Details
162
DFIR Tools
License Type
Paid
"Mobile digital data has become critical evidence in criminal cases, adding a significant amount of pressure on forensic examiners...
129
DFIR Tools
License Type
Free
"Cellebrite's UFED Reader is a free, executable application, purpose-designed for forensic examiners or investigators who need to share reports...
Forensic Notes Featured
124
The Forensic Notebook will contain all your notes related to the case, timestamped and Court-Ready. ...
110
linux c++, qt5, multi-threaded forensic gui tool
110
Total performs several useful functions. Use it to: total fields in succeeding records which have the same sort key;...
91
A tool mainly to erase specified records from Windows event logs, with additional functionalities. ...
Paraben E3:Universal Featured
83
The E3:Universal provides top tier acquisition, analytics, and reporting to optimize the data needed in an investigation from a...
80
Collection of SQL queries templates for digital forensics use by platform and application. These queries are templates that should...
Paraben E3:DS Featured
80
Mobile forensics is the most dynamic of the digital forensic disciplines. Understanding those changes and staying on top...
79
SDB Explorer is a GUI program that allows for interacting with Microsoft Shim databases.
75
MailSniper is a penetration testing tool for searching through email in a Microsoft Exchange environment for specific terms (passwords,...
73
**NOTE** The download link has disappeared. If you find it, submit it in a comment to...
68
The kernel patch and userspace tools to enable Linux software write blocking. Useful for computer forensics, incident response and...
63
Registry Explorer is a new approach to interacting with Registry hives. It has several unique capabilities not found in...
Arsenal Recon Registry Recon Featured
62 3
Registry Recon is not just another Registry parser. We developed powerful new methods to parse Registry data so that...
62
The X-Ways exported metadata fields are actually a field which itself contains semi-colon (;) delimited fields. These fields are...
56
geolocate ip addresses in IIS logs?github.com/EricZimmerman/iisGeolocate
55
MalZoo is a mass static malware analysis tool that collects the information in a Mongo database, Splunk, ElasticSearch or...
55
"The Microsoft Windows operating systems records artifacts when USB removable storage devices (thumb drives, iPods, digital cameras, external HDD,...
53
WHAT'S NEW With the GUI (rr.exe), you no longer have to select a profile; instead, select the...
Partners & Sponsors
