afflib

Library that implements the AFF image standard

afl

afl-dyninst

aide

AIDE (Advanced Intrusion Detection Environment) is a replacement for Tripwire

air

A GUI front-end to dd/dcfldd

autopsy

A graphical interface to the digital forensic analysis tools in The Sleuth Kit.

bonesi

brakeman

bulk_extractor

chkrootkit

a tool to locally check for signs of a rootkit

cmospwd

CmosPwd decrypts password stored in cmos used to access BIOS SETUP

cortex

data-carver-processors

dc3dd

dff

dfxml

dmitry

dpapick

dyninst

examiner

Examiner is an application that utilizes the objdump command to disassemble and comment foreign executable binaries

fatback

foremost

A console program to recover files based on their headers and footers

fuxploider

galleta

IE Cookie Parser

gitleaks

guymager

hackertarget

honggfuzz

inception

kjackal

lazagne

libbfio

libewf

Implementation of the EWF (SMART and EnCase) image format

libforensic1394

libpff

libvshadow

linen

lynis

Security and system auditing tool

mac-robber

mac-robber is a digital forensics and incident response tool that collects data

magicrescue

Find deleted files in block devices

make-pdf

maltego

maryam

memdump

Simple memory dumper for UNIX-Like systems

mxtract

mysql-magic

oletools

onionscan

openscap

openscap-daemon

origami-pdf

ovaldi

pasco

IE Activity Parser

pcileech

pdf-parser

pdfid

pdfwalker

pev

prochunter

pyflag

quickfuzz

radamsa

rdd

Rdd is a forensic copy program

reglookup

regripper

regviewer

rekall-core

rekall-gui

rifiuti

Recycle Bin Analyzer

rkhunter

Rootkit Hunter scans for known and unknown rootkits, backdoors, and sniffers.

rrip-plugins

s3tk

samhain

scalpel

scap-security-guide

scap-workbench

sleuthkit

A collection of file system and media management forensic analysis tools

snowman

spiderfoot

stegdetect

tcpxtract

thehive

tis-interpreter-bin

uncompyle

unhide

vine

vinetto

volatility

xmount

yara

yasat

yim2text

zzuf

Transparent application input fuzzer

afflib

libbfio

rdd

afl

libewf

reglookup

afl-dyninst

libforensic1394

regripper

aide

libpff

regviewer

air

libvshadow

rekall-core

autopsy

linen

rekall-gui

bonesi

lynis

rifiuti

brakeman

mac-robber

rkhunter

bulk_extractor

magicrescue

rrip-plugins

chkrootkit

make-pdf

s3tk

cmospwd

maltego

samhain

cortex

maryam

scalpel

data-carver-processors

memdump

scap-security-guide

dc3dd

mxtract

scap-workbench

dff

mysql-magic

sleuthkit

dfxml

oletools

snowman

dmitry

onionscan

spiderfoot

dpapick

openscap

stegdetect

dyninst

openscap-daemon

tcpxtract

examiner

origami-pdf

thehive

fatback

ovaldi

tis-interpreter-bin

foremost

pasco

uncompyle

fuxploider

pcileech

unhide

galleta

pdf-parser

vine

gitleaks

pdfid

vinetto

guymager

pdfwalker

volatility

hackertarget

pev

xmount

honggfuzz

prochunter

yara

inception

pyflag

yasat

kjackal

quickfuzz

yim2text

lazagne

radamsa

zzuf