Autopsy

Memory analysis framework. Extracts artifacts from RAM dumps.

Collection of CLI tools for forensic investigation of volumes.

File recovery tool based on headers and footers.

Tool for reading, writing and editing metadata in multimedia files.