e01

Open-source digital forensics (DFIR) toolkit with a desktop GUI: analyse E01, AFF4, raw/dd and VMDK disk images, recover deleted files by file carving, build timelines, search evidence and run YARA/Sigma rules. Windows, macOS, Linux.

This is a GUI (for Windows 64 bit) for a procedure to virtualize your EWF(E01), DD (raw), AFF disk image file without converting it, directly with VirtualBox, forensically proof.

A command-line tool for searching files, directories, and alternate data streams directly from NTFS image files.

吉利星瑞 2021（Geely Xingrui）E01 车机 CarPlay，DiPlay 接收端。亿咖通 ECARX、GKUI 19、FS11、MT6735、Android 5.1 / API 22。有线 USB 与无线热点已在实车可用。

A command-line tool for efficiently extracting files, directories, and alternate data streams directly from NTFS image files.

⤳ Moved to SecurityRonin/ewf-forensic — EWF/E01 reader, now the core/ member there. Crate 'ewf' still published.

Forensic snapshot tool. Generates browsable offline HTML reports from drives, folders, and E01 images. Features file hashing and keyword search.Forensic snapshot tool. Generates browsable offline HTML reports from drives, folders, and E01 images. Features file hashing and keyword search.

吉利 ICON 2020款 / E01 车机 (Android 5.1) 的 CarPlay 接收端适配 · 固件普查阶段

Kokino Forensic Toolkit (Kokino FTK): open-source disk forensics in your browser. E01, raw, VHD, VHDX, VMDK, ISO; NTFS, FAT, exFAT, ext2/3/4, HFS+, APFS, ISO 9660, UDF, live and deleted. Windows (deleted registry keys, tasks, SRUM), browser history incl. IE, Linux artifacts, carving, picture forensics, anti-forensics scoring, court-ready reports.

Forensic disk-image orchestrator — decodes E01/VMDK/VHDX/VHD/QCOW2/DMG containers, auto-detects MBR/GPT/APM, and routes ISO 9660 to filesystem analysis

Forensic workbench for extracting system logs from Hikvision, Dahua and TVT CCTV recorder (DVR/NVR) disk images

Free, open-source automation of Windows forensic examinations: load an E01/raw/VMDK/VHDX image, pick a case type (DLP, USB, malware, phishing, ClickFix, RMM, ransomware), get answered questions, every parsed artifact as CSV and a court-ready report. Validated against NIST CFReDS.

Recuperação forense de vídeos e fotos a partir de imagens E01/dd, com mapa físico do dispositivo animado. GPL-3.0.

Complete digital forensic investigation of the M57-Jean dataset with documented methodology, findings, and forensic report.

This is extention of H08-E01 game

Fubon Future API

Pure-Rust toolkit and CLI for forensic evidence images: read, verify, acquire, and convert E01, L01, S01, Ex01, Lx01, AFF4, and raw.

FAEP is an automated tool to extract and parse forensic artifacts from .E01 images automatically, with a clean GUI and minimal manual effort.

吉利星瑞 2021（Geely Xingrui）E01 车机 CarPlay，DiPlay 接收端。亿咖通 ECARX、GKUI 19、FS11、MT6735、Android 5.1 / API 22。有线 USB 与无线热点已在实车可用。

ZFF review