Digital Forensics
209 tools and resources
FEATURED
Feature Your Cybersecurity Product
Showcase your innovative cybersecurity solution to our dedicated audience of security professionals.
Boost Your VisibilityNEW
Hoarder is a tool to collect and parse windows artifacts.
LiME is a Linux Memory Extractor tool for acquiring volatile memory from Linux and Linux-based devices, including Android, with features like full memory captures and minimal process footprint.
Custom built application for asynchronous forensic data presentation on an Elasticsearch backend, with upcoming features like Docker-based installation and new UI rewrite in React.
Powerful tool for searching and hunting through Windows forensic artefacts with support for Sigma detection rules and custom Chainsaw detection rules.
A tool for extracting files from packet capture files with ease of use and extensibility for Python developers.
Dump the contents of the location database files on iOS and macOS with output options like KML and CSV.
A digital forensic tool for creating forensic images of computer hard drives and analyzing digital evidence.
Automated tool for parsing Windows registry hives and extracting valuable information for forensic analysis.
A command-line utility to show and change EXIF information in JPEG files
Anti-forensics tool for Red Teamers to erase footprints and test incident response capabilities.
Customizable live OS constructor tool for remote forensics and incident response.
A command-line tool for searching and extracting strings from files with various options like ASCII and Unicode string search.
A forensic research tool for gathering forensic traces on Android and iOS devices, supporting the use of public indicators of compromise.
A comprehensive guide to incident response and computer forensics, covering the entire lifecycle of incident response and remediation.
A tool to quickly gather forensic artifacts from disk images or a live system into a lightweight container, aiding in digital forensic triage.
Web interface for the Volatility Memory Forensics Framework
CyLR is a Live Response Collection tool for quickly and securely collecting forensic artifacts from hosts with NTFS file systems.
Windows event log fast forensics timeline generator and threat hunting tool.
A digital artifact extraction framework for extracting data from volatile memory (RAM) samples, providing visibility into the runtime state of a system.
Collects and organizes Linux OS data for detailed analysis and incident response.