dff

Powerful, efficient and modular digital forensic framework

DFF is a powerful open source tool with a flexible module system which will help you in your digital forensics works, including files recovery due to error or crash, evidence research and analysis, etc. The modules allows you to examine the layout of disk images, devices and other media, to identify partitions, search for files using name, attributes, files magic etc. Files can also be analyzed or extracted using file analysis modules. The source code is written in C++ and Python, allowing performances and great extensibility, and provides both graphical and command line interface.