Autopsy® is a digital forensics platform and graphical interface to The Sleuth Kit® and other digital forensics tools. It can be used by law enforcement, military, and corporate examiners to investigate what happened on a computer.




Volatility is described as 'The open source memory forensics framework for incident response and malware analysis' and is an app. There are four alternatives to Volatility for Linux, Mac and Windows. The best Volatility alternative is Autopsy Forensic Browser, which is both free and Open Source. Other great apps like Volatility are Caine, Rekall and Cado Live.
Autopsy® is a digital forensics platform and graphical interface to The Sleuth Kit® and other digital forensics tools. It can be used by law enforcement, military, and corporate examiners to investigate what happened on a computer.




CAINE Computer Aided INvestigative Environment Live CD/DVD, computer forensics, digital forensics

Rekall is the most complete Memory Analysis framework. Rekall provides an end-to-end solution to incident responders and forensic analysts. From state of the art acquisition tools, to the most advanced open source memory analysis framework.
Cado Live is a free bootable USB image to image disks to cloud storage such as AWS, Azure and Google Cloud.


