| Serial Number | Tool Name | Hyperlink |
|---|---|---|
| 1 | FTK Imager | FTK Imager |
| 2 | dd for Windows | dd for Windows |
| 3 | Autopsy | Autopsy |
| 4 | The Sleuth Kit | The Sleuth Kit |
| 5 | Exif Tool Phil Harvey | Exif Tool Phil Harvey |
| 6 | Hashmyfiles | Hashmyfiles |
| 7 | Magnet Dumpit | Magnet Dumpit |
| 8 | Registry Explorer | Registry Explorer |
| 9 | Yet Another Registry Utility (yaru) | Yaru |
| 10 | Windows Registry Recovery | Windows Registry Recovery |
| 11 | Shellbags Explorer | Shellbags Explorer |
| 12 | Timeline Explorer | Timeline Explorer |
| 13 | Shadow Explorer | Shadow Explorer |
| 14 | DCODE | DCODE |
| 15 | Hashcal | Hashcal |
| 16 | HxD | HxD |
| 17 | LECmd | LECmd |
| 18 | JumpList Explorer | JumpList Explorer |
| 19 | RBCmd | RBCmd |
| 20 | Volatility | Volatility |
| 21 | LogonSessions | LogonSessions |
| 22 | Sysinternals | Sysinternals |
| 23 | Event Log Explorer | Event Log Explorer |
| 24 | Kape | Kape |
| 25 | RegRipper | RegRipper |
| 26 | Wireshark | Wireshark |
| 27 | Nmap | Nmap |
| 28 | NetworkMiner | NetworkMiner |
| 29 | Snort | Snort |
| 30 | Pentbox | Pentbox |
| 31 | Networktrafficview | Networktrafficview |
| 32 | Wireless Network Watcher | Wireless Network Watcher |
| 33 | Emailtrackerpro | Emailtrackerpro |
| 34 | OutlookAttachView | OutlookAttachView |
| 35 | PstPassword | PstPassword |
| 36 | BrowsingHistoryView | BrowsingHistoryView |
| 37 | ChromeCacheView | ChromeCacheView |
| 38 | MZCacheView | MZCacheView |
| 39 | SafariHistoryView | SafariHistoryView |
| 40 | SafariCacheView | SafariCacheView |
| 41 | WebSiteSniffer | WebSiteSniffer |
| 42 | USBDeview | USBDeview |
| 43 | USBDriveLog | USBDriveLog |
| 44 | Genymotion | Genymotion |
| 45 | DB Browser for SQLite | DB Browser for SQLite |
| 46 | Frida | Frida |
| 47 | Drozer | Drozer |
| 48 | Apk Easy Tool | Apk Easy Tool |
| 49 | MobSF | MobSF |
| 50 | Platform-tools | Platform-tools |
Digital Forensics Tools
This post is licensed under CC BY 4.0 by the author.

Ericzimmerman Tools | Windows Forensics