Skip to content

Forensic Software & Applications

Explore supported forensic software tools, usage guides, tips & tricks, and direct download links.

Chainsaw

WithSecure Labs (Open Source) • Windows / Linux / macOS

38 31

Fast Rust-based hunting tool for searching threat indicators in Windows Event Logs using Sigma rules.

View Details Download

Hayabusa

Yamato Security (Open Source) • Windows / Linux / macOS

39 27

Rust-based Windows event log threat hunting and forensics tool with built-in Sigma rule support.

View Details Download

LoginTracer

JPCERT/CC (Open Source) • Web-based (Linux server)

41 27

A visualization tool (also known as LogonTracer) for analyzing Active Directory logon events and detecting lateral movement.

View Details Download

NTFS Tool

Open Source • Windows

40 27

A supporting utility for examining the internal structure of the NTFS file system on forensic images.

View Details Download

RecuperaBit

Andrea Lazzarotto (Open Source) • Windows / Linux / macOS (Python)

40 23

Open-source tool for reconstructing damaged NTFS partition structures and recovering data.

View Details Download

RegRipper

Harlan Carvey (Open Source) • Windows / Linux / macOS (Perl)

41 30

Industry-standard open-source tool for extracting and parsing data from Windows Registry hives.

View Details Download