has moved to this site, For information, please join the Google Group forensicswiki-reborn


From Forensics Wiki
Jump to navigation Jump to search

Defacto is a software inventorization tool developed by National Hi-Tech Crime Unit [1] (Russia).


Defacto builds a list of installed software programs by searching for specific files and scanning Windows Registry.

Defacto reports following information about installed software programs:

  • Author (vendor);
  • Product name;
  • License type (freeware, shareware, etc);
  • Price;
  • Additional information (install date, install path, version/build, serial number, product key, etc);
  • Registered owner.

Illegal Software

Defacto maintains a database of blacklisted serial numbers. It can also detect cracked software.

External Links