Skip to content

Forensic Software & Applications

Explore supported forensic software tools, usage guides, tips & tricks, and direct download links.

Dc3dd

DC3 — DoD Cyber Crime Center (Open Source) • Linux

48 35

A patched version of GNU dd with added hashing and logging features for forensic imaging needs.

View Details Download

Disk-Arbitrator

Aaron Burghardt (Open Source) • macOS

42 33

macOS utility to prevent auto-mounting and enforce read-only mode on external media during forensic work.

View Details Download

Ewfacquire

libewf Project (Open Source) • Linux / Windows (CLI)

41 34

Command-line tool from libewf for acquiring storage media into the Expert Witness Format (E01).

View Details Download
v4.7.1

FTK Imager

Exterro / AccessData • Windows

72 62

Industry-standard forensic imaging tool for bit-stream imaging (E01, RAW/DD) and evidence preview without altering the original data.

View Details Download

Guymager

Guy Voncken (Open Source) • Linux

43 27

Free forensic imaging application with a graphical interface for Linux, supporting E01, dd, and AFF formats.

View Details Download

TestDisk

Christophe Grenier / CGSecurity (Open Source) • Windows / Linux / macOS

39 28

Open-source tool for repairing damaged partition tables and recovering deleted partitions.

View Details Download

WinFE

WinFE Community (Open Source) • Bootable Windows PE

45 23

A Windows PE-based bootable forensic environment configured read-only for safe evidence acquisition.

View Details Download