applications/forensics tools
- 2hash - Simultaneously perform an MD5 and SHA1 checksum on files
- BEViewer - BEViewer - GUI for bulk_extractor
- CERT-Forensics-Tools - Meta package that includes all of the CERT Forensics Tools
- DropboxReader - DropboxReader
- Volatility - Tools for the extraction of digital artifacts from volatile memory (RAM) images
- Volatility-community-plugins - Volatility-community-plugins
- analyzeMFT - analyzeMFT
- cryptcat - Netcat with encryption
- ddrutility - ddrutility - Utility for use with gnuddrescue to aid with data recovery
- dff - dff - open source digital investigation framework
- distorm3 - distorm3 - binary stream disassembler library
- eindeutig - Parse Outlook Express DBX files
- epub - Extract thumbnails and associated metadata from the Thumbs.db files
- fatback - Undelete files from FAT file systems
- fcrackzip - fcrackzip - a Free/Fast Zip Password Cracker
- fiwalk - fiwalk - find and extract files of a given type
- fmem-kernel-modules - Meta package for including all pre-compiled kernel modules for FMEM
- fmem-kernel-modules-common - This package contains the source code for making FMEM Modules
- fmem-kernel-modules-el5-i686 - This package contains all of the kernel objects for all of the kernels for CentOS 5 i686 for FMEM
- fmem-kernel-modules-el5-x86_64 - This package contains all of the kernel objects for all of the kernels for CentOS 5 x86_64 for FMEM
- fmem-kernel-modules-el6-i686 - This package contains all of the kernel objects for all of the kernels for CentOS 6 i686 for FMEM
- fmem-kernel-modules-el6-x86_64 - This package contains all of the kernel objects for all of the kernels for CentOS 6 x86_64 for FMEM
- fmem-kernel-modules-el7-x86_64 - This package contains all of the kernel objects for all of the kernels for CentOS 7 x86_64 for FMEM
- fmem-kernel-modules-el8-x86_64 - This package contains all of the kernel objects for all of the kernels for CentOS 8 x86_64 for FMEM
- fmem-kernel-modules-el9-aarch64 - This package contains all of the kernel objects for all of the kernels for CentOS 9 Stream aarch64 for FMEM
- fmem-kernel-modules-el9-x86_64 - This package contains all of the kernel objects for all of the kernels for CentOS 9 Stream x86_64 for FMEM
- fmem-kernel-modules-fc17-i686 - This package contains all of the kernel objects for all of the kernels for Fedora 17 i686 for FMEM
- fmem-kernel-modules-fc17-x86_64 - This package contains all of the kernel objects for all of the kernels for Fedora 17 x86_64 for FMEM
- fmem-kernel-modules-fc18-i686 - This package contains all of the kernel objects for all of the kernels for Fedora 18 i686 for FMEM
- fmem-kernel-modules-fc18-x86_64 - This package contains all of the kernel objects for all of the kernels for Fedora 18 x86_64 for FMEM
- fmem-kernel-modules-fc19-i686 - This package contains all of the kernel objects for all of the kernels for Fedora 19 i686 for FMEM
- fmem-kernel-modules-fc19-x86_64 - This package contains all of the kernel objects for all of the kernels for Fedora 19 i686 for FMEM
- fmem-kernel-modules-fc20-i686 - This package contains all of the kernel objects for all of the kernels for Fedora 20 i686 for FMEM
- fmem-kernel-modules-fc20-x86_64 - This package contains all of the kernel objects for all of the kernels for Fedora 20 i686 for FMEM
- fmem-kernel-modules-fc21-i686 - This package contains all of the kernel objects for all of the kernels for Fedora 21 i686 for FMEM
- fmem-kernel-modules-fc21-x86_64 - This package contains all of the kernel objects for all of the kernels for Fedora 21 x86_64 for FMEM
- fmem-kernel-modules-fc22-i686 - This package contains all of the kernel objects for all of the kernels for Fedora 22 i686 for FMEM
- fmem-kernel-modules-fc22-x86_64 - This package contains all of the kernel objects for all of the kernels for Fedora 22 x86_64 for FMEM
- fmem-kernel-modules-fc23-i686 - This package contains all of the kernel objects for all of the kernels for Fedora 23 i686 for FMEM
- fmem-kernel-modules-fc23-x86_64 - This package contains all of the kernel objects for all of the kernels for Fedora 23 x86_64 for FMEM
- fmem-kernel-modules-fc24-i686 - This package contains all of the kernel objects for all of the kernels for Fedora 24 i686 for FMEM
- fmem-kernel-modules-fc24-x86_64 - This package contains all of the kernel objects for all of the kernels for Fedora 24 x86_64 for FMEM
- fmem-kernel-modules-fc25-i686 - This package contains all of the kernel objects for all of the kernels for Fedora 25 i686 for FMEM
- fmem-kernel-modules-fc25-x86_64 - This package contains all of the kernel objects for all of the kernels for Fedora 25 x86_64 for FMEM
- fmem-kernel-modules-fc26-i686 - This package contains all of the kernel objects for all of the kernels for Fedora 26 i686 for FMEM
- fmem-kernel-modules-fc26-x86_64 - This package contains all of the kernel objects for all of the kernels for Fedora 26 x86_64 for FMEM
- fmem-kernel-modules-fc27-i686 - This package contains all of the kernel objects for all of the kernels for Fedora 27 i686 for FMEM
- fmem-kernel-modules-fc27-x86_64 - This package contains all of the kernel objects for all of the kernels for Fedora 27 x86_64 for FMEM
- fmem-kernel-modules-fc28-i686 - This package contains all of the kernel objects for all of the kernels for Fedora 28 i686 for FMEM
- fmem-kernel-modules-fc28-x86_64 - This package contains all of the kernel objects for all of the kernels for Fedora 28 x86_64 for FMEM
- fmem-kernel-modules-fc29-i686 - This package contains all of the kernel objects for all of the kernels for Fedora 29 i686 for FMEM
- fmem-kernel-modules-fc29-x86_64 - This package contains all of the kernel objects for all of the kernels for Fedora 29 x86_64 for FMEM
- fmem-kernel-modules-fc30-i686 - This package contains all of the kernel objects for all of the kernels for Fedora 30 i686 for FMEM
- fmem-kernel-modules-fc30-x86_64 - This package contains all of the kernel objects for all of the kernels for Fedora 30 x86_64 for FMEM
- fmem-kernel-modules-fc31-x86_64 - This package contains all of the kernel objects for all of the kernels for Fedora 31 x86_64 for FMEM
- fmem-kernel-modules-fc32-x86_64 - This package contains all of the kernel objects for all of the kernels for Fedora 32 x86_64 for FMEM
- fmem-kernel-modules-fc33-x86_64 - This package contains all of the kernel objects for all of the kernels for Fedora 33 x86_64 for FMEM
- fmem-kernel-modules-fc34-x86_64 - This package contains all of the kernel objects for all of the kernels for Fedora 34 x86_64 for FMEM
- fmem-kernel-modules-fc35-x86_64 - This package contains all of the kernel objects for all of the kernels for Fedora 35 x86_64 for FMEM
- fmem-kernel-modules-fc36-x86_64 - This package contains all of the kernel objects for all of the kernels for Fedora 36 x86_64 for FMEM
- fmem-kernel-modules-fc37-x86_64 - This package contains all of the kernel objects for all of the kernels for Fedora 37 x86_64 for FMEM
- fmem-kernel-modules-fc38-x86_64 - This package contains all of the kernel objects for all of the kernels for Fedora 38 x86_64 for FMEM
- fmem-kernel-objects - This package contains all of the kernel objects for all of the kernels for the currently supported versions of Fedora in the CERT Linux Repository.
- fred - Microsoft registry hive editor
- fundl - A File UNDeLetion program built on top of the Sleuthkit
- fuseext2 - File System in User Space - Module for ext2
- galleta - Examine the contents of cookie files
- ghostpdl - Artifex Software's implementation of the PCL-5™ and PCL-XL™ family of page description languages
- grokevt - Read and process Windows Event Files
- guymager - Imager for forensic media acquisition
- hachoir-core - Library for carving binary files
- hachoir-metadata - Extracts metadata from multimedia files
- hachoir-parser - File format parser fo hachoir suite
- hachoir-regex - A Python library for regular expression (regex or regexp) manupulation
- hachoir-subfile - A tool based on hachoir-parser to find subfiles in any binary stream
- hachoir-urwid - A binary file explorer based on Hachoir library to parse the files
- hachoir-wx - A wxWidgets-based program that provides a user-friendly interface to hachoir-parser
- kracked - kracked - create word lists from files
- libguytools - A small programming toolbox
- libpff - Library to to access the Personal Folder File (PFF) and the Offline Folder File (OFF) format. PFF is used in PAB (Personal Address Book), PST (Personal Storage Table) and OST (Offline Storage Table) files.
- lime-kernel-modules - Meta package for including all pre-compiled kernel modules for LiME
- lime-kernel-modules-common - This package contains the source code for making LiME Modules
- lime-kernel-modules-el5-i686 - This package contains all of the kernel objects for all of the kernels for CentOS 5 i686 for LiME
- lime-kernel-modules-el5-x86_64 - This package contains all of the kernel objects for all of the kernels for CentOS 5 x86_64 for LiME
- lime-kernel-modules-el6-i686 - This package contains all of the kernel objects for all of the kernels for CentOS 6 i686 for LiME
- lime-kernel-modules-el6-x86_64 - This package contains all of the kernel objects for all of the kernels for CentOS 6 x86_64 for LiME
- lime-kernel-modules-el7-x86_64 - This package contains all of the kernel objects for all of the kernels for CentOS 7 x86_64 for LiME
- lime-kernel-modules-el8-x86_64 - This package contains all of the kernel objects for all of the kernels for CentOS 8 x86_64 for LiME
- lime-kernel-modules-el9-aarch64 - This package contains all of the kernel objects for all of the kernels for CentOS 9 Stream aarch64 for LiME
- lime-kernel-modules-el9-x86_64 - This package contains all of the kernel objects for all of the kernels for CentOS 9 Stream x86_64 for LiME
- lime-kernel-modules-fc17-i686 - This package contains all of the kernel objects for all of the kernels for Fedora 17 i686 for LiME
- lime-kernel-modules-fc17-x86_64 - This package contains all of the kernel objects for all of the kernels for Fedora 17 x86_64 for LiME
- lime-kernel-modules-fc18-i686 - This package contains all of the kernel objects for all of the kernels for Fedora 18 i686 for LiME
- lime-kernel-modules-fc18-x86_64 - This package contains all of the kernel objects for all of the kernels for Fedora 18 x86_64 for LiME
- lime-kernel-modules-fc19-i686 - This package contains all of the kernel objects for all of the kernels for Fedora 19 i686 for LiME
- lime-kernel-modules-fc19-x86_64 - This package contains all of the kernel objects for all of the kernels for Fedora 19 i686 for LiME
- lime-kernel-modules-fc20-i686 - This package contains all of the kernel objects for all of the kernels for Fedora 20 i686 for LiME
- lime-kernel-modules-fc20-x86_64 - This package contains all of the kernel objects for all of the kernels for Fedora 20 i686 for LiME
- lime-kernel-modules-fc21-i686 - This package contains all of the kernel objects for all of the kernels for Fedora 21 i686 for LiME
- lime-kernel-modules-fc21-x86_64 - This package contains all of the kernel objects for all of the kernels for Fedora 21 x86_64 for LiME
- lime-kernel-modules-fc22-i686 - This package contains all of the kernel objects for all of the kernels for Fedora 22 i686 for LiME
- lime-kernel-modules-fc22-x86_64 - This package contains all of the kernel objects for all of the kernels for Fedora 22 x86_64 for LiME
- lime-kernel-modules-fc23-i686 - This package contains all of the kernel objects for all of the kernels for Fedora 23 i686 for LiME
- lime-kernel-modules-fc23-x86_64 - This package contains all of the kernel objects for all of the kernels for Fedora 22 x86_64 for LiME
- lime-kernel-modules-fc24-i686 - This package contains all of the kernel objects for all of the kernels for Fedora 24 i686 for LiME
- lime-kernel-modules-fc24-x86_64 - This package contains all of the kernel objects for all of the kernels for Fedora 24 x86_64 for LiME
- lime-kernel-modules-fc25-i686 - This package contains all of the kernel objects for all of the kernels for Fedora 25 i686 for LiME
- lime-kernel-modules-fc25-x86_64 - This package contains all of the kernel objects for all of the kernels for Fedora 25 x86_64 for LiME
- lime-kernel-modules-fc26-i686 - This package contains all of the kernel objects for all of the kernels for Fedora 26 i686 for LiME
- lime-kernel-modules-fc26-x86_64 - This package contains all of the kernel objects for all of the kernels for Fedora 26 x86_64 for LiME
- lime-kernel-modules-fc27-i686 - This package contains all of the kernel objects for all of the kernels for Fedora 27 i686 for LiME
- lime-kernel-modules-fc27-x86_64 - This package contains all of the kernel objects for all of the kernels for Fedora 27 x86_64 for LiME
- lime-kernel-modules-fc28-i686 - This package contains all of the kernel objects for all of the kernels for Fedora 28 i686 for LiME
- lime-kernel-modules-fc28-x86_64 - This package contains all of the kernel objects for all of the kernels for Fedora 28 x86_64 for LiME
- lime-kernel-modules-fc29-i686 - This package contains all of the kernel objects for all of the kernels for Fedora 29 i686 for LiME
- lime-kernel-modules-fc29-x86_64 - This package contains all of the kernel objects for all of the kernels for Fedora 29 x86_64 for LiME
- lime-kernel-modules-fc30-i686 - This package contains all of the kernel objects for all of the kernels for Fedora 30 i686 for LiME
- lime-kernel-modules-fc30-x86_64 - This package contains all of the kernel objects for all of the kernels for Fedora 30 x86_64 for LiME
- lime-kernel-modules-fc31-x86_64 - This package contains all of the kernel objects for all of the kernels for Fedora 31 x86_64 for LiME
- lime-kernel-modules-fc32-x86_64 - This package contains all of the kernel objects for all of the kernels for Fedora 32 x86_64 for LiME
- lime-kernel-modules-fc33-x86_64 - This package contains all of the kernel objects for all of the kernels for Fedora 33 x86_64 for LiME
- lime-kernel-modules-fc34-x86_64 - This package contains all of the kernel objects for all of the kernels for Fedora 34 x86_64 for LiME
- lime-kernel-modules-fc35-x86_64 - This package contains all of the kernel objects for all of the kernels for Fedora 35 x86_64 for LiME
- lime-kernel-modules-fc36-x86_64 - This package contains all of the kernel objects for all of the kernels for Fedora 36 x86_64 for LiME
- lime-kernel-modules-fc37-x86_64 - This package contains all of the kernel objects for all of the kernels for Fedora 37 x86_64 for LiME
- lime-kernel-modules-fc38-x86_64 - This package contains all of the kernel objects for all of the kernels for Fedora 38 x86_64 for LiME
- lime-kernel-objects - This package contains all of the kernel objects for all of the kernels for the currently supported versions of Fedora in the CERT Linux Repository.
- md5deep - Programs to compute MD5, SHA-1, or SHA-256 message digests on files
- missidentify - Find Win32 applications
- mount_ewf - mount files in Expert Witness Format using loopback file system
- nDPI - Open source deep packet inspection
- pasco - Reconstruct IE internet activity
- plaso - plaso - a Python based back-end engine used by tools such as log2timeline for automatic creation of a super timelines
- ptfinder - Find processes and threads in a Windows memory dump
- ptk - An alternative advanced interface for the suite TSK (The SleuthKit)
- pyew - Python tool for malware analysis
- python-rarfile - python-rarfile - RAR archive reader for Python
- python-xlwt - python-xlwk - a library to generate spreadsheet files compatible with Microsoft Excel versions 95 to 2003
- pytsk - pytsk - Python binding for The Sleuth Kit
- registrydecoder - registrydecoder - automates acquisition, analysis, and reporting of Microsoft Windows registry contents.
- reglookup - Windows NT registry reader/lookup tool
- regripper - A Windows Registry data extraction and correlation tool
- regripper-plugins - Plugins for regripper
- rifiuti - Examine the contents of INFO2 in the Windows Recycle bin
- rifiuti2 - Examine the contents of INFO2 in the Windows Recycle bin
- sfdumper - A Selective File Dumper program built on top of the Sleuthkit
- silk-ipa - silk-ipa - SiLK with the IPA Suite and PostgreSQL
- snort-sample-rules - Sample rules for snort
- ssdeep - Computes a checksum based on context triggered piecewise hashes
- undbx - undbx - Tool to extract, recover and undelete e-mail messages from Outlook Express .dbx files
- videosnarf - Output detected media sessions
- vinetto - Extract thumbnails and associated metadata from the Thumbs.db files
- xplico - Internet traffic decoder and network forensic analysis tool
- yara - yara - find files matching patterns and rules written in a special-purpose language
- yara-python - yara-python - Python extension that gives access to YARA from Python scripts