Forensics

Disk Investigator helps you to discover all that is hidden on your computer hard disk. It can also help you to recover lost data. Display the true drive contents by bypassing the operating system and directly reading the raw drive sectors. View and search raw directories, files, clusters, and...

ActivTrak captures user activity data in the digital workplace, helping teams address security and compliance concerns while also identifying opportunities for greater engagement, productivity and efficiency. Unlike traditional UAM providers that offer only a technical view of users, ActivTrak...

These tools perfectly analyze how processing or mixing is affecting audio content -  as well as live input -  to judge room acoustics, and potential phase issues due to speaker placement and tuning. With countless applications, Reveal is an indispensable part of the audio production...


Platforms: Mac

ActivTrak captures user activity data in the digital workplace, helping teams address security and compliance concerns while also identifying opportunities for greater engagement, productivity and efficiency. Unlike traditional UAM providers that offer only a technical view of users, ActivTrak...


Platforms: Mac

Browser History Viewer allows you to examine the contents of web browser history files and export the data. Currently it supports Internet Explorer and Mozilla/Firefox. Browser History Viewer meant to be a forensics tool. It meant to be a forensics tool. BHV is licensed under the terms of...


Platforms: *nix

Every digital photo contains a wealth of hidden information -- JPEGsnoop was written to expose these details to those who are curious. Not only can one determine the various settings that were used in the digital camera in taking the photo (EXIF metadata, IPTC), but one can also extract...


Platforms: Windows

WinHex is a hexadecimal editor for Windows 95/98/Me/NT/2000/XP with a lot of features:* Disk editor (logical & physical, supports FAT16, FAT32, NTFS, and CDFS)* RAM editor - a means to edit other processes' virtual memory* Data Interpreter, knowing 19 data types* Editing data structures using...


Platforms: Windows

DEFT (acronym of Digital Evidence & Forensic Toolkit) is a customized Linux distribution of the Kubuntu live Linux CD. It is a very easy to use system that includes an excellent hardware detection and the best open source applications dedicated to incident response and computer forensics....


Platforms: *nix

Many of us have to share their computers. Therefore, the need to view what happened on the computer while you were away, is an undeniable fact. If you need a handy software that can help you view what has been done on your computer while you were away, then it's time to try History Viewer....


Platforms: Windows

Audio Editing Software Benefits The top eight programs in our review ranked quite close to each other and are within a similar price range; however, they all support different formats, editing tools and recording/ burning abilities. There are several factors to consider when looking for...


Platforms: Windows, Other

Fakebust provides a malicious exploit discriminator. Fakebust is a program that assists with the rapid assessment and supervised execution of potentially malicious programs such as exploits or utilities of unknown origin, programs recovered during OS forensics, or acquired from a honeypot....


Platforms: *nix

Open Computer Forensics Architecture (OCFA) is a modular computer forensics framework built by the Dutch National Police Agency. The main goal is to automate the digital forensic process to speed up the investigation and give tactical investigators direct access to the seized data through an easy...


Platforms: *nix

Plan-B is a bootable Linux environment without the need for a hard drive, it runs entirely in ram or from the cd, based on a basic, stripped installation of Red Hat Linux and the fundamental workings of the SuperRescue CD. A list of tools and utilities are also included for projects such as: *...


Platforms: *nix

Trinux is a ramdisk-based Linux distribution that boots from a single floppy or CD-ROM, loads it packages from an HTTP/FTP server, a FAT/NTFS/ISO filesystem, or additional floppies. Trinux contains the latest versions of popular Open Source network security tools for port scanning, packet...


Platforms: *nix

Vinetto project is a forensics tool to examine Thumbs.db files. The project is a command line python script that works on Linux, Mac OS X and Cygwin(win32). Usage: Usage: vinetto [OPTIONS] [-s] [-U] [-o DIR] file options: --version show programs version number and exit -h, --help show...


Platforms: *nix

STD is a Linux-based Security Tool. Actually, it is a collection of hundreds if not thousands of open source security tools. Its a Live Linux Distro, which means it runs from a bootable CD in memory without changing the native operating system of the host computer. Its sole purpose in life is to...


Platforms: *nix

Fenris is a suite of tools suitable for code analysis, debugging, protocol analysis, reverse engineering, forensics, diagnostics, security audits, vulnerability research and many other purposes. The main logical components are: - Fenris: high-level tracer, a tool that detects the logic used...


Platforms: *nix

Impost is a network security auditing tool designed to analyze the forensics behind compromised and/or vulnerable daemons. Theres two different kinds of operating modes used by Impost; It can either act as a honey pot and take orders from a Perl script controlling how it responds and communicates...


Platforms: *nix

Distributed Aide Runtime Controller is a multi-threaded Python application designed for managing AIDE installations in large heterogeneous networks. AIDE is an open-source improvement upon the academic release of Tripwire. It can be used to detect filesystem changes in unix environments, which...


Platforms: *nix

UserTracking 2 is a tool that works closely together with Radiator and 802.1x in an attempt to facilitate forensics investigations. It does this by linking network layer 2 (i.e. MAC addresses) to network layer 3 (i.e. IP addresses). Since 802.1x keeps logs of users and MAC addresses while...


Platforms: *nix