Alternatives and similar repositories for scalpel:

Users that are interested in scalpel are comparing it to the libraries listed below

• sleuthkit / sleuthkit
  The Sleuth Kit® (TSK) is a library and collection of command line digital forensics tools that allow you to investigate volume and file s…
  ☆2,719Updated this week
• simsong / bulk_extractor
  This is the development tree. Production downloads are at:
  ☆1,162Updated last week
• libyal / libewf
  Libewf is a library to access the Expert Witness Compression Format (EWF)
  ☆271Updated 5 months ago
• vitaly-kamluk / bitscout
  Remote forensics meta tool
  ☆466Updated 8 months ago
• msuhanov / Linux-write-blocker
  The kernel patch and userspace tools to enable Linux software write blocking
  ☆139Updated 4 years ago
• arxsys / dff
  DFF (Digital Forensics Framework) is a Forensics Framework coming with command line and graphical interfaces. DFF can be used to investig…
  ☆281Updated 5 years ago
• teamdfir / sift
  SIFT
  ☆500Updated last year
• korczis / foremost
  Foremost is a console program to recover files based on their headers, footers, and internal data structures. This process is commonly re…
  ☆323Updated last year
• log2timeline / plaso
  Super timeline all the things
  ☆1,784Updated last month
• google / rekall
  Rekall Memory Forensic Framework
  ☆1,940Updated 4 years ago
• halpomeranz / lmg
  Script for automating Linux memory capture and analysis
  ☆268Updated 5 years ago
• viper-framework / viper
  Binary analysis and management framework
  ☆1,544Updated last year
• sleuthkit / autopsy
  Autopsy® is a digital forensics platform and graphical interface to The Sleuth Kit® and other digital forensics tools. It can be used by …
  ☆2,539Updated 3 weeks ago
• markmckinnon / Autopsy-Plugins
  Autopsy Python Plugins
  ☆344Updated 11 months ago
• rowingdude / analyzeMFT
  analyzeMFT.py is designed to fully parse the MFT file from an NTFS filesystem and present the results as accurately as possible in multip…
  ☆461Updated 4 months ago
• bammv / sguil
  Sguil client for NSM
  ☆215Updated 11 months ago
• buffer / thug
  Python low-interaction honeyclient
  ☆1,004Updated this week
• volatilityfoundation / community
  Volatility plugins developed and maintained by the community
  ☆354Updated 3 years ago
• jesparza / peepdf
  Powerful Python tool to analyze PDF documents
  ☆1,335Updated 6 months ago
• Tripwire / tripwire-open-source
  Open Source Tripwire®
  ☆874Updated last year
• machn1k / Scalpel-2.0
  Scalpel; File Carving. Configuration files are modified.
  ☆118Updated 11 years ago
• GoSecure / malboxes
  Builds malware analysis Windows VMs so that you don't have to.
  ☆1,041Updated 3 years ago
• ForensicArtifacts / artifacts
  Digital Forensics artifact repository
  ☆1,089Updated last month
• crits / crits
  CRITs - Collaborative Research Into Threats
  ☆897Updated 5 years ago
• log2timeline / dfvfs
  Digital Forensics Virtual File System (dfVFS)
  ☆207Updated last month
• hatching / vmcloak
  Automated Virtual Machine Generation and Cloaking for Cuckoo Sandbox.
  ☆497Updated 9 months ago
• shirkdog / pulledpork
  Pulled Pork for Snort and Suricata rule management (from Google code)
  ☆426Updated 3 years ago
• tomchop / malcom
  Malcom - Malware Communications Analyzer
  ☆1,159Updated 7 years ago
• volatilityfoundation / profiles
  Volatility profiles for Linux and Mac OS X
  ☆320Updated 2 years ago
• VirusTotal / yara-python
  The Python interface for YARA
  ☆677Updated 2 months ago