Other Tools¶
Other forensic tools worth knowing, without a dedicated page here.
| Tool | Type | Use |
|---|---|---|
| Eric Zimmerman's Tools | Free, Windows | Registry Explorer, MFTECmd, LECmd, RBCmd, Timeline Explorer, and more |
| Velociraptor | Free, open source | Endpoint collection and hunting across many hosts |
| Bulk Extractor | Free, open source | Scans images for email addresses, URLs, card numbers, and other features without parsing the file system |
| CAINE | Free Linux distribution | Forensic live environment |
| DumpZilla | Free, open source | Firefox browser artifacts |
| Magnet RAM Capture | Free, Windows | Memory acquisition |
| Redline | Free, Windows | Host investigation and memory analysis (Trellix) |
| EnCase | Commercial | Full forensic suite |
| Kali Linux forensic tools | Free | Many of the Linux tools on these pages, packaged |