Forensics

Disk, memory, and metadata analysis

Volatility

Advanced memory forensics framework for analyzing RAM dumps.

Autopsy

Digital forensics platform with GUI on top of The Sleuth Kit.

exiftool

Read and write meta information in files — useful for OSINT on documents and images.

foremost

File carving tool to recover files based on headers and footers.