Binwalk

Advanced memory forensics framework. Extracts artifacts from RAM dumps — processes, network connections, registry.

Digital forensics platform with GUI. Disk image analysis, timeline analysis, keyword search, hash filtering.

NSA's reverse engineering framework. Disassembly, decompilation, graphing, and scripting for binary analysis.

Pattern matching swiss knife for malware researchers. Create rules to identify and classify malware samples.

Endpoint visibility and collection tool. Hunt for artifacts across thousands of endpoints simultaneously.

Super timeline creation engine. Extracts timestamps from multiple forensic artifact sources into a single timeline.