Foremost Logo

Foremost

0
Free
Visit Website

Foremost is a console program used for data recovery by analyzing headers, footers, and internal data structures, commonly known as data carving. It can operate on image files or directly on a drive, with the ability to specify headers and footers through a configuration file or command line switches. Originally developed by the United States Air Force, Foremost is now available to the public.

FEATURES

ALTERNATIVES

A toolkit for forensic analysis of network appliances with YARA decoding options and frame extraction capabilities.

A free, open-source file data recovery software that can recover lost files from hard disks, CD-ROMs, and digital camera memory.

Forensics tool for exploring offline Docker filesystems.

Hindsight is a free tool for analyzing web artifacts from Google Chrome/Chromium browsers and presenting the data in a timeline for forensic analysis.

A Forensic Framework for Skype with various investigative options.

A Mac OS X forensic utility for ensuring correct forensic procedures during disk imaging.

Truehunter is a tool designed to detect encrypted containers with a focus on Truecrypt and Veracrypt, utilizing a fast and memory efficient approach.

A cross-platform registry hive editor for forensic analysis with advanced features like hex viewer and reporting engine.