Desktop forensicsVersion 26.1.0
Thanatology
Bring cases, evidence processing, filesystem exploration and artefact analysis into one desktop workspace.
macOS · Windows · Linux
DownloadDocumentationOpensource Digital Forensics. Learn, Share, Investigate.
Open source software
Command-line tools13 modules
Exhume framework
Inspect disk images, discover partitions, parse filesystems and extract forensic data with tools you can combine.
macOS · Windows · Linux
DownloadDocumentationMemory analysisSelf-hosted
VolWeb
Process memory images and investigate processes, artefacts and their relationships in a shared web interface.
Powered by Volatility 3
Download sourceSetup guide