applications/forensics tools
- 2hash - Simultaneously perform an MD5 and SHA1 checksum on files
- CERT-Forensics-Tools - Meta package that includes all of the CERT Forensics Tools
- DropboxReader - DropboxReader
- Volatility - Tools for the extraction of digital artifacts from volatile memory (RAM) images
- Volatility-community-plugins - Volatility-community-plugins
- Volatility3 - Tools for the extraction of digital artifacts from volatile memory (RAM) images
- Volatility3-linux-symbols - Volatility 3 Linux Symbols - These are the Operating System kernel Symbols for Volatility 3
- Volatility3-mac-symbols - Volatility 3 Mac Symbols - These are the Operating System kernel Symbols for Volatility 3
- Volatility3-windows-symbols - Volatility 3 Windows Symbols - These are the Operating System kernel Symbols for Volatility 3
- analyzeMFT - analyzeMFT
- avml - AVML - Acquire Volatile Memory for Linux
- crunch - Crunch - Generate wordlists from a character set
- cutter-re - Cutter - A Qt and C++ GUI for the radare2 reverse engineering framework
- dcp - dcp - copy and profile files and directories
- ddrutility - ddrutility - Utility for use with gnuddrescue to aid with data recovery
- docker-forensics-toolkit - docker-forensics-toolkit - toolkit for performing post-mortem analysis of Docker runtime environments
- eindeutig - Parse Outlook Express DBX files
- epub - Extract thumbnails and associated metadata from the Thumbs.db files
- fatback - Undelete files from FAT file systems
- fcrackzip - fcrackzip - a Free/Fast Zip Password Cracker
- femto - femto - indexing and search system for queries on sequences of bytes
- fmem-kernel-modules - Meta package for including all pre-compiled kernel modules for FMEM
- fmem-kernel-modules-common - This package contains the source code for making FMEM Modules
- fmem-kernel-modules-el5-i686 - This package contains all of the kernel objects for all of the kernels for CentOS 5 i686 for FMEM
- fmem-kernel-modules-el5-x86_64 - This package contains all of the kernel objects for all of the kernels for CentOS 5 x86_64 for FMEM
- fmem-kernel-modules-el6-i686 - This package contains all of the kernel objects for all of the kernels for CentOS 6 i686 for FMEM
- fmem-kernel-modules-el6-x86_64 - This package contains all of the kernel objects for all of the kernels for CentOS 6 x86_64 for FMEM
- fmem-kernel-modules-el7-x86_64 - This package contains all of the kernel objects for all of the kernels for CentOS 7 x86_64 for FMEM
- fmem-kernel-modules-el8-x86_64 - This package contains all of the kernel objects for all of the kernels for CentOS 8 x86_64 for FMEM
- fmem-kernel-modules-fc17-i686 - This package contains all of the kernel objects for all of the kernels for Fedora 17 i686 for FMEM
- fmem-kernel-modules-fc17-x86_64 - This package contains all of the kernel objects for all of the kernels for Fedora 17 x86_64 for FMEM
- fmem-kernel-modules-fc18-i686 - This package contains all of the kernel objects for all of the kernels for Fedora 18 i686 for FMEM
- fmem-kernel-modules-fc18-x86_64 - This package contains all of the kernel objects for all of the kernels for Fedora 18 x86_64 for FMEM
- fmem-kernel-modules-fc19-i686 - This package contains all of the kernel objects for all of the kernels for Fedora 19 i686 for FMEM
- fmem-kernel-modules-fc19-x86_64 - This package contains all of the kernel objects for all of the kernels for Fedora 19 i686 for FMEM
- fmem-kernel-modules-fc20-i686 - This package contains all of the kernel objects for all of the kernels for Fedora 20 i686 for FMEM
- fmem-kernel-modules-fc20-x86_64 - This package contains all of the kernel objects for all of the kernels for Fedora 20 i686 for FMEM
- fmem-kernel-modules-fc21-i686 - This package contains all of the kernel objects for all of the kernels for Fedora 21 i686 for FMEM
- fmem-kernel-modules-fc21-x86_64 - This package contains all of the kernel objects for all of the kernels for Fedora 21 x86_64 for FMEM
- fmem-kernel-modules-fc22-i686 - This package contains all of the kernel objects for all of the kernels for Fedora 22 i686 for FMEM
- fmem-kernel-modules-fc22-x86_64 - This package contains all of the kernel objects for all of the kernels for Fedora 22 x86_64 for FMEM
- fmem-kernel-modules-fc23-i686 - This package contains all of the kernel objects for all of the kernels for Fedora 23 i686 for FMEM
- fmem-kernel-modules-fc23-x86_64 - This package contains all of the kernel objects for all of the kernels for Fedora 23 x86_64 for FMEM
- fmem-kernel-modules-fc24-i686 - This package contains all of the kernel objects for all of the kernels for Fedora 24 i686 for FMEM
- fmem-kernel-modules-fc24-x86_64 - This package contains all of the kernel objects for all of the kernels for Fedora 24 x86_64 for FMEM
- fmem-kernel-modules-fc25-i686 - This package contains all of the kernel objects for all of the kernels for Fedora 25 i686 for FMEM
- fmem-kernel-modules-fc25-x86_64 - This package contains all of the kernel objects for all of the kernels for Fedora 25 x86_64 for FMEM
- fmem-kernel-modules-fc26-i686 - This package contains all of the kernel objects for all of the kernels for Fedora 26 i686 for FMEM
- fmem-kernel-modules-fc26-x86_64 - This package contains all of the kernel objects for all of the kernels for Fedora 26 x86_64 for FMEM
- fmem-kernel-modules-fc27-i686 - This package contains all of the kernel objects for all of the kernels for Fedora 27 i686 for FMEM
- fmem-kernel-modules-fc27-x86_64 - This package contains all of the kernel objects for all of the kernels for Fedora 27 x86_64 for FMEM
- fmem-kernel-modules-fc28-i686 - This package contains all of the kernel objects for all of the kernels for Fedora 28 i686 for FMEM
- fmem-kernel-modules-fc28-x86_64 - This package contains all of the kernel objects for all of the kernels for Fedora 28 x86_64 for FMEM
- fmem-kernel-modules-fc29-i686 - This package contains all of the kernel objects for all of the kernels for Fedora 29 i686 for FMEM
- fmem-kernel-modules-fc29-x86_64 - This package contains all of the kernel objects for all of the kernels for Fedora 29 x86_64 for FMEM
- fmem-kernel-modules-fc30-i686 - This package contains all of the kernel objects for all of the kernels for Fedora 30 i686 for FMEM
- fmem-kernel-modules-fc30-x86_64 - This package contains all of the kernel objects for all of the kernels for Fedora 30 x86_64 for FMEM
- fmem-kernel-modules-fc31-x86_64 - This package contains all of the kernel objects for all of the kernels for Fedora 31 x86_64 for FMEM
- fmem-kernel-modules-fc32-x86_64 - This package contains all of the kernel objects for all of the kernels for Fedora 32 x86_64 for FMEM
- fmem-kernel-modules-fc33-x86_64 - This package contains all of the kernel objects for all of the kernels for Fedora 33 x86_64 for FMEM
- fmem-kernel-modules-fc34-x86_64 - This package contains all of the kernel objects for all of the kernels for Fedora 34 x86_64 for FMEM
- fmem-kernel-modules-fc35-x86_64 - This package contains all of the kernel objects for all of the kernels for Fedora 35 x86_64 for FMEM
- fundl - A File UNDeLetion program built on top of the Sleuthkit
- galleta - Examine the contents of cookie files
- ghidra - ghidra - Software reverse engineering (SRE) suite of tools
- grokevt - Read and process Windows Event Files
- guymager - Imager for forensic media acquisition
- hachoir - Library for carving binary files
- libguytools - A small programming toolbox
- lime-kernel-modules - Meta package for including all pre-compiled kernel modules for LiME
- lime-kernel-modules-common - This package contains the source code for making LiME Modules
- lime-kernel-modules-el5-i686 - This package contains all of the kernel objects for all of the kernels for CentOS 5 i686 for LiME
- lime-kernel-modules-el5-x86_64 - This package contains all of the kernel objects for all of the kernels for CentOS 5 x86_64 for LiME
- lime-kernel-modules-el6-i686 - This package contains all of the kernel objects for all of the kernels for CentOS 6 i686 for LiME
- lime-kernel-modules-el6-x86_64 - This package contains all of the kernel objects for all of the kernels for CentOS 6 x86_64 for LiME
- lime-kernel-modules-el7-x86_64 - This package contains all of the kernel objects for all of the kernels for CentOS 7 x86_64 for LiME
- lime-kernel-modules-el8-x86_64 - This package contains all of the kernel objects for all of the kernels for CentOS 8 x86_64 for LiME
- lime-kernel-modules-fc17-i686 - This package contains all of the kernel objects for all of the kernels for Fedora 17 i686 for LiME
- lime-kernel-modules-fc17-x86_64 - This package contains all of the kernel objects for all of the kernels for Fedora 17 x86_64 for LiME
- lime-kernel-modules-fc18-i686 - This package contains all of the kernel objects for all of the kernels for Fedora 18 i686 for LiME
- lime-kernel-modules-fc18-x86_64 - This package contains all of the kernel objects for all of the kernels for Fedora 18 x86_64 for LiME
- lime-kernel-modules-fc19-i686 - This package contains all of the kernel objects for all of the kernels for Fedora 19 i686 for LiME
- lime-kernel-modules-fc19-x86_64 - This package contains all of the kernel objects for all of the kernels for Fedora 19 i686 for LiME
- lime-kernel-modules-fc20-i686 - This package contains all of the kernel objects for all of the kernels for Fedora 20 i686 for LiME
- lime-kernel-modules-fc20-x86_64 - This package contains all of the kernel objects for all of the kernels for Fedora 20 i686 for LiME
- lime-kernel-modules-fc21-i686 - This package contains all of the kernel objects for all of the kernels for Fedora 21 i686 for LiME
- lime-kernel-modules-fc21-x86_64 - This package contains all of the kernel objects for all of the kernels for Fedora 21 x86_64 for LiME
- lime-kernel-modules-fc22-i686 - This package contains all of the kernel objects for all of the kernels for Fedora 22 i686 for LiME
- lime-kernel-modules-fc22-x86_64 - This package contains all of the kernel objects for all of the kernels for Fedora 22 x86_64 for LiME
- lime-kernel-modules-fc23-i686 - This package contains all of the kernel objects for all of the kernels for Fedora 23 i686 for LiME
- lime-kernel-modules-fc23-x86_64 - This package contains all of the kernel objects for all of the kernels for Fedora 22 x86_64 for LiME
- lime-kernel-modules-fc24-i686 - This package contains all of the kernel objects for all of the kernels for Fedora 24 i686 for LiME
- lime-kernel-modules-fc24-x86_64 - This package contains all of the kernel objects for all of the kernels for Fedora 24 x86_64 for LiME
- lime-kernel-modules-fc25-i686 - This package contains all of the kernel objects for all of the kernels for Fedora 25 i686 for LiME
- lime-kernel-modules-fc25-x86_64 - This package contains all of the kernel objects for all of the kernels for Fedora 25 x86_64 for LiME
- lime-kernel-modules-fc26-i686 - This package contains all of the kernel objects for all of the kernels for Fedora 26 i686 for LiME
- lime-kernel-modules-fc26-x86_64 - This package contains all of the kernel objects for all of the kernels for Fedora 26 x86_64 for LiME
- lime-kernel-modules-fc27-i686 - This package contains all of the kernel objects for all of the kernels for Fedora 27 i686 for LiME
- lime-kernel-modules-fc27-x86_64 - This package contains all of the kernel objects for all of the kernels for Fedora 27 x86_64 for LiME
- lime-kernel-modules-fc28-i686 - This package contains all of the kernel objects for all of the kernels for Fedora 28 i686 for LiME
- lime-kernel-modules-fc28-x86_64 - This package contains all of the kernel objects for all of the kernels for Fedora 28 x86_64 for LiME
- lime-kernel-modules-fc29-i686 - This package contains all of the kernel objects for all of the kernels for Fedora 29 i686 for LiME
- lime-kernel-modules-fc29-x86_64 - This package contains all of the kernel objects for all of the kernels for Fedora 29 x86_64 for LiME
- lime-kernel-modules-fc30-i686 - This package contains all of the kernel objects for all of the kernels for Fedora 30 i686 for LiME
- lime-kernel-modules-fc30-x86_64 - This package contains all of the kernel objects for all of the kernels for Fedora 30 x86_64 for LiME
- lime-kernel-modules-fc31-x86_64 - This package contains all of the kernel objects for all of the kernels for Fedora 31 x86_64 for LiME
- lime-kernel-modules-fc32-x86_64 - This package contains all of the kernel objects for all of the kernels for Fedora 32 x86_64 for LiME
- lime-kernel-modules-fc33-x86_64 - This package contains all of the kernel objects for all of the kernels for Fedora 33 x86_64 for LiME
- lime-kernel-modules-fc34-x86_64 - This package contains all of the kernel objects for all of the kernels for Fedora 34 x86_64 for LiME
- lime-kernel-modules-fc35-x86_64 - This package contains all of the kernel objects for all of the kernels for Fedora 35 x86_64 for LiME
- mac_apt - Mac OS Artifact Parsing Tool
- missidentify - Find Win32 applications
- mount_ewf - mount files in Expert Witness Format using loopback file system
- mtftar - Translate an MTF stream to a TAR stream
- pasco - Reconstruct IE internet activity
- plaso - plaso - Python based back-end engine used by tools such as log2timeline for automatic creation of a super timelines
- ptfinder - Find processes and threads in a Windows memory dump
- python2-distorm3 - Binary stream disassembler library for Python2
- python3-distorm3 - Binary stream disassembler library for Python2
- python3-pytsk3 - Python bindings for the sleuthkit
- reglookup - Windows NT registry reader/lookup tool
- regripper - A Windows Registry data extraction and correlation tool
- regripper-plugins - Plugins for regripper
- rifiuti - Examine the contents of INFO2 in the Windows Recycle bin
- rifiuti2 - Examine the contents of INFO2 in the Windows Recycle bin
- scalpel - Fast file carver
- sfdumper - A Selective File Dumper program built on top of the Sleuthkit
- silk-ipa - silk-ipa - SiLK with the IPA Suite and PostgreSQL
- snort-sample-rules - Sample rules for snort
- undbx - undbx - Tool to extract, recover and undelete e-mail messages from Outlook Express .dbx files
- videosnarf - Output detected media sessions
- xplico - Internet traffic decoder and network forensic analysis tool
- xva-img - xva-img - Assemble Citrix XEN disk image