General Purpose Forensics Software

Content Leader: Jess Garcia - Last Updated: May 20, 2007

Commercial

• EnCase Forensic Edition - Guidance Software
• Forensic Toolkit (FTK) - Access Data
• SMART
• P2/P3 Examination Process - Paraben
• Davory - X-Ways - Limited Free Version Available
• Computer Incident Response Suite
• Data Elimination Suite
• Foundstone Forensic ToolKit
• Image Buster Suite
• Maresware: Computer Forensics - Data Analysis - Linux Forensics - The Suite
• ProDiscover - Technology Pathways
• Gargoyle
• Mercury
• Windows NT/XP Forensic Utility Suite
• Advanced Password Recovery Software Tool Kit
• MANDIANT First Response
  Provides the ability to remotely collect the volatile data, file lists, registry information, event logs, running processes, running services, file time/date stamps

Free

• The Sleuth Kit
• Autopsy
• PyFLAG - Python Forensic and Log Analysis GUI
• Forensic Server Project (FSP)
• George Garner's Acquisition Tools for Windows
• The Coroner's Toolkit (TCT)
• TULP2G

Other References

You may find a some other tools referenced at:

• forensics.nl.
• http://www.securityforest.com/wiki/index.php/Category:Computer_Forensics