afflib

Library that implements the AFF image standard

aide

AIDE (Advanced Intrusion Detection Environment) is a replacement for Tripwire

air

A GUI front-end to dd/dcfldd

autopsy

A graphical interface to the digital forensic analysis tools in The Sleuth Kit.

chkrootkit

a tool to locally check for signs of a rootkit

cmospwd

CmosPwd decrypts password stored in cmos used to access BIOS SETUP

examiner

Examiner is an application that utilizes the objdump command to disassemble and comment foreign executable binaries

foremost

A console program to recover files based on their headers and footers

galleta

IE Cookie Parser

libewf

Implementation of the EWF (SMART and EnCase) image format

lynis

Security and system auditing tool

mac-robber

mac-robber is a digital forensics and incident response tool that collects data

magicrescue

Find deleted files in block devices

memdump

Simple memory dumper for UNIX-Like systems

openscap

Framework which enables integration with the Security Content Automation Protocol (SCAP)

ovaldi

Free implementation of OVAL

pasco

IE Activity Parser

rdd

Rdd is a forensic copy program

rifiuti

Recycle Bin Analyzer

rkhunter

Rootkit Hunter scans for known and unknown rootkits, backdoors, and sniffers.

scalpel

A high performance file carver

sleuthkit

A collection of file system and media management forensic analysis tools

unhide

A forensic tool to find hidden processes and TCP/UDP ports by rootkits/LKMs or other technique.

yasat

Security and system auditing tool

zzuf

Transparent application input fuzzer

afflib

libewf

rdd

aide

lynis

rifiuti

air

mac-robber

rkhunter

autopsy

magicrescue

scalpel

chkrootkit

memdump

sleuthkit

cmospwd

openscap

unhide

examiner

ovaldi

yasat

foremost

pasco

zzuf

galleta