Disk Forensics

It deals with extracting data from storage media by searching active, modified, or deleted files.

NamePlatformLicenseDescription
Software Tools
AutopsyWindows, LinuxOpen sourceDigital forensics platform with a graphical interface for analyzing disk images and smartphones.
EnCase ForensicWindowsCommercialComprehensive forensic software that provides various analysis and recovery features for digital data.
Sleuth KitLinux, WindowsOpen sourceLibrary and collection of command-line digital forensic tools for analyzing disk images and volumes.
X-Ways ForensicsWindowsCommercialAdvanced software for computer forensics and data analysis, offering a wide range of powerful features.
Forensic Toolkit (FTK)WindowsCommercialDigital forensics software with advanced analysis, recovery, and visualization tools for forensic experts.
PaladinLinuxOpen sourceLive CD based on Ubuntu for digital forensics and incident response, bundled with various forensic tools.
Hardware Tools
Tableau Forensic BridgeWindows,macOS,  LinuxCommercialPortable write-blocking hardware device for connecting hard drives to forensic workstations safely.
WiebeTech Drive eRazerWindows, macOSCommercialStandalone hardware solution for securely erasing hard drives and solid-state drives for forensic purposes.
Logicube Forensic DossierWindowsCommercialCompact, high-speed hardware write-blocker and disk duplicator for forensic imaging and analysis tasks.
CRU WiebeTech Ditto ForensicWindowsCommercialHardware write-blocker and disk duplicator designed for forensic professionals to image and verify data.
DeepSpar Disk ImagerWindowsCommercialSpecialized hardware imager with advanced features for imaging damaged or failing hard drives efficiently.
Voom HardCopy 3PWindowsCommercialPortable hardware write-blocker with triage capabilities, allowing forensic experts to analyze devices on-site.