exiftool

Forensicskali · parrot

Read and write meta information in files — useful for OSINT on documents and images.

Install

sudo apt install libimage-exiftool-perl

exiftool image.jpg
exiftool -all= sensitive.pdf

Use only on systems you are authorized to test. Follow program scope.

Volatility

Advanced memory forensics framework for analyzing RAM dumps.

Autopsy

Digital forensics platform with GUI on top of The Sleuth Kit.

foremost

File carving tool to recover files based on headers and footers.