Forensic Software & Applications
Explore supported forensic software tools, usage guides, tips & tricks, and direct download links.
FLOSS
Mandiant / FLARE Team (Open Source) • Windows / Linux / macOS
FLARE Obfuscated String Solver — a tool for extracting hidden/obfuscated strings from malware samples.
Foremost
U.S. Air Force OSI (Open Source) • Linux
Open-source file carving tool for recovering files based on headers, footers, and internal data structures.
FTK Imager
Exterro / AccessData • Windows
Industry-standard forensic imaging tool for bit-stream imaging (E01, RAW/DD) and evidence preview without altering the original data.
GRR Rapid Response
Google (Open Source) • Server + Agent (Windows/Linux/macOS)
Google's remote live forensics and incident response framework based on a client-server architecture.
Guymager
Guy Voncken (Open Source) • Linux
Free forensic imaging application with a graphical interface for Linux, supporting E01, dd, and AFF formats.
HashCalc
SlavaSoft • Windows
Free hash calculator computing multiple checksum algorithms (MD5, SHA-1/256/512, CRC32, and more) at once.
HashMyFiles
NirSoft • Windows
NirSoft's portable utility for calculating and comparing MD5/SHA1/CRC32/SHA256 hashes across many files at once.
Hayabusa
Yamato Security (Open Source) • Windows / Linux / macOS
Rust-based Windows event log threat hunting and forensics tool with built-in Sigma rule support.
Hindsight
Ryan Benson (Open Source) • Windows / Linux / macOS (Python)
Open-source tool to extract and analyze browsing history from Chromium-based browsers.
iLEAPP
Alexis Brignoni (Open Source) • Windows / Linux / macOS (Python)
Open-source parser for extracting and analyzing logs, events, and plists from iOS forensic extractions.
KAPE
Eric Zimmerman / Kroll • Windows
Kroll Artifact Parser and Extractor — a fast triage tool for collecting and immediately processing Windows forensic artifacts.
libimobiledevice
libimobiledevice Project (Open Source) • Windows / Linux / macOS
Cross-platform open-source library for communicating with iOS devices without requiring a jailbreak.