Penguin OS Forensic (or Flight) Recorder (POFR) Logo

Penguin OS Forensic (or Flight) Recorder (POFR)

0
Free
Visit Website

The Penguin OS Forensic (or Flight) Recorder (POFR) collects, stores, and organizes process execution, file access, network/socket endpoint creation, and other data from Linux Operating Systems for detailed analysis, aiding in incident response, threat detection, and compliance with standards like PCI-DSS and HIPAA.

FEATURES

ALTERNATIVES

WinSearchDBAnalyzer can parse and recover records in Windows.edb, providing detailed insights into various data types.

Toolkit for post-mortem analysis of Docker runtime environments using forensic HDD copies.

A library to access and parse OLE 2 Compound File (OLECF) format files.

A portable volatile memory acquisition tool for Linux.

A Windows Registry hive extraction library that reads and writes Windows Registry 'hive' binary files.

A Kernel fuzzer focusing on race bugs

Online platform for image steganography analysis

A digital forensics tool that provides read-only access to file-system objects from various storage media types and file formats.