Home / Incident Management / Digital Forensics

Digital Forensics

Digital forensics for incident response. Uncover digital evidence to understand and resolve security breaches effectively.

Try these 212 AI Digital Forensics Tools

SmartDeblur 1.27
Free

SmartDeblur 1.27

A library to access the Windows New Technology File System (NTFS) format with read-only support for NTFS versions 3.0 and 3.1.

Softrace
Free

Softrace

A forensics tool for tracking USB device artifacts on Linux machines.

SPECTR3
Free

SPECTR3

wxHexEditor is a free hex editor / disk editor with various data manipulation operations and visualization functionalities.

Spectra
Free

Spectra

A user-friendly and fast Forensic Analysis tool with features like tagging files and generating preview reports.

ssm-acquire
Free

ssm-acquire

A tool that uses Plaso to parse forensic artifacts and disk images, creating custom reports for easier analysis.

stegextract
Free

stegextract

A community-sourced repository of digital forensic artifacts in YAML format.

strings
Free

strings

A simple Golang application for storing NIST National Software Reference Library Reference Data Set (NSRL RDS) with md5 and sha1 hash lookup searches.

swap_digger
Free

swap_digger

A binary analysis platform for analyzing binary programs

testdisk
Free

testdisk

A tool with advanced filtering capabilities for analyzing events based on time, path, weekday, and date.

The Sleuth Kit & Autopsy
Free

The Sleuth Kit & Autopsy

A Python-based engine for automatic creation of timelines in digital forensic analysis

The Sleuth Kit (TSK) & Autopsy
Free

The Sleuth Kit (TSK) & Autopsy

A library to access and manipulate RAW image files.

Timeline Explorer v0.4.0.0
Free

Timeline Explorer v0.4.0.0

Create checkpoint snapshots of the state of running pods for later off-line analysis.

Timesketch
Free

Timesketch

Exiv2 is a C++ library and command-line utility for image metadata manipulation.

timeliner
Free

timeliner

Collects and organizes Linux OS data for detailed analysis and incident response.

Truehunter
Free

Truehunter

View physical memory as files in a virtual file system for easy memory analysis and artifact access.

Turbinia
Free

Turbinia

A cross-platform registry hive editor for forensic analysis with advanced features like hex viewer and reporting engine.

Unhide
Free

Unhide

An open source digital forensic tool for processing and analyzing digital evidence with high performance and multiplatform support.

unix_collector
Free

unix_collector

A Cross-Platform Forensic Framework for Google Chrome that allows investigation of history, downloads, bookmarks, cookies, and provides a full report.

usbkill
Free

usbkill

A high-performance digital forensics exploitation tool for extracting structured information from various inputs without parsing file system structures.

usbrip
Free

usbrip

A collaborative forensic timeline analysis tool for organizing and analyzing data with rich annotations and comments.

usbdeath
Free

usbdeath

Open Source computer forensics platform with modular design for easy automation and scripting.

USN-Journal-Parser
Free

USN-Journal-Parser

RegRippy is a modern Python 3 alternative to RegRipper for extracting data from Windows registry hives.

Volatility Web Interface
Free

Volatility Web Interface

wxHexEditor is a free hex editor / disk editor with various data manipulation operations and visualization functionalities.