afflib

Library that implements the AFF image standard

aide

AIDE (Advanced Intrusion Detection Environment) is a replacement for Tripwire

air

A GUI front-end to dd/dcfldd

autopsy

A graphical interface to the digital forensic analysis tools in The Sleuth Kit.

bonesi

brakeman

checksec

chkrootkit

a tool to locally check for signs of a rootkit

cmospwd

CmosPwd decrypts password stored in cmos used to access BIOS SETUP

data-carver-processors

Data carving analysis for JPEG, PDF and Videos

dff

disitool

examiner

Examiner is an application that utilizes the objdump command to disassemble and comment foreign executable binaries

fatback

foremost

A console program to recover files based on their headers and footers

forensic1394

galleta

IE Cookie Parser

inception

libbfio

libewf

Implementation of the EWF (SMART and EnCase) image format

libforensic1394

libpff

libvshadow

linen

Encase's linen utility

lynis

Security and system auditing tool

mac-robber

mac-robber is a digital forensics and incident response tool that collects data

magicrescue

Find deleted files in block devices

make-pdf

This tool will embed javascript inside a PDF document

memdump

Simple memory dumper for UNIX-Like systems

openscap

origami

A Ruby framework designed to parse, analyze, and forge PDF documents

origami-pdf

ovaldi

pasco

IE Activity Parser

pdf-parser

This tool will parse a PDF document to identify the fundamental elements used

pdfid

This tool will scan a PDF document looking for certain keyword

pyflag

rdd

Rdd is a forensic copy program

regripper

rifiuti

Recycle Bin Analyzer

rkhunter

Rootkit Hunter scans for known and unknown rootkits, backdoors, and sniffers.

rrip-plugins

samhain

Advanced file integrity and intrusion detection tool.

scalpel

skdet

sleuthkit

A collection of file system and media management forensic analysis tools

sqlmap

sqlninja

stegdetect

A Steganography detector for JPEG

streams

tcpxtract

tct

The Coroner's Toolkit - a collection of tools to aide in gathering and analyzing forensic data on a UNIX system

ucsniff

UCSniff is an Assessment tool that allows VoIP owners and security professionals to rapidly test for the threat of unauthorized VoIP and Video Eavesdropping

uncompyle

unhide

vine

vinetto

voiphopper

vol-plugins-crypto

Volatility plugin for examining crypto in memory files

vol-plugins-malware

Volatility plugin for examining malware in memory files

vol-plugins-moyix

Volatility plugin for examining memory written by moyix

vol-plugins-reg

Volatility plugin for examining registry files in memory files

volatility

Forensic tool for analyzing volatile memory

xmount

yara

yasat

yim2text

A python script to decode yahoo instant message archive files.

zzuf

Transparent application input fuzzer

afflib

linen

sqlmap

aide

lynis

sqlninja

air

mac-robber

stegdetect

autopsy

magicrescue

streams

bonesi

make-pdf

tcpxtract

brakeman

memdump

tct

checksec

openscap

ucsniff

chkrootkit

origami

uncompyle

cmospwd

origami-pdf

unhide

data-carver-processors

ovaldi

vine

dff

pasco

vinetto

disitool

pdf-parser

voiphopper

examiner

pdfid

vol-plugins-crypto

fatback

pyflag

vol-plugins-malware

foremost

rdd

vol-plugins-moyix

forensic1394

regripper

vol-plugins-reg

galleta

rifiuti

volatility

inception

rkhunter

xmount

libbfio

rrip-plugins

yara

libewf

samhain

yasat

libforensic1394

scalpel

yim2text

libpff

skdet

zzuf

libvshadow

sleuthkit