Hack Tools
Autopsy: https://www.autopsy.comDescription: A graphical interface for The Sleuth Kit, Autopsy is a popular open-source digital forensics platform that helps with the analysis of disk images.
The Sleuth Kit: //www.sleuthkit.org/Description: A collection of command-line digital forensic tools for analyzing disk images and performing file system analysis.
EnCase: https://www.guidancesoftware.com/Description: EnCase by Guidance Software is a commercial digital forensic tool used by law enforcement and corporate investigators.
X-Ways Forensics: https://www.x-ways.net/Description: A comprehensive digital forensic tool for computer forensics, disk imaging, and evidence collection.
Forensic Toolkit (FTK): https://accessdata.com/products-services/forensic-toolkit-ftkDescription: FTK is a commercial digital forensics software used for data recovery and analysis.
Volatility: https://www.volatilityfoundation.org/Description: Volatility is an open-source memory forensics framework used to analyze the memory of running systems.
SANS SIFT: https://digital-forensics.sans.org/community/downloadsDescription: The SANS Investigative Forensic Toolkit (SIFT) Workstation is an open-source Linux distribution for digital forensics.
CAINE (Computer Aided INvestigative Environment): https://www.caine-live.net/Description: CAINE is an open-source digital forensics platform that provides a wide range of tools for forensic analysis.
Paladin Forensic Suite: https://sumuri.com/software/paladin/Description: Paladin is a live bootable Linux distribution designed for digital forensics and incident response.
Ghiro: https://www.getghiro.org/Description: Ghiro is an open-source tool for digital image forensics, helping to analyze and extract information from images.
Bulk Extractor: https://github.com/simsong/bulk_extractorDescription: Bulk Extractor is an open-source digital forensics tool for scanning disk images and extracting various types of information.
Wireshark: https://www.wireshark.org/Description: Wireshark is a widely-used network protocol analyzer that can be useful for digital forensics involving network traffic.
F-response: https://www.f-response.com/Description: F-response is a commercial tool for remote digital forensics and incident response.
Magnet AXIOM: https://www.magnetforensics.com/products/magnet-axiom/Description: Magnet AXIOM is a commercial digital forensics platform for collecting and analyzing digital evidence.
OpenPuff: http://embeddedsw.net/OpenPuff_Steganography_Home.htmlDescription: OpenPuff is a steganography tool used to hide and extract data within digital files.
OSForensics: https://www.osforensics.com/Description: OSForensics is a commercial digital forensics tool that offers a range of features for analyzing Windows-based systems.
HxD: https://mh-nexus.de/en/hxd/Description: HxD is a free hex editor that can be helpful for examining and editing raw disk data.
RegRipper: https://github.com/keydet89/RegRipper3.0Description: RegRipper is an open-source tool for extracting and analyzing information from Windows Registry hives.
YARA: https://virustotal.github.io/yara/Description: YARA is a tool for identifying and classifying malware based on patterns and signatures.
Plaso (super timeline): https://github.com/log2timeline/plasoDescription: Plaso is an open-source tool for creating super timelines, which are used to analyze chronological events from various sources.
Kali Linux: https://www.kali.org/Description: Kali Linux is a popular Linux distribution for penetration testing and digital forensics, featuring a wide range of pre-installed tools.
Axiom Cyber: https://www.magnetforensics.com/products/magnet-axiom-cyber/Description: Axiom Cyber, by Magnet Forensics, is a commercial tool for digital forensics and cybersecurity investigations.
Scalpel: https://github.com/sleuthkit/scalpelDescription: Scalpel is an open-source file carving tool used to recover deleted files from disk images.
DC3DD: https://github.com/Defense-Cyber-Crime-Center/dc3ddDescription: DC3DD is a patched version of the GNU dd command with additional features for digital forensics.
TSK (The Sleuth Kit) Autopsy Browser: https://www.sleuthkit.org/autopsy/Description: Autopsy is a graphical interface for The Sleuth Kit, making it easier to perform digital forensic analysis.
Cellebrite UFED: https://www.cellebrite.com/en/home/Description: Cellebrite UFED is a commercial tool widely used in mobile device forensics for extracting and analyzing data from smartphones and tablets.
DEFT (Digital Evidence & Forensics Toolkit): http://www.deftlinux.net/Description: DEFT is a Linux distribution designed for digital forensics and incident response.
Digital Forensics Framework (DFF): https://www.digital-forensic.org/Description: DFF is an open-source digital forensics framework that offers a wide range of modules for various tasks.
Zeek (formerly Bro): https://zeek.org/Description: Zeek is an open-source network security monitoring tool that can capture and analyze network traffic in real-time. It's known for its scripting capabilities, making it highly customizable for network forensic tasks.
Autoclave: https://github.com/ncw/autoclaveDescription: Autoclave is a tool for securely wiping data from storage devices to ensure that it cannot be recovered.
Snort: https://www.snort.org/Description: Snort is an open-source intrusion detection and prevention system (IDS/IPS). While its primary use is detecting and preventing network intrusions, it can also be used for network forensics by capturing and analyzing network traffic.
NetworkMiner: https://www.netresec.com/?page=NetworkMinerDescription: NetworkMiner is a network forensic analysis tool that can parse PCAP files and extract various artifacts, such as files, emails, and hostnames, from captured network traffic.
TCPdump: https://www.tcpdump.org/Description: Tcpdump is a command-line packet analyzer for Unix-like operating systems. It can capture and display packet data in real-time and is often used in combination with other tools for network forensics.
Comments
Post a Comment