A command-line tool for extracting detailed information from JPEG files, including image dimensions, compression, and metadata.
Best Digital Forensics Tools — page 5
Compare 228 Digital Forensics tools — 224 free, 1 freemium and 3 paid options, ranked by the security community. Find the right digital forensics tool for your team.
228 tools
A next-generation crawling and spidering framework for extracting data from websites
Create checkpoint snapshots of the state of running pods for later off-line analysis.
A digital investigation platform for parsing, searching, and visualizing evidences with advanced analytics capabilities.
Scripts to automate the process of enumerating a Linux system through a Local File Inclusion (LFI) vulnerability.
Recover event log entries from an image by heuristically looking for record structures.
A library to access the Extensible Storage Engine (ESE) Database File (EDB) format used in various Windows applications.
libevt is a library to access and parse Windows Event Log (EVT) files.
A library to access and parse Windows XML Event Log (EVTX) format, useful for digital forensics and incident response.
A library to access the Expert Witness Compression Format (EWF) for digital forensics and incident response.
A library and tools to access and analyze APFS file systems
A library to access the Windows New Technology File System (NTFS) format with read-only support for NTFS versions 3.0 and 3.1.
A library to access FileVault Drive Encryption (FVDE) encrypted volumes on Mac OS X systems.
A library for working with Windows NT data types, providing access and manipulation functions.
A library to access and parse Windows Shortcut File (LNK) format.
A library to access and parse OLE 2 Compound File (OLECF) format files.
A library to access and read QEMU Copy-On-Write (QCOW) image file formats with support for zlib compression and AES-CBC encryption.
A library to access and parse Windows NT Registry File (REGF) format.
A library and set of tools for accessing and analyzing storage media devices and partitions for forensic analysis and investigation.
A library to access and manipulate RAW image files.
A library and tools to access and manipulate VMware Virtual Disk (VMDK) files.
A library and tools for accessing and analyzing Linux Logical Volume Manager (LVM) volume system format.
LiME is a Linux Memory Extractor tool for acquiring volatile memory from Linux and Linux-based devices, including Android, with features like full memory captures and minimal process footpr…
Python tool for remotely or locally dumping RAM of a Linux client for digital forensics analysis.
Load more tools
Showing 120 of 228