Guymager
Create forensic disk images through a Linux graphical interface. This independent project publishes its source under GPLv2.
Visit the Guymager project ↗Independent open-source projects
Free Linux digital forensics tools.
A focused tool can be the right answer to a particular task. These independent projects publish free software, not a trial or a paid-upgrade edition.
Room to adapt
Add the tool your workflow needs.
The Acorn’s Linux environment gives you room to evaluate community software alongside its own apps. These links do not imply that every project is pre-installed or tested in every build.
GNU ddrescue
Copy readable data from a source with read errors and keep a mapfile so you can resume. Free software under GPLv2 or later.
Read the GNU project guide ↗ExifTool
Inspect metadata in photographs, documents and other files. Phil Harvey’s tool is available under Perl’s Artistic License or GPL.
Explore the ExifTool source ↗Independent projects, not SQFR applications or affiliate links. Free software still has licence terms. Check the project, dependencies and outputs before adding it to a case workflow.
Keep it repeatable
A useful addition starts with a known input.
Check the package source and version. Test against known material, keep the results and document where it fits your method.
-
Check the source
Use the project’s official download or repository. Review its licence, dependencies and maintenance history.
-
Use a working copy
Keep evidence protection in place. Some utilities can write to files as well as read them.
-
Check the result
Compare known answers, record versions and retain the command or settings used.
-
Share the method
Keep scripts, outputs and notes together so a colleague can repeat the work.