Oxygen Forensic

It is simple to perform digital evidence collection procedure by email header analyzer tool since it provides a unique way to perform cyber forensic investigation techniques. In this user can easily recover & do the forensic email analysis. It email platform independency give user to do digital...

FLAG (Forensic and Log Analysis GUI) was designed to simplify the process of log file analysis and forensic investigations. Often, when investigating a large case, a great deal of data needs to be analysed and correlated.PyFlag uses a database as a backend to assist in managing the large volumes...

Cartesio is a web-based groupware application for Linux with PHP, MySQL, Apache, SSL oriented to forensic laboratories.


Platforms: Windows, Mac, *nix, PHP, BSD Solaris

P2 Commander is a fully automated computer forensic analysis tool designed to forensically analyze computer data. With a focus on email and network email analysis, internet history analysis, chat log analysis, data triage, deleted data recovery, file sorting and viewing, hash database filtering,...


Platforms: Windows, Windows 8, Windows 7

Chrome Analyzer is an advanced windows forensic tool which analyzes the Chrome browser to extract a wealth of data. Google Chrome browser is one of the most popular web browsers around, according to stats around 43% of web users use Google Chrome to browse the web. Technically Chrome browser is...


Platforms: Windows

4buntu is a set of scripts to install a collection of digital forensic tools on top of a Linux system. The tools provide a complete forensic workstation to investigate different systems such as Windows, Linux and Mac OS X.


Platforms: *nix

DocFlex/XSD is a toolkit to generate high quality XML schema documentation in HTML, RTF and TXT (plain text) formats with a possibility of automatic inserting of XSD diagrams produced by XMLSpy or Oxygen XML (with the full support of diagram hyperlinks). The entire doc-generator is...


Platforms: Windows, Mac, *nix, Windows 8, Windows 7, Java

Elcomsoft Phone Breaker is one of the most advanced mobile forensic tools on the market. Now with iOS 14 support, the tool supports iPhone and iPad devices as well as remote extraction from Apple iCloud, Elcomsoft Phone Breaker can perform logical and over-the-air extraction from a wide range of...


Platforms: Windows, Windows 8, Windows 7, Windows Server

Directory Snoop is a cluster-level search tool that lets Windows users snoop through their FAT and NTFS formatted disk drives to see what data may be hiding in the cracks. Use Directory Snoop to recover deleted files you thought you would never see again or permanently erase sensitive files so...


Platforms: Windows

With ComputerWatermak you get a real chance to recover your computer in case it gets stolen, or make sure you have a proof in any dispute over the ownership of your computer or disk(s). ComputerWatermark writes your name and address (or any other information you want) on the entire free surface...


Platforms: Windows

With Innovatools ComputerWatermak you get a real chance to recover your computer in case it gets stolen, or make sure you have a proof in any dispute over the ownership of your computer or disk(s). Innovatools ComputerWatermark writes your name and address (or any other information you want) on...


Platforms: Windows

Paraben's SIM Card Seizure is a forensic analysis tool used to acquire and examine data from a SIM Card. Used by forensic experts around the world, SIM Card Seizure can not only analyze data on the card, it can recover deleted items such as SMS/Text messages, verify data integrity with hash...


Platforms: Windows

Forensic tool for viewing and analyzing the contents of thumbs.db and Vista thumbcache files. Thumbcache files supported include thumbs.db, ehthumbs.db, thumbcache_idx.db, thumbcache_32.db, thumbcache_96.db, thumbcache_256.db and thumbcache_1024.db. These files can contain thumbnail images of...


Platforms: Windows

Generates source code for the Data Access, Business, Service & UI Layers of a .NET application. Outputs include Stored Procedures for the Data Layer, a data provider class for the Data Access Layer along with data entity objects. For the Business Layer, a cache is available along with the Domain...


Platforms: Windows

The purpose of this application is to allow administrators to have supervisory control over all the desktops within their domain, providing them with very powerful forensic tools to detect and monitor unauthorized and illegal behavior and to gather the electronic evidence needed for disciplinary...


Platforms: Windows

Paraben's P2 eXplorer allows you to mount a forensic image (or Linux DD, RAW, or other drive images) and explore it as though it were a drive on your machine while preserving the forensic nature of your evidence. This means that an image isn't just mounted to view logical files, it is...


Platforms: Windows

Mount Image Pro is a must have utility for Computer Forensic Investigators and Data Recovery Experts, which can mount disk drive images as logical drive letters under Windows. Mount Image Pro features include: * Mount ENCASE image files (all versions supported with or without compression). *...


Platforms: Windows

Paraben's Case Agent Companion is designed to optimize both the time of the forensic examiner and the agent working a case. Built in viewers for over 225 file formats, searching, and reporting make Case Agent Companion the most comprehensive forensic examination & reporting tool of its kind....


Platforms: Windows

We provide physical data recovery training, cyber forensic training, tracking e-mail accounts ,ip tracing, recovering deleted evidence. We provide physical data recovery training, cyber forensic training, tracking e-mail accounts ,ip tracing, recovering deleted evidence. We provide physical data...

The Examiner is an application that utilizes the objdump command to disassemble and comment foreign executable binaries. This app was designed to analyze static compiled binaries but works ok with others. The intention is for forensic research but could also be used in general reverse...


Platforms: *nix