As ferramentas que são referências em Computação Forense e outras que foram descobertas em pesquisas específicas. A grande maioria é para plataforma Windows, mas algumas são específicas para ambiente Linux.
Análise de ambiente Windows
LastActivityView – http://www.nirsoft.net/utils/computer_activity_view.htmlUSBDeview – http://www.nirsoft.net/utils/usb_devices_view.html
Registry Workshop – http://www.torchsoft.com/en/rw_information.html
Ultimate Forensics Outflow Win-UFO – http://win-ufo.org/downloads.shtml
PrefetchForensics – http://www.woanware.co.uk/forensics/prefetchforensics.html
Análise de emails
Kernel for Exchange Server Recovery – http://www.nucleustechnologies.com/Exchange-Server-Data-Recovery.html
Cálculo de Hash
MultiHasher – http://www.abelhadigital.com/multihasher
Captura e análise de rede
Wireshark – https://www.wireshark.org
Xplico – http://www.xplico.org
Carving Tools e Recuperação de Arquivos
Foremost – http://foremost.sourceforge.net
ReviveIT – https://github.com/libyal/reviveit
TestDisk and PhotoRec – http://www.cgsecurity.org/wiki/PhotoRec
Ontrack EasyRecovery – http://www.krollontrack.com/data-recovery/recovery-software
Dispositivos Móveis (smartphones)
MOBILedit! Forensic – http://www.mobiledit.com
Oxygen Forensic Suite – http://www.oxygen-forensic.com/en/products/oxygen-forensic-suite/features
Dump e Análise de Memória
Belkasoft Live RAM Capturer – https://belkasoft.com/en/ram-capturer
Memoryze – https://www.mandiant.com/resources/download/memoryze
Volatility – https://github.com/volatilityfoundation
Duplicação de mídia (bit a bit)
FTK Imager – http://accessdata.com/product-download/digital-forensics/ftk-imager-version-3.2.0
Emulador de Android
Genymotion – https://www.genymotion.com/#!/download
Inventário de PC hardware e software
Free PC Audit (standalone) – http://www.misutilities.com/free-pc-audit/index.html
Network Asset Tracker (network) – http://www.misutilities.com/network-asset-tracker/index.html
Plataforma de investigação
Autopsy – http://www.sleuthkit.org/autopsy
Belkasoft Evidence Center – https://belkasoft.com/en/ec
EnCase Forensic – https://www.guidancesoftware.com/products/Pages/encase-forensic/overview.aspx
Forensic Toolkit (FTK) – http://accessdata.com/solutions/digital-forensics/forensic-toolkit-ftk
OS Forensics – http://www.osforensics.com
Recuperação de Senhas
Passware Password Recovery Kit Forensic – http://www.lostpassword.com/kit-forensic.htm
