afflib

Library that implements the AFF image standard

afl

aide

AIDE (Advanced Intrusion Detection Environment) is a replacement for Tripwire

air

A GUI front-end to dd/dcfldd

autopsy

A graphical interface to the digital forensic analysis tools in The Sleuth Kit.

bonesi

brakeman

bulk_extractor

checksec

chkrootkit

a tool to locally check for signs of a rootkit

cmospwd

CmosPwd decrypts password stored in cmos used to access BIOS SETUP

data-carver-processors

dff

disitool

dpapick

examiner

Examiner is an application that utilizes the objdump command to disassemble and comment foreign executable binaries

fatback

foremost

A console program to recover files based on their headers and footers

galleta

IE Cookie Parser

guymager

inception

libbfio

libewf

Implementation of the EWF (SMART and EnCase) image format

libforensic1394

libpff

libvshadow

linen

lynis

Security and system auditing tool

mac-robber

mac-robber is a digital forensics and incident response tool that collects data

magicrescue

Find deleted files in block devices

make-pdf

memdump

Simple memory dumper for UNIX-Like systems

openscap

origami-pdf

ovaldi

pasco

IE Activity Parser

pdf-parser

pdfid

pev

rdd

Rdd is a forensic copy program

regripper

rifiuti

Recycle Bin Analyzer

rkhunter

Rootkit Hunter scans for known and unknown rootkits, backdoors, and sniffers.

scalpel

skdet

sleuthkit

A collection of file system and media management forensic analysis tools

stegdetect

streams

tcpxtract

uncompyle

unhide

vine

vinetto

volatility

xmount

yara

yasat

yim2text

zzuf

Transparent application input fuzzer

afflib

inception

regripper

afl

libbfio

rifiuti

aide

libewf

rkhunter

air

libforensic1394

scalpel

autopsy

libpff

skdet

bonesi

libvshadow

sleuthkit

brakeman

linen

stegdetect

bulk_extractor

lynis

streams

checksec

mac-robber

tcpxtract

chkrootkit

magicrescue

uncompyle

cmospwd

make-pdf

unhide

data-carver-processors

memdump

vine

dff

openscap

vinetto

disitool

origami-pdf

volatility

dpapick

ovaldi

xmount

examiner

pasco

yara

fatback

pdf-parser

yasat

foremost

pdfid

yim2text

galleta

pev

zzuf

guymager

rdd