afflib

Library that implements the AFF image standard

afl

afl-dyninst

aflplusplus

aide

AIDE (Advanced Intrusion Detection Environment) is a replacement for Tripwire

air

A GUI front-end to dd/dcfldd

autopsy

A graphical interface to the digital forensic analysis tools in The Sleuth Kit.

brakeman

bulk_extractor

chkboot

chkrootkit

a tool to locally check for signs of a rootkit

cmospwd

CmosPwd decrypts password stored in cmos used to access BIOS SETUP

cortex

dc3dd

dfvfs

dfxml

dmitry

dyninst

eagleeye

examiner

Examiner is an application that utilizes the objdump command to disassemble and comment foreign executable binaries

fatback

foremost

A console program to recover files based on their headers and footers

ftimes

fuxploider

galleta

IE Cookie Parser

gitleaks

grr

guymager

hindsight

honggfuzz

inception

indxparse

kjackal

lazagne

libbde

libbfio

libewf

Implementation of the EWF (SMART and EnCase) image format

libforensic1394

libvshadow

log2timeline

lynis

Security and system auditing tool

mac-robber

mac-robber is a digital forensics and incident response tool that collects data

magicrescue

Find deleted files in block devices

make-pdf

maltego

memdump

Simple memory dumper for UNIX-Like systems

mxtract

mysql-magic

oletools

onionscan

openscap

openscap-daemon

origami-pdf

ovaldi

pasco

IE Activity Parser

pcileech

pdf-parser

pdfid

pdfwalker

pev

plaso

prochunter

pyflag

pytsk

radamsa

rdd

Rdd is a forensic copy program

reglookup

regripper

regviewer

rekall-core

rekall-gui

rifiuti

Recycle Bin Analyzer

rkhunter

Rootkit Hunter scans for known and unknown rootkits, backdoors, and sniffers.

rrip-plugins

s3tk

samhain

scalpel

scap-security-guide

scap-workbench

sleuthkit

A collection of file system and media management forensic analysis tools

snowman

spiderfoot

stegdetect

stegoveritas

stigqter

tcpxtract

thehive

tis-interpreter-bin

unhide

volatility

volatility3

xmount

yara

yara-rust

yaramod

yasat

yim2text

zsteg

zzuf

Transparent application input fuzzer

afflib

lazagne

reglookup

afl

libbde

regripper

afl-dyninst

libbfio

regviewer

aflplusplus

libewf

rekall-core

aide

libforensic1394

rekall-gui

air

libvshadow

rifiuti

autopsy

log2timeline

rkhunter

brakeman

lynis

rrip-plugins

bulk_extractor

mac-robber

s3tk

chkboot

magicrescue

samhain

chkrootkit

make-pdf

scalpel

cmospwd

maltego

scap-security-guide

cortex

memdump

scap-workbench

dc3dd

mxtract

sleuthkit

dfvfs

mysql-magic

snowman

dfxml

oletools

spiderfoot

dmitry

onionscan

stegdetect

dyninst

openscap

stegoveritas

eagleeye

openscap-daemon

stigqter

examiner

origami-pdf

tcpxtract

fatback

ovaldi

thehive

foremost

pasco

tis-interpreter-bin

ftimes

pcileech

unhide

fuxploider

pdf-parser

volatility

galleta

pdfid

volatility3

gitleaks

pdfwalker

xmount

grr

pev

yara

guymager

plaso

yara-rust

hindsight

prochunter

yaramod

honggfuzz

pyflag

yasat

inception

pytsk

yim2text

indxparse

radamsa

zsteg

kjackal

rdd

zzuf