afflib

Library that implements the AFF image standard

afl

aflplusplus

aide

AIDE (Advanced Intrusion Detection Environment) is a replacement for Tripwire

air

A GUI front-end to dd/dcfldd

brakeman

bulk_extractor

chkrootkit

a tool to locally check for signs of a rootkit

cmospwd

CmosPwd decrypts password stored in cmos used to access BIOS SETUP

dfvfs

dfwinreg

dfxml

dmitry

eagleeye

examiner

Examiner is an application that utilizes the objdump command to disassemble and comment foreign executable binaries

fatback

foremost

A console program to recover files based on their headers and footers

ftimes

fuxploider

galleta

IE Cookie Parser

gitleaks

hindsight

honggfuzz

inception

kjackal

lazagne

libbde

libbfio

libesedb

libevt

libevtx

libewf

Implementation of the EWF (SMART and EnCase) image format

libexe

libforensic1394

libfsapfs

libfsclfs

libfsext

libfsfat

libfshfs

libfsntfs

libfsxfs

libfvde

liblnk

libluksde

libmodi

libmsiecf

libnk2

libnsfdb

libodraw

libolecf

libpff

libphdi

libpreloadvaccine

libqcow

libregf

libscca

libsmraw

libvsgpt

libvshadow

libvslvm

libvsmbr

libwtcdb

log2timeline

lynis

Security and system auditing tool

mac-robber

mac-robber is a digital forensics and incident response tool that collects data

magicrescue

Find deleted files in block devices

make-pdf

maltego

memdump

Simple memory dumper for UNIX-Like systems

mxtract

mysql-magic

nrich

oletools

openscap

openscap-daemon

origami-pdf

pasco

IE Activity Parser

pcileech

pdf-parser

pdfid

pdfwalker

plaso

prochunter

pytsk

radamsa

readpe

reglookup

regripper

regviewer

rifiuti

Recycle Bin Analyzer

rkhunter

Rootkit Hunter scans for known and unknown rootkits, backdoors, and sniffers.

s3tk

samhain

scalpel

scap-security-guide

sleuthkit

A collection of file system and media management forensic analysis tools

spiderfoot

stegoveritas

stigqter

tcpxtract

unhide

volatility3

whispers

xmount

yara

yara-rust

yaramod

zsteg

zzuf

Transparent application input fuzzer

afflib

libfsfat

openscap

afl

libfshfs

openscap-daemon

aflplusplus

libfsntfs

origami-pdf

aide

libfsxfs

pasco

air

libfvde

pcileech

brakeman

liblnk

pdf-parser

bulk_extractor

libluksde

pdfid

chkrootkit

libmodi

pdfwalker

cmospwd

libmsiecf

plaso

dfvfs

libnk2

prochunter

dfwinreg

libnsfdb

pytsk

dfxml

libodraw

radamsa

dmitry

libolecf

readpe

eagleeye

libpff

reglookup

examiner

libphdi

regripper

fatback

libpreloadvaccine

regviewer

foremost

libqcow

rifiuti

ftimes

libregf

rkhunter

fuxploider

libscca

s3tk

galleta

libsmraw

samhain

gitleaks

libvsgpt

scalpel

hindsight

libvshadow

scap-security-guide

honggfuzz

libvslvm

sleuthkit

inception

libvsmbr

spiderfoot

kjackal

libwtcdb

stegoveritas

lazagne

log2timeline

stigqter

libbde

lynis

tcpxtract

libbfio

mac-robber

unhide

libesedb

magicrescue

volatility3

libevt

make-pdf

whispers

libevtx

maltego

xmount

libewf

memdump

yara

libexe

mxtract

yara-rust

libforensic1394

mysql-magic

yaramod

libfsapfs

nrich

zsteg

libfsclfs

oletools

zzuf

libfsext