A bash script for automating Linux swap analysis for post-exploitation or forensics purposes.
Best Digital Forensics Tools — page 9
Compare 228 Digital Forensics tools — 224 free, 1 freemium and 3 paid options, ranked by the security community. Find the right digital forensics tool for your team.
228 tools
TestDisk is a free data recovery software that can recover lost partitions and undelete files from various file systems.
Autopsy is a GUI-based digital forensics platform for analyzing hard drives and smart phones, with a plug-in architecture for custom modules.
Open source digital forensics tools for analyzing disk images and recovering files.
A powerful tool for analyzing and visualizing system activity timelines.
A tool with advanced filtering capabilities for analyzing events based on time, path, weekday, and date.
A collaborative forensic timeline analysis tool for organizing and analyzing data with rich annotations and comments.
Truehunter is a tool designed to detect encrypted containers with a focus on Truecrypt and Veracrypt, utilizing a fast and memory efficient approach.
Turbinia is an open-source framework for automating the running of common forensic processing tools to help with processing evidence in the Cloud.
A forensic tool to find hidden processes and TCP/UDP ports by rootkits or other hidden techniques.
A shell script for basic forensic collection of various artefacts from UNIX systems.
usbdeath is an anti-forensic tool that manipulates udev rules for known USB devices and performs actions on unknown USB device insertion or specific USB device removal.
An anti-forensic kill-switch tool for USB ports to shut down the computer immediately in case of unauthorized access.
A forensics tool for tracking USB device artifacts on Linux machines.
Python script to parse the NTFS USN Change Journal.
Endpoint visibility and collection tool
A Python 2.x tool for memory analysis on Mac OS X systems with support for various OS versions and memory image export capabilities.
Advanced memory forensics framework
A digital artifact extraction framework for extracting data from volatile memory (RAM) samples, providing visibility into the runtime state of a system.
Web interface for the Volatility Memory Forensics Framework
Web interface for the Volatility Memory Analysis framework with advanced features.
A command line utility for managing volume shadow copies with capabilities for evasion, persistence, and file extraction.
Analyzing WiFiConfigStore.xml file for digital forensics on Android devices.
A comprehensive incident response tool for Windows computers, providing advanced memory forensics and access to locked systems.
Load more tools
Showing 216 of 228