Digital Forensics

Volatility Workbench Portable Software is a graphical user interface (GUI) for the Volatility tool. Volatility is a command line memory analysis and forensics tool for extracting artifacts from memory dumps. Volatility Workbench is free, open source and runs in Windows. It provides a number of advantages over the command line version including.

FINALMobile Forensics Portable offers the most advanced data-carving tool for our forensic community. With our extensive knowledge of file systems and data patterns, FINALMobile can turn raw data into easy-to-understand data with a few simple clicks. Mobile devices store data in specific formats, and in many cases, the data is not erased. By searching for specific patterns, these hidden gems, “deleted entires,” are recoverable, along with the full scope of the “live” data.

Kinovea is a video player for sport analysis and suitable for any kind of video forensics analysis. It provides a set of tools to capture, slow down, study, compare, annotate and measure technical performances. Kinovea is organized around four core missions related to studying human motion: capture, observation, annotation and measurement.

OSFClone is a self-booting solution which enables you to create or clone exact raw disk images quickly and independent of the installed operating system. OSFClone is a self-booting solution which enables you to create or clone exact raw disk images quickly and independent of the installed operating system. In addition to raw disk images, OSFClone also supports imaging drives to the open Advance Forensics Format (AFF). AFF is an open and extensible format to store disk images and associated metadata.