MFT and USN parser for direct extraction in filesystem timeline format with YARA rule support.
MFT and USN parser for direct extraction in filesystem timeline format with YARA rule support.
Yes — MFTMactime is listed as a free tool.
MFT and USN parser for direct extraction in filesystem timeline format with YARA rule support.
Popular alternatives include AccessData FTK Imager, AChoir Windows Live Artifacts Acquisition Scripting Framework, Acquire, Acusense.
A digital forensic tool for creating forensic images of computer hard drives and analyzing digital evidence.
A framework/scripting tool to standardize and simplify the process of scripting favorite Live Acquisition utilities for Incident Responders.
A tool to quickly gather forensic artifacts from disk images or a live system into a lightweight container, aiding in digital forensic triage.
Sophisticated audio forensics tool for voice pattern analysis, audio manipulation detection, spectral analysis, and audio source identification.
Tool for parsing Android logs events and protobuf data
AMExtractor is an Android Memory Extractor tool.
