Name | Platform | License | Version | Description |
---|---|---|---|---|
Autopsy | Windows, macOS, Linux | GPL | 4.11 | A digital forensics platform and GUI to The Sleuth Kit |
AXIOM | Windows | proprietary | 3.1 | Full digital forensics suite created by Magnet Forensics. |
Belkasoft Evidence Center | Windows | proprietary | 9.5 | Digital forensics suite created by Belkasoft |
COFEE | Windows | proprietary | n/a | A suite of tools for Windows developed by Microsoft |
Digital Forensics Framework | Unix-like/Windows | GPL | 1.3 | Framework and user interfaces dedicated to Digital Forensics |
EPRB | Windows | proprietary | 1435 | Set of tools for encrypted systems & data decryption and password recovery |
EnCase | Windows | proprietary | 8.06.1 | Digital forensics suite created by Guidance Software |
Forensic Explorer | Windows | proprietary | 4.4.8.7926 | Digital forensics suite created by GetData |
FTK | Windows | proprietary | 6.0.1 | Multi-purpose tool, FTK is a court-cited digital investigations platform built for speed, stability and ease of use. |
Helix3 Pro | ? | proprietary | ? | Digital forensics suite created by e-fence |
ISEEK[5] | Windows | proprietary | 1 | Hybrid-forensics tool running only in memory - designed for large networked environments |
IsoBuster | Windows | proprietary | 4.1 | Essential light weight tool to inspect any type data carrier, supporting a wide range of file systems, with advanced export functionality. |
Netherlands Forensic Institute / Xiraf[6] / HANSKEN[7] | n/a | proprietary | n/a | Computer-forensic online service. |
Open Computer Forensics Architecture | Linux | LGPL/GPL | 2.3.0 | Computer forensics framework for CF-Lab environment |
OSForensics[8][9] | Windows | proprietary | 3.3 | Multi-purpose forensic tool |
PTK Forensics | LAMP | proprietary | 2.0 | GUI for The Sleuth Kit |
Rocket Cloud | Windows | proprietary | 2.0 | Digital forensics acquisition and case management platform created by Digital DNA Group |
SafeBack[10] | N/a | proprietary | 3.0 | Digital media (evidence) acquisition and backup |
SANS Investigative Forensics Toolkit - SIFT | Ubuntu | 2.1 | Multi-purpose forensic operating system | |
SPEKTOR Forensic Intelligence[11] | Unix-like | proprietary | 6.x | Easy to use, comprehensive forensic tool used worldwide by LE/Military/Agencies/Corporates - includes Rapid Imaging and fully automated analysis. |
The Coroner's Toolkit | Unix-like | IBM Public License | 1.19 | A suite of programs for Unix analysis |
The Sleuth Kit | Unix-like/Windows | IPL, CPL, GPL | 4.1.2 | A library of tools for both Unix and Windows |
UltimateForensics | Windows | proprietary | 1.1 | Forensic software for image/video search and analysis by means of matching visual content |
Windows To Go | n/a | proprietary | n/a | Bootable operating system |
X-Ways Forensics | Windows | proprietary | 19.6 | Integrated computer forensics environment created by X-Ways |
Name | Platform | License | Version | Description |
---|---|---|---|---|
Corepro | Windows | proprietary | 1.0.6 | Software tool for Computer Reversed Projection (e.g. Height examinations |
Impress | Windows | proprietary | 7.3.8 | Software toolbox for the forensic enhancement of images and video |
Mandet | Windows | proprietary | 1.0.8.2 | Software toolbox for the forensic authentication of images and video |
ForensicVideo-FA | Windows | proprietary | 2.0.0 | Software for forensic analysis of video files formats |
Name | Vendor or sponsor | Platform | License |
---|---|---|---|
Belkasoft Evidence Center[citation needed] | Belkasoft | Windows | proprietary |
Belkasoft Live RAM Capturer[citation needed] | Belkasoft | Windows | free |
Volatililty | Volatile Systems | Windows and Linux | free (GPL) |
WindowsSCOPE | BlueRISC | Windows | proprietary |
Name | Platform | License | Version | Description |
---|---|---|---|---|
Belkasoft Evidence Center | Windows | proprietary | Software product which supports mobile and computer forensics | |
MicroSystemation XRY/XACT[12] | Windows | proprietary | Hardware/Software package, specializes in deleted data | |
Oxygen Forensics | windows | proprietary | Digital forensics suite focused on mobile devices |
Name | Platform | License | Version | Description |
---|---|---|---|---|
DECAF | Windows | free | n/a | Tool which automatically executes a set of user defined actions on detecting Microsoft's COFEE tool |
Evidence Eliminator | Windows | proprietary | 6.03 | Anti-forensics software, claims to delete files securely |
HashKeeper | Windows | free | n/a | Database application for storing file hash signatures |
MailXaminer | Windows | Perpetual | 4.9.0 | Specialized Email Forensics Tool |
Named after the famous elephant Hansken, because of their tremendous memory
Among the most popular tools are products named MicroSystemation GSM .XRY and .XACT, Cellebrite UFED, Susteen Secure View2, Paraben Device Seizure, Radio Tactics Aceso, Oxygen Phone Manager, and Compelson MobilEdit Forensic