Autopsy® is a digital forensics platform and graphical interface to The Sleuth Kit® and other digital forensics tools. It can be used by law enforcement, military, and corporate examiners to investigate what happened on a computer.




Rekall is described as 'The most complete Memory Analysis framework. Rekall provides an end-to-end solution to incident responders and forensic analysts. From state of the art acquisition tools, to the most advanced open source memory analysis framework' and is an app. There are three alternatives to Rekall for Windows, Linux and Mac. The best Rekall alternative is Autopsy Forensic Browser, which is both free and Open Source. Other great apps like Rekall are PassMark OSForensics and Volatility.
Autopsy® is a digital forensics platform and graphical interface to The Sleuth Kit® and other digital forensics tools. It can be used by law enforcement, military, and corporate examiners to investigate what happened on a computer.




OSForensics lets you discover all relevant forensic evidence from a system, quickly and easily.




Volatility is the open source memory forensics framework for incident response and malware analysis.