afflib

Library that implements the AFF image standard

afl

aide

AIDE (Advanced Intrusion Detection Environment) is a replacement for Tripwire

aimage

air

A GUI front-end to dd/dcfldd

autopsy

A graphical interface to the digital forensic analysis tools in The Sleuth Kit.

bloom

bonesi

brakeman

bulk_extractor

chkrootkit

a tool to locally check for signs of a rootkit

cmospwd

CmosPwd decrypts password stored in cmos used to access BIOS SETUP

data-carver-processors

dc3dd

dff

dfvfs

disitool

dmitry

dpapick

examiner

Examiner is an application that utilizes the objdump command to disassemble and comment foreign executable binaries

fatback

fiwalk

foremost

A console program to recover files based on their headers and footers

ftimes

galleta

IE Cookie Parser

grokevt

grr

guymager

honggfuzz

inception

libbde

libbfio

libesedb

libevt

libevtx

libewf

Implementation of the EWF (SMART and EnCase) image format

libexe

libforensic1394

libfvde

liblnk

libmsiecf

libnk2

libnsfdb

libodraw

libolecf

libpff

libqcow

libregf

libsigscan

libsmdev

libsmraw

libtableau

libvhdi

libvmdk

libvshadow

libwrc

linen

log2timeline

lynis

Security and system auditing tool

mac-robber

mac-robber is a digital forensics and incident response tool that collects data

magicrescue

Find deleted files in block devices

make-pdf

memdump

Simple memory dumper for UNIX-Like systems

openscap

origami-pdf

ovaldi

pasco

IE Activity Parser

pdf-parser

pdfid

pev

plaso

pyflag

pytsk

quickfuzz

radamsa

rdd

Rdd is a forensic copy program

reglookup

regripper

regviewer

rekall-core

rekall-gui

rifiuti

Recycle Bin Analyzer

rkhunter

Rootkit Hunter scans for known and unknown rootkits, backdoors, and sniffers.

rrip-plugins

samhain

scalpel

skdet

sleuthkit

A collection of file system and media management forensic analysis tools

snowman

ssdeep

stegdetect

streams

tableau-parm

tcpxtract

uncompyle

unhide

vine

vinetto

volatility

xmount

yara

yasat

yim2text

zzuf

Transparent application input fuzzer

afflib

libewf

plaso

afl

libexe

pyflag

aide

libforensic1394

pytsk

aimage

libfvde

quickfuzz

air

liblnk

radamsa

autopsy

libmsiecf

rdd

bloom

libnk2

reglookup

bonesi

libnsfdb

regripper

brakeman

libodraw

regviewer

bulk_extractor

libolecf

rekall-core

chkrootkit

libpff

rekall-gui

cmospwd

libqcow

rifiuti

data-carver-processors

libregf

rkhunter

dc3dd

libsigscan

rrip-plugins

dff

libsmdev

samhain

dfvfs

libsmraw

scalpel

disitool

libtableau

skdet

dmitry

libvhdi

sleuthkit

dpapick

libvmdk

snowman

examiner

libvshadow

ssdeep

fatback

libwrc

stegdetect

fiwalk

linen

streams

foremost

log2timeline

tableau-parm

ftimes

lynis

tcpxtract

galleta

mac-robber

uncompyle

grokevt

magicrescue

unhide

grr

make-pdf

vine

guymager

memdump

vinetto

honggfuzz

openscap

volatility

inception

origami-pdf

xmount

libbde

ovaldi

yara

libbfio

pasco

yasat

libesedb

pdf-parser

yim2text

libevt

pdfid

zzuf

libevtx

pev