afflib

Library that implements the AFF image standard

afl

afl-dyninst

aide

AIDE (Advanced Intrusion Detection Environment) is a replacement for Tripwire

air

A GUI front-end to dd/dcfldd

autopsy

A graphical interface to the digital forensic analysis tools in The Sleuth Kit.

bonesi

brakeman

bulk_extractor

chkrootkit

a tool to locally check for signs of a rootkit

cmospwd

CmosPwd decrypts password stored in cmos used to access BIOS SETUP

data-carver-processors

dc3dd

dff

dfvfs

dfxml

dmitry

dpapick

dyninst

examiner

Examiner is an application that utilizes the objdump command to disassemble and comment foreign executable binaries

fatback

foremost

A console program to recover files based on their headers and footers

galleta

IE Cookie Parser

guymager

honggfuzz

inception

libbfio

libewf

Implementation of the EWF (SMART and EnCase) image format

libforensic1394

libolecf

libpff

libqcow

libsigscan

libsmdev

libsmraw

libvhdi

libvmdk

libvshadow

linen

log2timeline

lynis

Security and system auditing tool

mac-robber

mac-robber is a digital forensics and incident response tool that collects data

magicrescue

Find deleted files in block devices

make-pdf

memdump

Simple memory dumper for UNIX-Like systems

onionscan

openscap

origami-pdf

ovaldi

pasco

IE Activity Parser

pdf-parser

pdfid

pev

plaso

pyflag

pytsk

quickfuzz

radamsa

rdd

Rdd is a forensic copy program

reglookup

regripper

regviewer

rekall-core

rekall-gui

rifiuti

Recycle Bin Analyzer

rkhunter

Rootkit Hunter scans for known and unknown rootkits, backdoors, and sniffers.

rrip-plugins

s3tk

samhain

scalpel

sleuthkit

A collection of file system and media management forensic analysis tools

snowman

stegdetect

streams

tableau-parm

tcpxtract

tis-interpreter-bin

uncompyle

unhide

vine

vinetto

volatility

xmount

yara

yasat

yim2text

zzuf

Transparent application input fuzzer

afflib

libolecf

rdd

afl

libpff

reglookup

afl-dyninst

libqcow

regripper

aide

libsigscan

regviewer

air

libsmdev

rekall-core

autopsy

libsmraw

rekall-gui

bonesi

libvhdi

rifiuti

brakeman

libvmdk

rkhunter

bulk_extractor

libvshadow

rrip-plugins

chkrootkit

linen

s3tk

cmospwd

log2timeline

samhain

data-carver-processors

lynis

scalpel

dc3dd

mac-robber

sleuthkit

dff

magicrescue

snowman

dfvfs

make-pdf

stegdetect

dfxml

memdump

streams

dmitry

onionscan

tableau-parm

dpapick

openscap

tcpxtract

dyninst

origami-pdf

tis-interpreter-bin

examiner

ovaldi

uncompyle

fatback

pasco

unhide

foremost

pdf-parser

vine

galleta

pdfid

vinetto

guymager

pev

volatility

honggfuzz

plaso

xmount

inception

pyflag

yara

libbfio

pytsk

yasat

libewf

quickfuzz

yim2text

libforensic1394

radamsa

zzuf