Forensics

Awesome Forensics – The Forensic Analyst’s Toolkit An In-Depth Exploration

Comprehensive guide to the tools and resources pivotal in the world of forensic analysis. From essential collections to specialized frameworks and live forensics, this curated list covers everything you need to delve deeper into digital investigations.

Whether you’re a professional in the field or just starting out, explore these free and mostly open-source tools that are indispensable for today’s forensic experts.

Curated list of awesome free (mostly open source) forensic analysis tools and resources.

  • Awesome Forensics
    • Collections
    • Tools
      • Distributions
      • Frameworks
      • Live Forensics
      • IOC Scanner
      • Acquisition
      • Imaging
      • Carving
      • Memory Forensics
      • Network Forensics
      • Windows Artifacts
        • NTFS/MFT Processing
      • OS X Forensics
      • Mobile Forensics
      • Docker Forensics
      • Internet Artifacts
      • Timeline Analysis
      • Disk image handling
      • Decryption
      • Management
      • Picture Analysis
      • Metadata Forensics
      • Steganography
    • Learn Forensics
      • CTFs and Challenges
    • Resources
      • Web
      • Blogs
      • Books
      • File System Corpora
      • Other
      • Labs
    • Related Awesome Lists
    • Contributing

Collections

  • AboutDFIR – The Definitive Compendium Project – Collection of forensic resources for learning and research. Offers lists of certifications, books, blogs, challenges and more
  • ⭐ ForensicArtifacts.com Artifact Repository – Machine-readable knowledge base of forensic artifacts

Tools

  • Forensics tools on Wikipedia
  • Eric Zimmerman’s Tools

Distributions

  • bitscout – LiveCD/LiveUSB for remote forensic acquisition and analysis
  • Remnux – Distro for reverse-engineering and analyzing malicious software
  • SANS Investigative Forensics Toolkit (sift) – Linux distribution for forensic analysis
  • Tsurugi Linux – Linux distribution for forensic analysis
  • WinFE – Windows Forensics enviroment

For more information click here.

Varshini

Varshini is a Cyber Security expert in Threat Analysis, Vulnerability Assessment, and Research. Passionate about staying ahead of emerging Threats and Technologies.

Recent Posts

cp Command: Copy Files and Directories in Linux

The cp command, short for "copy," is the main Linux utility for duplicating files and directories. Whether…

5 days ago

Image OSINT

Introduction In digital investigations, images often hold more information than meets the eye. With the…

5 days ago

cat Command: Read and Combine File Contents in Linux

The cat command short for concatenate, It is a fast and versatile tool for viewing and merging…

5 days ago

Port In Networking

What is a Port? A port in networking acts like a gateway that directs data…

5 days ago

ls Command: List Directory Contents in Linux

The ls command is fundamental for anyone working with Linux. It’s used to display the files and…

6 days ago

pwd Command: Find Your Location in Linux

The pwd (Print Working Directory) command is essential for navigating the Linux filesystem. It instantly shows your…

6 days ago