forensics

A free forensic utility for converting data found on desktop and mobile devices into human-readable timestamps.

Hindsight

Access Forensics is an advanced tool for MS Access database analysis, data preview and recovery as well as password recovery and protection removal.

Forensic file hasher — hashdeep for the modern era, BLAKE3 by default

Forensic disk analyzer — decode images & live devices, map partitions, flag anomalies

Read-only SQLite forensic CLI — carve deleted records, grade anomalies

Forensic timestamp decipherment - scored, cited, ambiguity-first

UndeleteOnClick can undelete files from any NTFS or FAT (exFAT, FAT 12, 16, 32) volume.

Open-source desktop workbench for digital forensic analysis