We have taken the best open source forensic/security tools, customised them, and combined them with an intuitive user interface to create an incredibly powerful forensic environment.

With PlainSight you can perform operations such as:

• Get hard disk and partition information
• Extract user and group information
• View Internet histories
• Examine Windows firewall configuration
• Discover recent documents
• Recover/Carve over 15 different file types
• Discover USB storage information
• Examine physical memory dumps
• Examine UserAssist information
• Extract LanMan password hashes
• Preview a system before acquiring it

You can view a more complete features list here:

PlainSight | Features

You can download PlainSight v0.1 ISO here:

UK Mirror – PlainSight-0.1.iso
Belgium Mirror – PlainSight-0.1.iso

Or read more here.

Foremost is a console program to recover files based on their headers, footers, and internal data structures. This process is commonly referred to as data carving. Foremost can work on image files, such as those generated by dd, Safeback, Encase, etc, or directly on a drive.

The headers and footers can be specified by a configuration file or you can use command line switches to specify built-in file types. These built-in types look at the data structures of a given file format allowing for a more reliable and faster recovery.

Originally developed by the United States Air Force Office of Special Investigations and The Center for Information Systems Security Studies and Research , foremost has been opened to the general public.

You can download the latest version here:

foremost-1.5.tar.gz

Or read more here.