afflib

Library that implements the AFF image standard

aide

AIDE (Advanced Intrusion Detection Environment) is a replacement for Tripwire

air

A GUI front-end to dd/dcfldd

autopsy

A graphical interface to the digital forensic analysis tools in The Sleuth Kit.

bonesi

brakeman

checksec

chkrootkit

a tool to locally check for signs of a rootkit

cmospwd

CmosPwd decrypts password stored in cmos used to access BIOS SETUP

data-carver-processors

Data carving analysis for JPEG, PDF and Videos

dff

disitool

examiner

Examiner is an application that utilizes the objdump command to disassemble and comment foreign executable binaries

fatback

foremost

A console program to recover files based on their headers and footers

galleta

IE Cookie Parser

inception

libbfio

libewf

Implementation of the EWF (SMART and EnCase) image format

libforensic1394

libpff

libvshadow

linen

Encase's linen utility

lynis

Security and system auditing tool

mac-robber

mac-robber is a digital forensics and incident response tool that collects data

magicrescue

Find deleted files in block devices

make-pdf

This tool will embed javascript inside a PDF document

memdump

Simple memory dumper for UNIX-Like systems

openscap

origami-pdf

ovaldi

pasco

IE Activity Parser

pdf-parser

This tool will parse a PDF document to identify the fundamental elements used

pdfid

This tool will scan a PDF document looking for certain keyword

pyflag

rdd

Rdd is a forensic copy program

regripper

rifiuti

Recycle Bin Analyzer

rkhunter

Rootkit Hunter scans for known and unknown rootkits, backdoors, and sniffers.

rrip-plugins

samhain

Advanced file integrity and intrusion detection tool.

scalpel

skdet

sleuthkit

A collection of file system and media management forensic analysis tools

stegdetect

A Steganography detector for JPEG

streams

tcpxtract

uncompyle

unhide

vine

vinetto

volatility

Forensic tool for analyzing volatile memory

xmount

yara

yasat

yim2text

A python script to decode yahoo instant message archive files.

zzuf

Transparent application input fuzzer

afflib

libforensic1394

rkhunter

aide

libpff

rrip-plugins

air

libvshadow

samhain

autopsy

linen

scalpel

bonesi

lynis

skdet

brakeman

mac-robber

sleuthkit

checksec

magicrescue

stegdetect

chkrootkit

make-pdf

streams

cmospwd

memdump

tcpxtract

data-carver-processors

openscap

uncompyle

dff

origami-pdf

unhide

disitool

ovaldi

vine

examiner

pasco

vinetto

fatback

pdf-parser

volatility

foremost

pdfid

xmount

galleta

pyflag

yara

inception

rdd

yasat

libbfio

regripper

yim2text

libewf

rifiuti

zzuf