Artifact Parsing / Extraction

Showing 1 to 17 of 17 results

EVTX Parser

DFIR Tools
EVTX parser is an online EVTX viewer and Windows Event Log parser. Open a .evtx file — Security.evtx, System.evtx, Application.evtx, Sysmon or PowerSh...
Tool Type
Standalone Tool

Registry Parser

DFIR Tools
Registry Parser is a free, browser-based forensic tool for analyzing Windows Registry hives. 
Tool Type
Standalone Tool
Developer
Fakgroup

Crush Forenics

DFIR Tools
Open and navigate ZIP and TAR archives, folders, and individual files without extracting anything to disk first.
Tool Type
Standalone Tool

bulk_extractor

DFIR Tools
bulk_extractor is a high-speed digital forensic feature extraction tool that scans disk images, files, and directories for useful artifacts without re...
Tool Type
Standalone Tool
Developer
Simson Garfinkel

ArtiFast AI

DFIR Tools
ArtiFast AI adds offline AI functions to the ArtiFast workflow, including a case-data assistant, file/content translation, and AI-generated image desc...

ArtiFast Lite

DFIR Tools
 ArtiFast Lite is the free viewer/light version of ArtiFast for reviewing cases processed by other ArtiFast versions and parsing a limited subset of W...

Mushy

DFIR Tools
Mushy is a lightweight serialized-data viewer for parsing plist, binary plist, XML plist, SEGB, and ABX files during artifact review. 

Exterro Intelligence

DFIR Tools
Exterro Intelligence is Exterro’s AI layer for summarization, classification, image and video recognition, artifact prioritization, translation, trans...
Tool Type
Platform / Service
Developer
exterro

Truxton LE: Single User Edition

DFIR Tools
Truxton LE is a single-user edition that automatically identifies, correlates, and reports key artifacts from phones, hard drives, drones, and other d...
Tool Type
Standalone Tool
Developer
Truxton

Truxton CE: Community Edition

DFIR Tools
Truxton CE is a free community edition designed for quick artifact identification, correlation, and summary reporting for smaller organizations, inves...
Tool Type
Standalone Tool
Developer
Truxton

ALEAPP

DFIR Tools
 Free open-source parser for Android full-system extractions that turns logs, events, and protobuf-based artifacts into reviewable reports. 

RLEAPP

DFIR Tools
Free open-source parser for search warrant returns and exported cloud or social media archives that turns data from services like Google, Apple, Snapc...

iLEAPP

DFIR Tools
 Free open-source parser for iOS and iPadOS full file system and backup extractions that converts logs, events, and plist-based artifacts into reviewa...

VLEAPP

DFIR Tools
 Free open-source parser for logical extractions from cars, trucks, and infotainment systems that turns vehicle logs, events, and protobuf-based artif...

Autopsy Community Plugins by Mark McKinnon

DFIR Tools
 A public community repository of Python plugins that expand Autopsy across many niche artifact and workflow areas (some plugins are unfinished or obs...

Magnet Custom Artifact Generator

DFIR Tools
 Magnet Custom Artifact Generator is a free Magnet Forensics standalone tool for building custom AXIOM artifacts from CSV, other delimited files, and...
Tool Type
Standalone Tool
Developer
Magnet Forensics

BelkaGPT Hub

DFIR Tools
Distributed AI-processing platform that offloads BelkaGPT case-processing tasks from individual workstations to shared GPU-equipped machines for faste...
Tool Type
Platform / Service
Developer
Belkasoft

Main Menu