> ## Content Index
> Fetch the complete content index at: https://katecarruthers.com/llms.txt
> Use this file to discover other available public pages before exploring further.

# Thoughts on digital forensics
- URL: https://katecarruthers.com/thoughts-on-digital-forensics/
- Published: 2019-05-07T10:21:17.000Z
- Updated: 2026-04-01T05:55:25.000Z
- Author: Kate Carruthers
- Tags: cybersecurity, #Migrated-1775015344493, #wp, #wp-post, #Import 2026-04-01 14:49

I'm studying cyber security and investigations at the moment and the current course is digital forensics. It is fascinating learning about how folks try to hide their digital tracks, and it is also mildly terrifying to realise how much data can be recovered. I'm deep in hex viewers, write blockers, and various tools for analysing data.

It is quite a shock to find that the tools for digital forensics that we are using in class are mostly trial versions of expensive proprietary tools. Also it appears that there are very few UX people involved in the development of most tools, as they are mostly rather utilitarian.

There are very few open standards and not many open source tools. Among the tools that I have found to be useful are [Autopsy](https://www.sleuthkit.org/autopsy/?ref=katecarruthers.com) and [ExifTool](https://www.sno.phy.queensu.ca/~phil/exiftool/?ref=katecarruthers.com).

UPDATE: via some nice folks on Twitter (hi [@Caccia7r1c3](https://twitter.com/Caccia7r1c3?ref=katecarruthers.com) and [@EricRZimmerman](https://twitter.com/EricRZimmerman?ref=katecarruthers.com)) I've discovered some interesting new tools and also Eric's blog [binary foray.](https://binaryforay.blogspot.com/?ref=katecarruthers.com)

![](https://storage.ghost.io/c/73/9e/739e1c52-4372-4113-9798-c15339da44db/content/images/2026/04/OIP--5-.webp)

There is a good list here: [The Best Open Source Digital Forensic Tools](https://h11dfs.com/the-best-open-source-digital-forensic-tools/?ref=katecarruthers.com)

Interestingly the the US National Security Agency (NSA) has recently released their [GHIDRA](https://www.nsa.gov/resources/everyone/ghidra/?ref=katecarruthers.com) tool. This nifty tool is a reverse engineering tool, and its capabilities include disassembly, assembly, decompilation, graphing and scripting. The open sourcing of this tool is a major disruptor of the incumbent's proprietary and rather expensive toolset. Good idea NSA!