- ataraw - Linux user-level ATA raw command utility
- bulk_extractor - bulk_extractor is a C++ program that scans a disk image, a file, or a directory of files and extracts useful information
- disktype - Detect the content format of a disk or disk image
- jafat - JAFAT is an assortment of tools to assist in the forensic investigation of computer systems.
- tln_tools - Timeline tools - Open Source code for Windows Forensic Analysis and Incident Response