dff
Powerful, efficient and modular digital forensic framework
Install
- All systems
-
curl cmd.cat/dff.sh
- Debian
-
apt-get install dff
- Ubuntu
-
apt-get install dff
- Windows (WSL2)
-
sudo apt-get update
sudo apt-get install dff
- Raspbian
-
apt-get install dff
- Dockerfile
- dockerfile.run/dff
dff
Powerful, efficient and modular digital forensic framework
DFF is a powerful open source tool with a flexible module system which will help you in your digital forensics works, including files recovery due to error or crash, evidence research and analysis, etc. The modules allows you to examine the layout of disk images, devices and other media, to identify partitions, search for files using name, attributes, files magic etc. Files can also be analyzed or extracted using file analysis modules. The source code is written in C++ and Python, allowing performances and great extensibility, and provides both graphical and command line interface.