The best X-Ways Imager alternatives

E3 suits corporate, law-enforcement, government, and consulting investigators handling digital evidence.

OSForensics suits investigators who need to collect, examine, organize, and report on computer evidence.

Plaso may suit digital forensic analysts who need to collect and examine event timelines from files, devices, storage images, or logs.

CAINE suits investigators who need a Linux-based environment for digital forensic work, including disk, memory and mobile forensics.

NetworkMiner suits incident response, law enforcement, and other users who need to inspect captured traffic or sniff live traffic.

Arkime suits network operators who need searchable session records and packet inspection in a self-hosted environment.

Triage-G2 is aimed at qualified organizations conducting sensitive-site digital evidence work, including military and intelligence users.

It suits government digital forensic laboratories, including federal law-enforcement agencies and state-level police departments.

FTK Imager suits forensic examiners, incident response and DFIR teams, law enforcement, and corporate security or HR investigators working with…

Hayabusa suits analysts investigating Windows event logs or hunting across endpoints.

PALADIN suits forensic investigators working with disk images, local disks, logical files, and mobile or vehicle data.

The Sleuth Kit suits digital forensics practitioners and developers building tools that analyze disk images or file-system data.

Timesketch suits forensic teams analyzing timeline evidence collaboratively.

SIFT Workstation suits incident responders and forensic examiners who need tools for investigating files, network evidence, memory, and threat…

It suits investigators and analysts performing memory forensics on Windows, macOS, or Linux images.

It suits forensic practitioners, incident responders, malware analysts, OSINT users, educators, and law-enforcement personnel.

Guymager suits Linux users who need to acquire or clone storage devices and removable media for forensic work.

Inseyets suits forensic examiners and investigators working with iOS, Android, mobile-app, cloud, and encrypted evidence.

XRY is aimed at forensic specialists, frontline users, and team managers conducting mobile-device investigations.