Autopsy

Forensicskali · parrot

Digital forensics platform with GUI on top of The Sleuth Kit.

Install

sudo apt install autopsy

autopsy

Use only on systems you are authorized to test. Follow program scope.

Volatility

Advanced memory forensics framework for analyzing RAM dumps.

exiftool

Read and write meta information in files — useful for OSINT on documents and images.

foremost

File carving tool to recover files based on headers and footers.