- ataraw - Linux user-level ATA raw command utility
- bloom - NPS Bloom filter package (includes frag_find)
- disktype - Detect the content format of a disk or disk image
- jafat - JAFAT is an assortment of tools to assist in the forensic investigation of computer systems.
- tln_tools - Timeline tools - Open Source code for Windows Forensic Analysis and Incident Response