark Software
PassmarkSoftware.SoundCheckv2.1
Check the performance of PC sound cards, speakers and microphones. Create test tones at various samples rates. View the waveform and use the built in spectrum analyzer to see the response.
PassMark FraggerPassMark Software
PassmarkSoftware.Fraggerv1.0
Fragment and defragment files in a controlled environment with user-selected settings. Benchmark performance of third party defrag tools!
BatteryMonPassMark Software
PassmarkSoftware.BatteryMonv2.1
Monitor the battery charge level in laptop computer and UPS's
Volatility WorkbenchPassMark Software
PassMark.VolatilityWorkbenchv3.0.1014
Volatility Workbench is a graphical user interface (GUI) for the Volatility tool.
MonitorTestPassMark Software
PassMark.MonitorTestv4.0.1002
Test monitors and LCD screens

Frequently asked questions

How do I install OSForensics on Windows?

Open Windows Terminal, PowerShell, or Command Prompt and run: winget install --id PassMark.OSForensics --exact --version 11.1.1014.0. winget downloads the installer from PassMark Software and runs it. Requires Windows 10 (1809+) or Windows 11.

How do I install OSForensics silently for unattended deployment?

Add --silent and accept the agreements upfront: winget install --id PassMark.OSForensics --exact 11.1.1014.0 --silent --accept-package-agreements --accept-source-agreements. This is the variant Intune, Configuration Manager, and other deployment tools should use.

How do I uninstall OSForensics via winget?

Run: winget uninstall --id PassMark.OSForensics --exact. Add --silent for unattended uninstalls. winget will use the registered uninstaller from OSForensics's Apps & Features entry.

Is OSForensics free?

OSForensics is distributed under Proprietary. Refer to the publisher (https://www.osforensics.com/download.html) for the full license terms - Wingetly itself does not charge for installation.

Does OSForensics work on Windows 10?

Yes, as long as your Windows 10 build supports winget (1809 or newer). winget ships with App Installer on Windows 10/11 and pulls OSForensics directly from the publisher.

How do I keep OSForensics up to date?

Run winget upgrade --id PassMark.OSForensics --exact, or winget upgrade --all to update everything winget tracks. We index 1 version of OSForensics from microsoft/winget-pkgs.