Alternatives and similar repositories for scalpel:

Users that are interested in scalpel are comparing it to the libraries listed below

• simsong / bulk_extractor
  This is the development tree. Production downloads are at:
  ☆1,184Updated this week
• libyal / libewf
  Libewf is a library to access the Expert Witness Compression Format (EWF)
  ☆272Updated 7 months ago
• msuhanov / Linux-write-blocker
  The kernel patch and userspace tools to enable Linux software write blocking
  ☆139Updated 4 years ago
• teamdfir / sift
  SIFT
  ☆502Updated last year
• rowingdude / analyzeMFT
  analyzeMFT.py is designed to fully parse the MFT file from an NTFS filesystem and present the results as accurately as possible in multip…
  ☆471Updated 5 months ago
• korczis / foremost
  Foremost is a console program to recover files based on their headers, footers, and internal data structures. This process is commonly re…
  ☆324Updated last year
• volatilityfoundation / community
  Volatility plugins developed and maintained by the community
  ☆358Updated 3 years ago
• 504ensicsLabs / LiME
  LiME (formerly DMD) is a Loadable Kernel Module (LKM), which allows the acquisition of volatile memory from Linux and Linux-based devices…
  ☆1,794Updated 5 months ago
• arxsys / dff
  DFF (Digital Forensics Framework) is a Forensics Framework coming with command line and graphical interfaces. DFF can be used to investig…
  ☆281Updated 5 years ago
• sleuthkit / autopsy
  Autopsy® is a digital forensics platform and graphical interface to The Sleuth Kit® and other digital forensics tools. It can be used by …
  ☆2,602Updated last week
• teamdfir / sift-cli
  CLI tool to manage a SIFT Install
  ☆419Updated 2 years ago
• halpomeranz / lmg
  Script for automating Linux memory capture and analysis
  ☆268Updated 5 years ago
• google / rekall
  Rekall Memory Forensic Framework
  ☆1,945Updated 4 years ago
• log2timeline / plaso
  Super timeline all the things
  ☆1,809Updated 3 weeks ago
• sleuthkit / sleuthkit
  The Sleuth Kit® (TSK) is a library and collection of command line digital forensics tools that allow you to investigate volume and file s…
  ☆2,758Updated this week
• ssdeep-project / ssdeep
  Fuzzy hashing API and fuzzy hashing tool
  ☆708Updated 4 years ago
• vitaly-kamluk / bitscout
  Remote forensics meta tool
  ☆465Updated last week
• eset / malware-research
  Code written as part of our various malware investigations
  ☆393Updated 2 months ago
• jesparza / peepdf
  Powerful Python tool to analyze PDF documents
  ☆1,350Updated 7 months ago
• volatilityfoundation / profiles
  Volatility profiles for Linux and Mac OS X
  ☆323Updated 2 years ago
• viper-framework / viper
  Binary analysis and management framework
  ☆1,542Updated last year
• vivisect / vivisect
  ☆960Updated last month
• decalage2 / ViperMonkey
  A VBA parser and emulation engine to analyze malicious macros.
  ☆1,079Updated 8 months ago
• markmckinnon / Autopsy-Plugins
  Autopsy Python Plugins
  ☆346Updated last year
• REMnux / docker
  This repository contains Dockerfiles for building Docker images of popular malware analysis tools, which are distributed through the REMn…
  ☆270Updated last year
• log2timeline / dfvfs
  Digital Forensics Virtual File System (dfVFS)
  ☆207Updated 3 months ago
• joxeankoret / pyew
  Official repository for Pyew.
  ☆390Updated 5 years ago
• jessek / hashdeep
  ☆730Updated 3 months ago
• elceef / bitlocker
  Volatility Framework plugin for extracting BitLocker FVEK (Full Volume Encryption Key)
  ☆228Updated 8 years ago
• BayshoreNetworks / yextend
  Yara integrated software to handle archive file data.
  ☆305Updated 2 years ago