In this article, we decided to collect programs that will help you in conducting investigations and, most importantly, will be free of charge.
Good afternoon. Today, we will plunge into the “wonderful world” of forensics. In this article, we decided to collect programs that will help you in conducting investigations and, most importantly, will be free of charge.
DISCLAIMER: This article is for informational purposes only and is not intended to be a guide to misconduct or training material to cover up wrongdoing.
NirSoft Utility’s
Our list opens with a site that presents a selection of several hundred different free utilities for a forensic specialist. Everything is here, from Windows password recovery to network tools. Most of the tools do not require installation and work without leaving any traces. Everyone can find here something that will help him in a particular situation.
BULK_EXTRACTOR
A great tool that allows you to scan disk images, files, file directories, etc. and extract structured information from them, such as email addresses, phone numbers, credit card numbers, GPS coordinates, fragments of JPEG and JSON files without parsing or file structure systems.
SHERLOQ
A whole set of useful tools for the examination of electronic images in one bottle. The service applies the latest research algorithms to graphic files, which allows not only to determine their authenticity, but also to receive a detailed technical conclusion about the verification.
VIDEOCLEANER
Allows you to analyze photo and video files of most formats. It is very useful in investigations, as it makes it possible to improve the quality of displaying faces, license plates and other objects. It improves the quality and brightness of the image, changes the saturation and eliminates distortion.
ArtEx (Artifact Examiner)
A useful forensic tool that allows you to visualize the contents of iOS smartphones, as well as extract data. Works with a jailbroken device or a pre-cooked image. Allows you to build timelines, analyze movements between cell towers with visualization on the map. Parses messengers, analyzes transactions and recognizes faces in photos
Andriller
Utility with a set of forensic tools for Android smartphones. Allows you to extract and decode device data. Reveals password protection at the entrance to the gadget. Has customizable decoders for application data from android databases to decode messages.
MOBILedit
A phone copy app for any operating system that helps you transfer contacts and messages from other phones, create local backups of content, and allows you to control your phone on a PC via Wi-Fi.
HINDSIGHT
A tool for the examination of browsers based on the Chromium engine. Collects and analyzes web browser artifacts. Allows you to work with download history, cache entries, bookmarks, autofill entries, saved passwords, settings, extensions, cookies. Conveniently organizes records and lays them out on a timeline.
HackBrowserData
Open Source product that allows you to extract data from a whole line of browsers (Chrome/Chromium, Microsoft Edge, QQ, Brave, Opera, Vivaldi, Ynadex and FireFox). Successfully pulls out passwords, bookmarks, history, download links, cookies and much more.
XPLICO
A tool that allows you to analyze network traffic (HTTP, SIP, IMAP, POP, SMTP, TCP, UDP, IPv6, Facebook, MSN, RTP, IRC, Paltalk, etc.). An extremely useful tool for forensics.
FILE IDENTIFIER
A utility that allows you to recognize unknown files on a Windows computer. Allows you to search for information about any Windows file using the context menu option. In total, the tool recognizes more than 2000 file types from its own database.
OSF clone
A tool that allows you to quickly and independently of the installed operating system create or clone accurate raw disk images. Supports disk images in the open Advance Forensics Format (AFF). Able to create a forensic disk image, preserving all unused sectors, free space, file fragmentation and undeleted file records from the original hard disk.
Autopsy
An absolute favorite that needs no introduction. A complete digital forensics platform with its own GUI. Used by law enforcement, military and corporate experts. The platform has been designed to work with third party modules.
iLEAPP
Log, event and Plist parser for iOS 11-14. If you have ever been digging in iPhone plist files, then you will fully appreciate this software.
ForensicWiki
And finally, a whole web resource in Wiki format dedicated to digital forensics. Here you can find answers to almost any questions that interest you.
Subscribe to our channel and do not miss new collections of tools in various areas of Information Security.
Posted by: @ESPYER
