The best CAINE alternatives
The rest of Best Digital Forensics Software, in this site's order: each with what it costs, where it runs and its record score.
E3 suits corporate, law-enforcement, government, and consulting investigators handling digital evidence.
OSForensics suits investigators who need to collect, examine, organize, and report on computer evidence.
Plaso may suit digital forensic analysts who need to collect and examine event timelines from files, devices, storage images, or logs.
NetworkMiner suits incident response, law enforcement, and other users who need to inspect captured traffic or sniff live traffic.
Arkime suits network operators who need searchable session records and packet inspection in a self-hosted environment.
Triage-G2 is aimed at qualified organizations conducting sensitive-site digital evidence work, including military and intelligence users.
It suits government digital forensic laboratories, including federal law-enforcement agencies and state-level police departments.
FTK Imager suits forensic examiners, incident response and DFIR teams, law enforcement, and corporate security or HR investigators working with…
Hayabusa suits analysts investigating Windows event logs or hunting across endpoints.
The Sleuth Kit suits digital forensics practitioners and developers building tools that analyze disk images or file-system data.
Timesketch suits forensic teams analyzing timeline evidence collaboratively.
SIFT Workstation suits incident responders and forensic examiners who need tools for investigating files, network evidence, memory, and threat…
PALADIN suits forensic investigators working with disk images, local disks, logical files, and mobile or vehicle data.
It suits investigators and analysts performing memory forensics on Windows, macOS, or Linux images.
It suits forensic practitioners, incident responders, malware analysts, OSINT users, educators, and law-enforcement personnel.
Inseyets suits forensic examiners and investigators working with iOS, Android, mobile-app, cloud, and encrypted evidence.
