usbrip
A forensics tool for tracking USB device artifacts on Linux machines.
PhotoRec is a free, open-source, multi-platform file data recovery software designed to recover lost files including video, documents, and archives from hard disks, CD-ROMs, and lost pictures from digital camera memory. It ignores the file system and goes after the underlying data, making it still work even if the media's file system has been severely damaged or reformatted. PhotoRec runs on various operating systems including DOS, Windows, Linux, FreeBSD, NetBSD, OpenBSD, Sun Solaris, and Mac OS X. It can recover lost files from FAT, NTFS, exFAT, ext2/ext3/ext4, HFS+, and other file systems. Important: When using PhotoRec, do not save any more pictures or files to the same partition they were stored on, as it may overwrite the lost data.
A forensics tool for tracking USB device artifacts on Linux machines.
IE10Analyzer can parse and recover records from WebCacheV01.dat, providing detailed information and conversion capabilities.
A recognition framework for identifying products, services, operating systems, and hardware by matching fingerprints against network probes.
A Forensic Framework for Skype with various investigative options.
MFT and USN parser for direct extraction in filesystem timeline format with YARA rule support.
Analyzing WiFiConfigStore.xml file for digital forensics on Android devices.