Lightweight forensic acquisition tools for targeted evidence collection from supported endpoints and infrastructure without deploying the full Binalyz...
Atola TaskForce 2 is a high-capacity forensic imaging system for labs that need to image many drives in parallel, handle damaged media, reassemble RA...
ArtiFast Suite is a timeline-based digital forensics analysis suite for parsing, normalizing, searching, filtering, reviewing, and reporting artifact...
RECON LAB is SUMURI’s forensic analysis and reporting suite built especially for macOS-focused investigations, with additional support for iOS, Windo...
Spoopy parses Snapchat 'chatConversationStore.plist' files from iPhone extractions and presents messages in a searchable, filterable, reportable forma...
ArtEx is a free mobile forensic artifact review, validation, reporting, and research tool for working with common mobile extraction types and selected...
Passware Kit Forensic is a forensic password recovery and decryption suite for identifying, attacking, and decrypting encrypted files, disk images, pa...
Fuji is a free, open-source macOS forensic acquisition tool designed to perform live logical acquisition of Mac computers, including modern Intel and...
EnCase EnScript Add-ons are scripts, plugins, parsers, filters, templates, and workflow utilities used to extend OpenText Forensic / EnCase functional...
ATRIO MK II is a portable digital forensics triage and acquisition platform built for field, lab, law enforcement, government, military, and responder...
Exterro FTK Central is an enterprise forensic investigation platform for centralized evidence processing, shared case access, collaborative review, d...
Exterro FTK Forensic Toolkit is a forensic analysis platform for processing, indexing, searching, reviewing, and reporting on digital evidence in cri...
Mobile forensics suite for extracting, analyzing, and reporting evidence from phones, tablets, GPS, and IoT devices, with support for more than 36,00...
Enterprise DFIR platform built for rapid, remote, forensically sound endpoint evidence collection at scale, with agent deployment, snapshots, targete...
Enterprise eDiscovery platform for collecting, processing, reviewing, analyzing, redacting, and producing legal data at scale, with AI-assisted review...
Digital forensics suite for acquiring, triaging, analyzing, and reporting evidence from computers, mobile-related sources, storage media, encrypted vo...
Multimedia forensics suite focused on authenticity, manipulation detection, deepfake analysis, metadata inspection, and source-device identification...
A free utility that mounts local disk image files in Windows as physical disks or drive letters, with read-only and write-cache options for safe anal...
Maresware Tools is a collection of command-line forensic and data-analysis utilities focused on evidence cataloging, file hashing and comparison, fore...
Eric Zimmerman Tools is a widely used collection of free Windows forensic utilities focused on parsing, viewing, collecting, and correlating high-val...
DATAPILOT SCOUT is a fast triage tool for scanning computers and removable media to surface high-value evidence, especially exploitation, contraband,...
SIFT Workstation is a free SANS-maintained Linux-based DFIR environment that bundles open-source tools for full forensic examination, especially time...
This Truxton Enterprise deployment model uses a central server with client users and configurable parallel media loaders to support collaborative rev...
Truxton Enterprise Edition is a large-scale forensic platform for regional or national organizations that supports automated artifact identification,...
Truxton Multi-User Edition is a shared analytical platform for up to 10 investigators to collaborate on rapid review, shared findings, reports, and a...
Volexity Volcano is a cross-platform memory analysis platform that extracts, indexes, correlates, and visualizes volatile-memory artifacts to support...
Xplico is an open-source network forensic analysis tool that reconstructs and extracts application-layer evidence such as emails, web traffic, VoIP s...
A GUI-based Windows memory forensics tool that captures or imports raw memory dumps and parses them into investigator-friendly views of processes, th...
A low-level hex, disk, and RAM editor used for forensic inspection, recovery, structure repair, and other byte-level analysis tasks beyond normal GUI...
A lightweight but advanced computer forensics suite for imaging, file system analysis, artifact review, carving, keyword searching, reporting, and ti...
Forensic triage tool for rapidly reviewing live systems, disk images, and supported phone extraction formats with AFF4 imaging, RAM capture, artifact...
Browser-based collaborative review platform for eDiscovery and investigative teams with predictive coding, batching and coding, redaction, load-file...
