A curated collection of software and hardware tools commonly used in Digital Forensics & Incident Response (DFIR), Mobile Forensics, Memory Forensics, OSINT, Cryptocurrency Investigations, and Data Analytics.
| S.No | Tool | Category | Purpose |
|---|---|---|---|
| 1 | WinAudit | System Information | Acquire system summary from an active Windows computer |
| 2 | FTK Imager | Disk Forensics | Create forensic images of files/disks and calculate hash values |
| 3 | HashCalc | Hashing | Calculate hash values of files |
| 4 | Gizmo | Hashing | Calculate hash values of folders |
| 5 | ExifTool | Metadata Analysis | Display EXIF metadata of files |
| 6 | Kahoot! | Training | Interactive game-based quiz platform |
| 7 | Autopsy | Disk Forensics | Disk forensic investigation and analysis |
| 8 | Tableau Forensic Bridges | Hardware Forensics | Hardware disk cloning, imaging and hash calculation |
| 9 | Falcon-NEO | Hardware Forensics | Hardware disk cloning, imaging and hash calculation |
| 10 | Meiya Pico USB Bridge | Write Blocker | USB write blocker for forensic acquisition |
| 11 | WinHex | Disk Editor | Checksum calculation and secure drive wiping |
| 12 | FotoForensics | Image Forensics | Error Level Analysis (ELA) and image examination |
| 13 | TinEye | OSINT | Reverse image search |
| 14 | DumpIt | Memory Forensics | Collect RAM dump from Windows systems |
| 15 | OSFMount | Disk Mounting | Mount forensic images as read-only drives |
| 16 | UFADE | Mobile Forensics | iPhone forensic acquisition |
| 17 | Tor Browser | OSINT / Dark Web | Access Tor network |
| 18 | Microsoft Excel | Data Analytics | Data analysis and visualization |
| 19 | Microsoft Power BI Desktop | Big Data Analytics | Business intelligence visualization |
| 20 | Anaconda Distribution | Data Science / ML | Python distribution for data science and machine learning |
| 21 | Jupyter Notebook | Data Science / ML | Interactive notebooks for Python analysis |
| 22 | Google Colab | Data Science / ML / DL | Cloud-based Python notebooks |
| 23 | ChatGPT | Artificial Intelligence | AI-assisted investigation and report generation |
| 24 | Claude | Artificial Intelligence | AI-assisted analysis, automation, code generation and documentation |
| 25 | ActivePresenter | Documentation | Screen recording and training material creation |
| 26 | Hunchly | Web Investigation | Capture and document web evidence |
| 27 | Electrum | Cryptocurrency | Bitcoin wallet |
| 28 | Trust Wallet | Cryptocurrency | Cryptocurrency wallet |
| 29 | MetaMask | Cryptocurrency | Ethereum/Web3 wallet |
| 30 | Ledger | Cryptocurrency | Hardware cryptocurrency wallet |
| 31 | VLC Media Player | Multimedia Forensics | CCTV playback and enhancement |
| 32 | GIMP | Image Processing | Image enhancement and editing |
| 33 | Darktable | Image Processing | RAW image enhancement |
| 34 | Free Video to JPEG Converter | Multimedia Forensics | Extract JPEG frames from videos |
| 35 | Adobe Photoshop | Image Processing | Image enhancement and forensic visualization |
| 36 | scrcpy | Mobile Forensics | Mirror Android screen to computer |
| 37 | Avilla Forensics | Mobile Forensics | Android forensic acquisition |
| 38 | LonelyScreen | Mobile Forensics | Mirror iPhone screen to computer |
| 39 | Magnet Acquire | Mobile Forensics | Collect Data from the Mobile phone and Hard Disk |
| 40 | Cellebrite UFED | Mobile Forensics | Mobile device acquisition |
| 41 | Cellebrite Physical Analyzer | Mobile Forensics | Mobile dump analysis |
| 42 | Magnet AXIOM Examine | Mobile Forensics | Mobile and computer forensic examination |
| 43 | Volatility | Memory Forensics | RAM dump analysis |
| 44 | Bulk Extractor | Artifact Extraction | Extract forensic artifacts from disk images |
| 45 | Google Trends | OSINT / Trend Analysis | Analyze search trends and Keywords |
| 46 | Websays | OSINT | Keywords Generator |
| 47 | Buzzglobe | SOCMINT | TO identify same keyword/Username onto multiple platforms |
| 48 | UVRX | SOCMINT | TO identify same keyword/Username onto multiple platforms |
| 49 | Google Custom Search Engine | SOCMINT | Perform targeted searches across selected websites |
| 50 | Google Alerts | Alert Generation | Receive notifications for new content matching specified keywords |
| 51 | Imginn | SOCMINT | View Public Instagram Profiles without login |
| 52 | Sotwe | OSINT | View and analyze publicly available X (Twitter) content |
| 53 | Yandex Images | OSINT | Reverse Image Search |
| 54 | Bing Visual Search | OSINT | Reverse Image Search |
| 55 | TinEye | OSINT | Reverse Image Search |
| 56 | Ryno | OSINT | OSINT Search |
| 57 | Face1 | Facial Recognition | Perform face matching and facial recognition analysis |
| 58 | Talkwalker | Social Media Monitoring | Sentiment Analysis over Social media Platforms |
| 59 | Wayback Machine | Web Archive Analysis | View historical versions of websites and deleted content |
| 60 | EXIF Data Viewer | Metadata Analysis | Extract metadata from images |
- FTK Imager
- Autopsy
- WinHex
- OSFMount
- DumpIt
- Magnet Acquire
- Volatility
- UFADE
- Avilla Forensics
- Cellebrite UFED
- Cellebrite Physical Analyzer
- Magnet AXIOM Examine
- scrcpy
- LonelyScreen
- Tableau Forensic Bridges
- Falcon-NEO
- Meiya Pico USB Bridge
- ExifTool
- FotoForensics
- GIMP
- Darktable
- Adobe Photoshop
- VLC Media Player
- Free Video to JPEG Converter
- HashCalc
- Gizmo
- Electrum
- Trust Wallet
- MetaMask
- Ledger
- Microsoft Excel
- Microsoft Power BI Desktop
- Anaconda Distribution
- Jupyter Notebook
- Google Colab
- ChatGPT
- Claude
- TinEye
- Tor Browser
- Hunchly
- Google Trends
- Google Alerts
- Websays
- Buzzglobe
- Uvrx
- Google customizable Search engine
- Yandex reverse image search
- Tineye
- Bing
- Ryno
- Face1
- Talkwalker
- Wayback machine
- Exif data viewer
- Sotwe.com
- Imginn
- ActivePresenter
- Kahoot!
Contributions are welcome.
If you would like to add new forensic tools, improve descriptions, or fix inaccuracies, feel free to submit a Pull Request.
--Team CyberX
This repository is intended for educational and research purposes.