Autopsy® is a digital forensics platform and graphical interface to The Sleuth Kit® and other digital forensics tools. It can be used by law enforcement, military, and corporate examiners to investigate what happened on a computer.




Rekall is described as 'The most complete Memory Analysis framework. Rekall provides an end-to-end solution to incident responders and forensic analysts. From state of the art acquisition tools, to the most advanced open source memory analysis framework' and is an app. There are 2 alternatives to Rekall for Windows, Linux and Mac. The best Rekall alternative is Autopsy Forensic Browser, which is both free and Open Source.
Autopsy® is a digital forensics platform and graphical interface to The Sleuth Kit® and other digital forensics tools. It can be used by law enforcement, military, and corporate examiners to investigate what happened on a computer.




Volatility is the open source memory forensics framework for incident response and malware analysis.