👨‍⚕️Forensics

• Autopsy

• bulk-extractor

bulk_extractor

• Binwalk

binwalk -h

• Capstone

• chntpw

chntpw -h

• Chkrootkit

chkrootkit -h

• Cuckoo

cuckoo --help

• dc3dd

dc3dd --help

• ddrescue

dd_rescue -h

• DFF

dff -h

• diStorm3

• The Sleuth Kit

• Dumpzilla

dumpzilla

• extundelete

extundelete --help

• Foremost

foremost -h

• Galleta

galleta

• Guymager

guymager

• iPhone Backup Analyzer

iphone-backup-analyzer

• p0f

p0f -h

• pdf-parser

pdf-parser

• pdfid

pdfid -h

• pdgmail

pdgmail -h

• peepdf

peepdf -h

• RegRipper

regripper

• Strings

strings -h

• Volatility

volatility -h

• Xplico

xplico -h

• dcfldd

• missidentify

• readpst

• redlookup

• vinetto

• magicrescue

• pev

• recoverjpeg

• rifuiti

• rifuiti2

• safecopy

• scalpel

• scrounge-ntfs

• SIFT Workstation

• affcat

• ewfacquire

• The Sleuth Kit