Maresware
Primary Use Case
Secondary Use Case
Tool Type
Cost Model
Free
Developer
Visit Website
Maresware Tools is a collection of forensic and data-analysis utilities focused on file cataloging, forensic copying, hashing, file listings, email header parsing, and structured output for later database or spreadsheet analysis.
Diskcat — Creates an evidentiary inventory, listing, or catalog of files in a seized directory tree or mounted image. Useful for evidence cataloging, discovery listings, file validation, targeted file searching, and identifying alternate data streams.
UPCOPY — Performs forensic copying of files from one location to another and can be used to synchronize directories while preserving important file attributes.
HASH — Calculates MD5 hashes of files for integrity verification, validation, and comparison workflows.
Hashcmp — Compares HASH output files and displays differences between hash result sets.
MDIR — Produces enhanced directory listings with more control and detail than a standard DIR command, making it useful for file-system review and reporting.
EML_PROCESSING — Parses .eml email files and extracts header information, including header data from forwarded messages.
Catalog — Generates output in a fixed format designed to be easily manipulated in databases and other analysis programs.
Best for: file cataloging, forensic file copying, hash verification, structured file listings, email header extraction, fixed-format output for sorting/filtering, and command-line forensic workflows.
Diskcat — Creates an evidentiary inventory, listing, or catalog of files in a seized directory tree or mounted image. Useful for evidence cataloging, discovery listings, file validation, targeted file searching, and identifying alternate data streams.
UPCOPY — Performs forensic copying of files from one location to another and can be used to synchronize directories while preserving important file attributes.
HASH — Calculates MD5 hashes of files for integrity verification, validation, and comparison workflows.
Hashcmp — Compares HASH output files and displays differences between hash result sets.
MDIR — Produces enhanced directory listings with more control and detail than a standard DIR command, making it useful for file-system review and reporting.
EML_PROCESSING — Parses .eml email files and extracts header information, including header data from forwarded messages.
Catalog — Generates output in a fixed format designed to be easily manipulated in databases and other analysis programs.
Best for: file cataloging, forensic file copying, hash verification, structured file listings, email header extraction, fixed-format output for sorting/filtering, and command-line forensic workflows.