Digital Forensics

Open source digital forensics platform. Analyzes disks, recovers deleted files.

Memory analysis framework. Extracts artifacts from RAM dumps.

Collection of CLI tools for forensic investigation of volumes.

Network protocol analyzer. Captures and analyzes traffic for investigations.

Tool for identifying and classifying malware through patterns.

Detects capabilities in executable files. Identifies malware behavior.

Tool for analyzing, extracting and reverse engineering firmware.

Tool for reading, writing and editing metadata in multimedia files.

File recovery tool based on headers and footers.

Tool for extracting information from Windows registry for DFIR.

Super timeline engine for automatically creating forensic timelines.

Network forensics analysis tool. Extracts files, images and credentials.