Ghiro
Automated digital image forensics tool
Foremost is a console program used for data recovery by analyzing headers, footers, and internal data structures, commonly known as data carving. It can operate on image files or directly on a drive, with the ability to specify headers and footers through a configuration file or command line switches. Originally developed by the United States Air Force, Foremost is now available to the public.
Automated digital image forensics tool
Toolkit for performing acquisitions on iOS devices with logical and filesystem acquisition support.
GUI-based memory forensic capture tool for cyber forensics and cyber crime investigation.
A script to assist in creating templates for VirtualBox to enhance VM detection evasion.
An open source format for storing digital evidence and data, with a C/C++ library for creating, reading, and manipulating AFF4 images.
Open Source computer forensics platform with modular design for easy automation and scripting.