#1Tools for analyzing hard drives, SSDs, and other storage media to recover data and artifacts.
Kitploit recommended
xchwarze/magic-extractorUniversal Windows extraction tool that detects unknown files and routes them to the right bundled extractor.
lazza/recuperabitA tool for forensic file system reconstruction.
ericzimmerman/kapefilesThis repository serves as a place for community created Targets and Modules for use with KAPE.
biggiesmallsag/nighthawkresponseIncident Response Forensic Framework
jipegit/osxauditorOS X Auditor is a free Mac OS X computer forensics tool
mozilla/migDistributed & real time digital forensics at the speed of the cloud
thewhiteninja/ntfstoolForensics tool for NTFS (parser, mft, bitlocker, deleted files)
cristianzsh/forensictoolsCollection of forensic tools
theevidencehunter/forensixDigital Forensics Intelligence Framework
libyal/libvmdkLibrary and tools to access the VMware Virtual Disk (VMDK) format
agent-hellboy/ltmltm is a machine-history debugger for Linux. It records process, file, network, memory, and block-I/O metadata via eBPF, then lets you query the…
dmtrkovalenko/ffsF*ck file system - cli file search tool that bypasses OS kernel and reads your disc directlry
mattnotmax/cyberchef-recipesA list of cyber-chef recipes and curated links
yelparchive/osxcollectorA forensic evidence collection & analysis toolkit for OS X
dfir-dd/dfir-toolkitCLI tools for forensic investigation of Windows artifacts
pablolec/recoverpyInteractively find and recover deleted or :point_right: overwritten :point_left: files from your terminal
jschicht/rawcopyCommandline low level file extractor for NTFS
