DFF

by ArxSys

DFF by ArxSys. A digital forensics tool for forensic tool suite (windows investigations), email parsing, software write block, windows registry analysis, hash analysis, deleted file recovery, memory capture and analysis, string search, file carving.

Platforms

Windows

Artifact types

Disk ImageEmailEvent Logs (EVTX)File SystemMemory DumpPrefetch FilesWindows Registry

License

Open Source

Skill level

Beginner

Version

1.3

Website

http://www.arxsys.fr

Use cases

data recoverye discoveryincident responselitigation supportmalware analysis

Techniques

artifact parsingcarvingmalware triagememory analysispost mortem

Find similar tools