Disk Arbitrator Logo

Disk Arbitrator

0
Free
Visit Website

Disk Arbitrator is a Mac OS X forensic utility that provides a user interface to the Disk Arbitration framework, ensuring correct forensic procedures are followed during disk imaging. When enabled, it blocks the mounting of file systems to prevent read-write access, complementing write-blockers with additional features.

FEATURES

ALTERNATIVES

Custom built application for asynchronous forensic data presentation on an Elasticsearch backend, with upcoming features like Docker-based installation and new UI rewrite in React.

A forensic research tool for gathering forensic traces on Android and iOS devices, supporting the use of public indicators of compromise.

A command-line tool for searching and extracting strings from files with various options like ASCII and Unicode string search.

A digital forensic tool for creating forensic images of computer hard drives and analyzing digital evidence.

A simple Golang application for storing NIST National Software Reference Library Reference Data Set (NSRL RDS) with md5 and sha1 hash lookup searches.

A Windows Registry hive extraction library that reads and writes Windows Registry 'hive' binary files.

Python script to parse macOS MRU plist files into human-friendly format

Generate comprehensive reports about Windows systems with detailed system, security, networking, and USB information.