OSINT Tools

Wireshark

Network protocol analyzer

ALEAPP

Android forensic artefact parser

AccessData FTK

Exterro/AccessData FTK forensic platform

Andriller

Android device forensic acquisition toolkit

Apache Tika

Extract text and metadata from any document type

Autopsy DFIR

Open-source disk forensics toolkit

BANG (Binary Analysis Next Generation)

Recursive firmware unpacker

BR's EXIFextracter

Windows tool exporting photo EXIF metadata to CSV in bulk

Belkasoft Evidence Center X

Commercial DFIR acquisition and analysis suite

Binwalk

Firmware blob carving and analysis tool

Brim

Open desktop tool for PCAP and Zeek search

Bulk Extractor

High-speed disk-image artifact carver

C2PA Verify

Verify C2PA Content Credentials and provenance in media

CapLoader

Batch PCAP triage workstation

Cellebrite UFED

Cellebrite mobile-forensic acquisition platform

Checkov

Scan infrastructure-as-code for misconfigurations

DocumentCloud

Upload, OCR and full-text search primary-source documents used by newsrooms

EMBA

Embedded Linux firmware analyser

Exifinfo

Online EXIF and metadata viewer for images

Extract Metadata

Extract hidden metadata from files and images

FACT

Automated firmware-analysis platform

FOCA

Extract hidden metadata from an organization's public documents

Gephi

Open-source network graph visualization and link-analysis platform

Get-Metadata

View hidden EXIF and document metadata from an uploaded file