| FTK Imager |
FTK Imager is a free and widely used software tool in the field of digital forensics. Developed
by AccessData (now part of Exterro), it's primarily used to acquire, preserve, and preview
digital evidence in a forensically sound manner. This means it creates copies of data without
altering the original, which is crucial for maintaining the integrity of evidence in legal
proceedings |
Download
|
| |
| QuickHash-GUI |
Free, open-source, and cross-platform data hashing tool. It's designed to be user-friendly with
a graphical interface (GUI), making it accessible to a wide range of users from digital
forensics practitioners to hobbyists. |
Download |
| |
| Mushy Plist Viewer
|
Standalone tool developed by Ian Whiffin of DoubleBlak specifically designed for parsing and
viewing Apple .plist files, especially the more complex binary plist (bplist) format. |
Download |
| |
| Janice JSON Viewer
|
is a desktop application specifically designed for viewing and navigating large JSON (JavaScript
Object Notation) files. It's an open-source tool developed by Erik Kalkoken, built with the Fyne
GUI toolkit in Go |
Download
|
| |
| DCode |
Forensic utility developed by Digital Detective. Its primary function is to convert various
types of timestamps found on desktop and mobile devices into human-readable formats. This tool
is crucial for digital forensic examiners as it helps them to identify and decode timestamp data
during investigations. |
Download
|
| |
| Notepad++ |
Notepad++ is a very popular, free, and open-source text and source code editor for Windows. It's
designed to be a lightweight, yet powerful, alternative to the default Notepad program, offering
a much wider range of features for developers, system administrators, and anyone who frequently
works with text files.o |
Download
|
| |
| DB Browser |
a high-quality, visual, open-source tool designed for easily creating, designing, and editing
SQLite (and sometimes SQLCipher) database files. |
Download
|
| |
| Magnet RAM Capture
|
By "Magnet Forensics", it is a free tool specifically for acquiring the physical memory (RAM)
from a live Windows system. |
Download
|
| |
| TeraCopy |
TeraCopy is a popular utility designed to enhance and streamline the process of copying and
moving files on Windows. It acts as a replacement or supplement to the standard Windows file
copy/move functionality, offering several advantages, particularly when dealing with large
volumes of data or when data integrity is critical. |
Download
|
| |
| EXIFTool |
A powerful command-line application for reading, writing, and editing metadata in a wide variety
of file formats (EXIF, IPTC, XMP, GPS, etc.) Crucial for analyzing the origin, creation date,
modification history, and other embedded information in media files (photos, videos) and
documents. |
Download
|
| |
|