Digital Forensics tools

  • Autopsy “[...] The Autopsy Forensic Browser is a graphical interface to the command line digital investigation tools in The Sleuth Kit [...]“
  • Sleuthkit “[...] is a library and collection of command line tools that allow you to investigate volume and file system data”
  • Foremost (for data carving)
  • sha256deep command (to compute file hash)
  • grep command (to search keywords)
  • awk command (to analyse the output)
  • sed command (to analyse the output)
  • dd command

Other Data Carving Tools


Tags: , , , , , , , , , ,

Leave a Reply