The Open Source Digital Forensics site is a reference for the use of open source software in digital investigations (a.k.a. digital forensics, computer forensics, incident response). Open source tools may have a legal benefit over closed source tools because they have a documented procedure and allow the investigator to verify that a tool does what it claims.

• Tools
  • Unix-based
  • Windows-based
• Procedures
• Test Images and Procedures
• Research and Position Papers
• About This Site
• Listing Criteria and Submission Instructions

Latest Updates

• June 12, 2010: Added analyzeMFT, raw2FS, and SFDumper.
• April 8, 2010: Attend the Sleuth Kit and Open Source Digital Forensics Conference on June 9, 2010 in Chantilly, VA to learn more about open source tools.
• Mar 12, 2010: Added xmount, OpenGates, GuyMager, and log2timeline.
• Sept 19, 2009: Added Digital Forensic Framework, libforensics and NetworkMiner.
• April 15, 2009: Added gTableauParm.