Open-source forensic tools
Also known as: Open-Source-Forensikwerkzeuge, The Sleuth Kit, Autopsy, Volatility, Wireshark, FREETOOL, Tools4LEAs
Freely available, open-source tools for disk, memory and network analysis whose inner workings – unlike proprietary products – can be fully inspected.
The Sleuth Kit with Autopsy (disk), Volatility (memory) and Wireshark (network) are established examples; the European Union (EU) projects FREETOOL and Tools4LEAs develop tools specifically for law enforcement. The European Union Agency for Law Enforcement Cooperation (incl. EC3) (Europol) report sees their advantages in transparency, cost and European sovereignty, their drawbacks in missing support and training. For admissibility, openness is an asset: the method can be disclosed.