Digital Forensics

Open source digital forensics platform. Analyzes disks, recovers deleted files.

Memory analysis framework. Extracts artifacts from RAM dumps.

Collection of CLI tools for forensic investigation of volumes.

Tool for reading, writing and editing metadata in multimedia files.

Network protocol analyzer. Captures and analyzes traffic for investigations.

Tool for identifying and classifying malware through patterns.

Detects capabilities in executable files. Identifies malware behavior.

Tool for analyzing, extracting and reverse engineering firmware.

File recovery tool based on headers and footers.

Network forensics analysis tool. Extracts files, images and credentials.

Tool for extracting information from Windows registry for DFIR.

Super timeline engine for automatically creating forensic timelines.