A system analysis tool for incident first responders. Supports Windows XP and above. FRED creates a gzip-compressed evidence file with an internal Sqlite3 database.

Download 64-bit Version
Download 32-bit Version
Browser History Examiner
A tool to capture comprehensive browser history most major web browsers. History Examiner can also reach into all subdirectories and search for history files an examiner may have missed during a manual inspection. Creates a sqlite3 results database.

  • Chrome
  • Firefox
  • Internet Explorer
  • Safari
Download 32-bit Version
Download 64-bit Version
File Tagger
Recovers Windows file tags from a given directory. This tool is also capable of recursing into subdirectories and searching for any tags that may have been deleted. Creates an output file in a CSV or text format.
Download the User's Manual
Download 32-bit Version