
autopsy
Autopsy® is a digital forensics platform and graphical interface to The Sleuth Kit® and other digital forensics tools. It can be used by law…

Autopsy® is a digital forensics platform and graphical interface to The Sleuth Kit® and other digital forensics tools. It can be used by law…

Interactively find and recover deleted or :point_right: overwritten :point_left: files from your terminal

C library and command-line toolkit for forensic EWF image handling: acquire, export, verify, recover, and mount evidence files in EnCase and SMART…

Undelete and recover accidentally erased files from ext3 and ext4 filesystems, using inode scanning and block recovery for forensic and data-loss…

Copies data from damaged or failing storage devices, handles read errors, and performs efficient rescue operations to recover as much data as…

A tool for forensic file system reconstruction.

File carving utility that recovers deleted files from disk images and raw drives by matching headers, footers, and internal structures via…

FAT filesystems explore, extract, repair, and forensic tool

Remote live forensics and incident response framework with Python agent for collecting forensic data from endpoints, including memory, disk, and…


FLARE Obfuscated String Solver - Automatically extract obfuscated strings from malware.

Forensic library and CLI toolkit for analyzing disk and file system images, recovering deleted data, generating timelines, and validating evidence…

Collaborative forensic timeline analysis platform for ingesting, searching, and annotating event logs to support incident response and DFIR…

IPED Digital Forensic Tool. It is an open source software that can be used to process and analyze digital evidence, often seized at crime scenes by…

Digital forensics engine that parses logs, files, and system artifacts to build super timelines, enabling chronological event correlation for…

Recovers lost partitions and repairs boot sectors; carves 480+ file formats from damaged disks and filesystems for data recovery and forensic use.

OS X Auditor is a free Mac OS X computer forensics tool

IOC and YARA-based scanner for detecting indicators of compromise via file name regex, YARA signatures, hash matching, and C2 back-connect checks on…