Plaso

Open source digital forensics platform. Analyzes disks, recovers deleted files.

Memory analysis framework. Extracts artifacts from RAM dumps.

Collection of CLI tools for forensic investigation of volumes.

File recovery tool based on headers and footers.