DFIR Tools

Showing 1 to 50 of 250 results

Featured

F-Response TACTICAL

Primary Use Case: Collection / Acquisition
Tool Type: Standalone Tool
Developer: F-Response

Featured

F-Response Consultant

Primary Use Case: Cloud / Remote Acquisition
Tool Type: Standalone Tool
Developer: F-Response

Featured

F-Response Consultant + Covert

Primary Use Case: Cloud / Remote Acquisition
Tool Type: Standalone Tool
Developer: F-Response

Featured

F-Response Enterprise

Primary Use Case: Cloud / Remote Acquisition
Tool Type: Standalone Tool
Developer: F-Response

Featured

F-Response Collect

Primary Use Case: Cloud / Remote Acquisition
Tool Type: Standalone Tool
Developer: F-Response

DNS Tools

Primary Use Case: Network / Packet Analysis
Tool Type: Standalone Tool

Genesis

Primary Use Case: eDiscovery / Review
Tool Type: Standalone Tool
Developer: Cellebrite

CFID (Covert Forensic Imaging Device)

Primary Use Case: Collection / Acquisition
Tool Type: Hardware
Developer: Cellebrite

REMnux

Primary Use Case: Malware Analysis
Tool Type: Standalone Tool
Developer: REMnux

Binalyze Standalone Collectors

Featured

Binalyze Standalone Collectors

Primary Use Case: Tool Collection
Tool Type: Standalone Tool
Developer: Binalyze

Featured

Outpost

Primary Use Case: Reporting / Case Management
Tool Type: Platform / Service
Developer: Binalyze

EVTX Parser

Primary Use Case: Artifact Parsing / Extraction
Tool Type: Standalone Tool

Registry Parser

Primary Use Case: Artifact Parsing / Extraction
Tool Type: Standalone Tool
Developer: Fakgroup

Crush Forenics

Primary Use Case: Artifact Parsing / Extraction
Tool Type: Standalone Tool

Lava

Primary Use Case: Timeline Analysis
Tool Type: Standalone Tool
Developer: Alexis Brignoni

bulk_extractor

Primary Use Case: Artifact Parsing / Extraction
Tool Type: Standalone Tool
Developer: Simson Garfinkel

Guardonix

Primary Use Case: Write blocker
Tool Type: Hardware
Developer: DeepSpar

Map and Track

Primary Use Case: OSINT / Web Investigation
Tool Type: Platform / Service
Developer: Map and Track

VFC Mount

Primary Use Case: Collection / Acquisition
Tool Type: Standalone Tool
Developer: MD5

VFC Portable

Primary Use Case: Triage / Rapid Assessment
Tool Type: Standalone Tool
Developer: MD5

VFC Lab

Primary Use Case: Triage / Rapid Assessment
Tool Type: Standalone Tool
Developer: MD5

VFC — Virtual Forensic Computing

Primary Use Case: Triage / Rapid Assessment
Tool Type: Standalone Tool
Developer: MD5

Vespereye

Primary Use Case: Network / Packet Analysis
Tool Type: Hardware
Developer: Vespereye

Atola Insight Forensic

Primary Use Case: Write blocker
Tool Type: Hardware
Developer: Atola

Atola TaskForce

Primary Use Case: Write blocker
Tool Type: Hardware
Developer: Atola

Atola TaskForce 2

Primary Use Case: Write blocker
Tool Type: Hardware
Developer: Atola

ArtiFast AI

Primary Use Case: Artifact Parsing / Extraction
Tool Type: Platform / Service
Developer: Forensafe Software Solutions

ArtiFast SKY

Primary Use Case: Reporting / Case Management
Tool Type: Platform / Service
Developer: Forensafe Software Solutions

ArtiFast Lite

Primary Use Case: Artifact Parsing / Extraction
Tool Type: Standalone Tool
Developer: Forensafe Software Solutions

ArtiFast Suite

Primary Use Case: Timeline Analysis
Tool Type: Suite
Developer: Forensafe Software Solutions

PALADIN Forensic Suite

Primary Use Case: Bootable Operating System
Tool Type: Suite
Developer: Sumuri

RECON ITR

Primary Use Case: Collection / Acquisition
Tool Type: Standalone Tool
Developer: Sumuri

RECON LAB

Primary Use Case: Suite / Full Examination
Tool Type: Suite
Developer: Sumuri

Monolith Notes

Primary Use Case: Reporting / Case Management
Tool Type: Standalone Tool
Developer: Monolith Forensics

Monolith

Primary Use Case: Reporting / Case Management
Tool Type: Platform / Service
Developer: Monolith Forensics

ProDiscover First Responder

Primary Use Case: Collection / Acquisition
Tool Type: Standalone Tool
Developer: ProDiscover

ProDiscover Triage

Primary Use Case: Triage / Rapid Assessment
Tool Type: Standalone Tool
Developer: ProDiscover

ProDiscover Incident Response

Primary Use Case: Triage / Rapid Assessment
Tool Type: Platform / Service
Developer: ProDiscover

ProDiscover Hub Int

Primary Use Case: Reporting / Case Management
Tool Type: Platform / Service
Developer: ProDiscover

ProDiscover Hub

Primary Use Case: Reporting / Case Management
Tool Type: Platform / Service
Developer: ProDiscover

ProDiscover Pro

Primary Use Case: Suite / Full Examination
Tool Type: Suite
Developer: ProDiscover

Oxygen Review Center

Primary Use Case: eDiscovery / Review
Tool Type: Platform / Service
Developer: Oxygen Forensics

Oxygen Forensic® Detective

Primary Use Case: Suite / Full Examination
Tool Type: Suite
Developer: Oxygen Forensics

Oxygen Enterprise Connector

Primary Use Case: eDiscovery / Review
Tool Type: Script / Utility / Addon
Developer: Oxygen Forensics

Oxygen Review Center

Primary Use Case: eDiscovery / Review
Tool Type: Platform / Service
Developer: Oxygen Forensics

Oxygen Remote Explorer

Primary Use Case: Cloud / Remote Acquisition
Tool Type: Platform / Service
Developer: Oxygen Forensics

7bit PDU

Primary Use Case: Mobile Device Forensics
Tool Type: Script / Utility / Addon
Developer: DoubleBlak

Spoopy

Primary Use Case: Mobile Device Forensics
Tool Type: Script / Utility / Addon

Epoch

Primary Use Case: Timeline Analysis
Tool Type: Script / Utility / Addon
Developer: DoubleBlak

Mushy

Primary Use Case: Artifact Parsing / Extraction
Tool Type: Script / Utility / Addon
Developer: DoubleBlak