Digler is a tool for forensic disk analysis and file recovery. It's designed to help you unearth lost or deleted data from various disk images and raw devices.

Collection of popular DFIR tools in a lightweight and fast docker image

This package analyzes file entropy (shannon entropy) for forensic and malware analysis.

Python-based parser for analyzing FAT32 filesystems

A powerful and user-friendly GUI tool for digital forensics investigations. InvestiGUI streamlines the investigative workflow by providing modules for memory analysis, disk examination, artifact extraction, and reporting—all within an intuitive interface. Ideal for cybersecurity professionals, students, and incident responders

基于Go开发的WebUI应用，提供磁盘扫描和数据分析功能，帮助用户高效管理和分析存储数据。A WebUI application developed based on Go that provides disk scanning and data analysis functions to help users efficiently manage and analyze storage data.

Collection of DFIR tools incirporated all in one docker image

fat32 & ext4 parser

FAT32 & EXT filesystem parser.

A local-first, open-source desktop organization platform that helps you understand, organize, search, and manage every file on your computer.

A high-performance digital forensic tool that uses C++ multithreading to analyze disk images in parallel. Features a Thread Pool backend for efficiency and a Python Streamlit dashboard for real-time visualization.

High-performance native NTFS Master File Table (MFT) indexing engine written in C++, designed to power ultra-fast file searching applications.

Practical forensic recovery cases involving MBR repair, GPT reconstruction, partition recovery, and file evidence validation using hex analysis and FTK Imager.

A Windows desktop utility for visualizing folder structures and analyzing disk usage.

NTFSInfo - Sysinternals

Schema-driven Python audit tool for inspecting, validating, duplicate detection using Sha256 and exporting real-world data.

宝塔 Linux 面板只读服务器硬盘分析工具

Read, Repair, Optimize, Visualize, and Transfer files on D64 disk images used by the Commodore 64 1541 Drive

OpenedFilesView – A utility to monitor and manage open files on Windows systems with advanced filtering options.

ActiveSMART – Professional hard drive health monitoring and system diagnostics utility for Windows with real-time alerts.