Foundstone provides the best tools I found so far to interpret Microsoft Windows' Internet Explorer index.dat (with Pasco) and cookies files (with Galleta), info2 files which index the recycle bin, and many more... Sources can be downloaded from the ODESSA project (the open digital evidence search and seizure architecture) at http://sourceforge.net/projects/odessa/ | |
digital detective provides another collection of very nice free forensic computing tools and utilities (mostly windows) | |
e-evidence info provides a nice overview of (mostly windows) programs useful for forensic purposes |