Digital Forensics & Incident Response — tools, resources, references
Curated index — updated continuously
Digital forensics and incident response tools, resources and references — searchable by artifact, evidence type and where the tool runs. Free, no login. Curated by dfir-rick.
↓ Or browse by where you are in the work
Where to start
Every tool has one home, filed by the area of work it belongs to — collection through reporting, then the reading and lab material around it. Tools that genuinely serve two areas are cross-listed. Pick a category to filter the full list below.
The full index
Search by artifact or format, then narrow by evidence type, where the tool runs, interface or cost. Pin what you use into sets and export them.
This index is built on work that others researched, wrote and gave away. Where an entry describes an artifact or a technique, the understanding behind it usually came from one of these people.
And to every author of the 1024 tools listed here. Each remains the property of its creator under its own licence. If your work is described wrongly, that is my error, not theirs.