Tools

• ftimes -- A forensic system baselining, searching, and evidence collection tool.
• ftimes-bimvl -- Take a snapshot, compare it to a baseline, and log the changes.
• ftimes-cat -- Write the contents of a file or stdin to stdout.
• ftimes-cmp2dbi -- Preprocess FTimes compare data for MySQL DB import.
• ftimes-cmp2diff -- Display diff-like results of an FTimes comparison.
• ftimes-crv2dbi -- Preprocess FTimes carve data for MySQL DB import.
• ftimes-crv2raw -- Carve blocks of data and assemble them into raw files.
• ftimes-dbm-bash -- Bash one Berkeley database against another.
• ftimes-dbm-dump -- Enumerate a Berkeley database.
• ftimes-dbm-find -- Find one or more keys in a Berkeley database.
• ftimes-dbm-make -- Create or update a Berkeley database.
• ftimes-dbm-reap -- Extract unresolved keys from one or more files.
• ftimes-dbm-weed -- Delete records from a Berkeley database.
• ftimes-dig2ctx -- Extract context around matched dig strings.
• ftimes-dig2dbi -- Preprocess FTimes dig data for MySQL DB import.
• ftimes-encoder -- Encode/Decodes strings/records using various algorithms.
• ftimes-grabber -- Parse FTimes output, grab files, and zip them up.
• ftimes-map2dbi -- Preprocess FTimes map data for MySQL DB import.
• ftimes-map2mac -- Create MAC/MACH timelines using FTimes map data.
• ftimes-proximo -- Locate a group of dig hits within a specified byte range.
• ftimes-sizimus -- Tally bytes based on the size attribute.
• ftimes-sortini -- Sort dig output by hostname, name, and offset.
• ftimes-srm -- Selectively remove enumerated files.
• ftimes-xformer -- Transform FTimes data based on user-specified input.
• ftimes-xpa -- Create a cross-platform archive.
• hashcp -- Hash and copy the contents of a file or stdin.
• hashdig-bash -- Bash one HashDig database against another.
• hashdig-bind -- Bind resolved hashes to filenames.
• hashdig-dump -- Enumerate a HashDig database.
• hashdig-filter -- Filter filenames by directory type.
• hashdig-find -- Find one or more hashes in a HashDig database.
• hashdig-harvest-sunsolve -- Harvest hashes from a directory of sunsolve output.
• hashdig-harvest -- Harvest hashes from a one or more files.
• hashdig-make -- Create or update a HashDig database.
• hashdig-resolve-sunsolve -- Resolve hashes against Sun's Solaris Fingerprint Database.
• hashdig-stat -- Produce statistics on HashDig files and databases.
• hashdig-weed -- Delete hashes from a HashDig database.
• hipdig -- Dig for hosts, IPs, passwords, and more...
• tarmap -- Map the contents of a tar archive.
• zipmap -- Map the contents of a ZIP archive.