These are examples to give you a sense of what's out there. I have NOT created a comprehensive list of available products, nor is it my intention to endorse any particular products or services.  Some are general computer utilities that can be used for many different purposes.  Many other tools on the list were created for purposes such as forensic analysis after a security incident. However, many of the needs of recovering and describing properties of digital objects are the same and can benefit from use of these tools.

Boot Loaders and Boot Managers

These are small programs that run shortly after the computer is first powered on and determine what operating system will be loaded into memory.  Boot loaders can be used to boot the same computer into several different operating systems, as well as booting into an operating system that is not the one normally used on the computer (e.g. booting into Linux to then examine or obtain data from a computer that normally runs under Windows).

• Boot Camp – for running Windows on Macintosh computers
  http://www.apple.com/macosx/features/bootcamp.html
• EasyBCD (NeoSmart Technologies) – “boot right into Linux, Mac OS X, or BSD straight from the Windows Vista bootloader”
  http://neosmart.net/dl.php?id=1
• BOOTMGR
• GRUB
• LILO
• NTLDR (Windows)
• VistaBootPRO (Tradewind Creations) – for multi-booting in Windows XP, Vista and 7
  http://www.vistabootpro.org/

Checksum and Hash Generators – used for verifying that a given bitstream is identical to another

• Cksum (Unix command)
  http://www.freebsd.org/cgi/man.cgi?query=cksum
• md5deep
  http://md5deep.sourceforge.net/
• md5sum (Unix command)
  http://www.linuxmanpages.com/man1/md5sum.1.php
• md5summer
  http://www.md5summer.org/

Compression and Decompression

• 7-Zip
  http://www.7-zip.org/
• Comparison of File Archivers - Wikipedia. http://en.wikipedia.org/wiki/Comparison_of_file_archivers - note that "archiver" here means an application that packages together and compresses a set of files
• gzip (GNU Zip). http://www.gzip.org/
• Tar. http://www.gnu.org/software/tar/ or http://www.openbsd.org/cgi-bin/man.cgi?query=tar
• WinZip. http://www.winzip.com/

Creating an Image (Exact Bit-by-Bit Copy) of Data from a Physical Medium

• aimage
  http://www.afflib.org/aimage.php
• CDRDAO – “Disk-At-Once Recording of Audio and Data CD-Rs/CD-RWs”
  http://cdrdao.sourceforge.net/
• dd (Unix Command) - used for low-level copying and conversion of data (can create disk images by operating below the filesystem level)
  http://www.gnu.org/software/coreutils/manual/html_node/dd-invocation.html
• dd_rescue - version of dd, designed specifically for recovering data from a medium that has errors (e.g. after hard drive crashes)
  http://www.garloff.de/kurt/linux/ddrescue/
• dcfldd - includes several enhancements on dd, including ability to create MD5 hashes on-the-fly
  http://dcfldd.sourceforge.net/
• Forensics Wiki – Disk Imaging
  http://www.forensicswiki.org/wiki/Category:Disk_Imaging
• IMAGE (Digital Intelligence) – for creating images of floppy disks
  http://www.digitalintelligence.com/software/disoftware/image/
• libewf – open source tool for creating images as part of evidence files in the format recognized by EnCase, validating the evidence files and converting to/from raw format
  http://sourceforge.net/projects/libewf/
• LinEn (Guidance Software) – Linux-based tool for creating images as part of evidence files in the format recognized by EnCase
  http://www.guidancesoftware.com/support/LinEn_LicenseAgreement.aspx
• Media Exploitation Kit (Basis Technology)
  http://www.basistech.com/digital-forensics/mek.html
• Power ISO - "open, extract, create, edit, burn, compress, encrypt, split and convert ISO files, and mount these files with internal virtual drive"
  http://www.poweriso.com/
• SafeBack (Forensics Source) - "used to create mirror-image (bit-stream) backup files of hard disks or to make a mirror-image copy of an entire hard disk drive or partition"
  http://www.forensics-intl.com/safeback.html
• Zlon (ZAR Data Recovery)
  http://www.z-a-recovery.com/zlon-disk-cloning.htm

Data Carving – extracting data from a raw bitstream (often based on identifying file headers/footers) in order to reconstruct files or parts of files

• CarvFS
  http://ocfa.sourceforge.net/libcarvpath/
• Scalpel
  http://www.digitalforensicssolutions.com/Scalpel/

Data Recovery

• EasyRecovery (Ontrack)
  http://www.ontrackdatarecovery.com/file-recovery-software/
• Forensics Wiki – Data Recovery Tools
  http://www.forensicswiki.org/wiki/Tools:Data_Recovery
• PhotoRec – for recovering photos
  http://www.cgsecurity.org/wiki/PhotoRec
• PhotoRescue - Data Recovery
  http://www.datarescue.com/
• Recovery is Possible (RIP) – “CD or USB boot/rescue/backup/maintenance system”
  http://freshmeat.net/projects/recoveryispossible/
• Restorer2000 (bitMart)
  http://www.restorer2000.com/
• SalvageRecovery and SalvageMedia (SalvageData)
  http://www.salvagedata.com/recovery-software/
• TestDisk - "primarily designed to help recover lost partitions and/or make non-booting disks bootable again when these symptoms are caused by faulty software, certain types of viruses or human error (such as accidentally deleting a Partition Table)," works with BeFS, FAT12, FAT16, FAT32, EXT2, EXT3, Netware, NTFS, ReiserFS, SWAP, and UFS
  http://www.cgsecurity.org/wiki/TestDisk
• ZAR (Zero Assumption Recovery)
  http://www.z-a-recovery.com/info_zar32.htm

Data Recovery and Copying (includes bitstream copying and verification, generating data images and bitstream hashes)

• Robocopy - Microsoft. http://en.wikipedia.org/wiki/Robocopy and http://www.microsoft.com/technet/technetmag/issues/2006/11/UtilitySpotlight/default.aspx
• Sha1sum. http://en.wikipedia.org/wiki/Sha1sum
• TULP2G. http://sourceforge.net/projects/tulp2g/ - "a .NET based forensic software framework for extracting and decoding data stored in electronic devices"
• xcopy - Microsoft. http://www.microsoft.com/resources/documentation/windows/xp/all/proddocs/en-us/xcopy.mspx
• xxcopy. http://www.xxcopy.com/index.htm
• dd_rescue. http://www.garloff.de/kurt/linux/ddrescue/ - can be used to write back over a drive to remove the data

File Analysis

• Diffutils (GNU) – for identifying differences between files
  http://www.gnu.org/software/diffutils/
• Forensics Wiki – File Analysis
  http://www.forensicswiki.org/wiki/Tools:File_Analysis

File Format Identification, Characterization, Validation and Transformation

• activePDF- several products to deal with PDF creation and conversion, including PrimoPDF, Server, DotConverter, WebGrabber, Printer and Portofolio
  http://www.activepdf.com/
• Antiword – “converts the binary files from Word 2, 6, 7, 97, 2000, 2002 and 2003 to plain text and to PostScript”
  http://www.winfield.demon.nl/
• AONS (Automated Obsolescence Notification System), Australian National University and National Library of Austrlia.
  http://www.apsr.edu.au/publications/aons_report.pdf (see also AONS II - http://pilot.apsr.edu.au/wiki/index.php/AONS_II)
• Apache POI - Java API To Access Microsoft Format Files
  http://poi.apache.org/
• Audio/Video to WAV Converter
  http://www.archive.org/details/tucows_369301_Audio_Video_To_Wav_Converter
• catdoc – “reads one or more Microsoft word files and outputs text” (comes along with xls2csv to export Excel spreadsheets into comma-separated values, and catppt to extract text from Powerpoint files)
  http://vitus.wagner.pp.ru/software/catdoc/
• CDS Convert (CERN Document Server Software Consortium) - suite of tools that allow conversion of documents, presentations and images between different software formats
  http://cdsware.cern.ch/convert/index.html
• Chilkat - various file parsing and file transformation tools, with a strong emphasis on email
  http://www.chilkatsoft.com/
• Conversion and Recommendation of Digital Object Formats (CRiB) (University of Minho, Department of Information Systems) - "Service Oriented Architecture (SOA) designed to assist cultural heritage institutions in the implementation of migration-based preservation interventions"
  http://crib.dsi.uminho.pt/ (see also the demonstration version, the Migration Workbench - http://digitarq.di.uminho.pt/MigrationWorkbench/)
• dBpowerAMP Music Converter (Illustrate)
  http://www.dbpoweramp.com/dmc.htm
• Digital Scholar's Workbench. http://www.apsr.edu.au/Open_Repositories_2006/barnes_yeadon.ppt - web application that converts suitably structured word processing documents into DocBook XML and then into XHTML for onscreen viewing and into PDF for printing
• DROID (Digital Record Object Identification), National Archives (UK) - automated batch identification of file formats
  http://www.nationalarchives.gov.uk/aboutapps/pronom/droid.htm
• Easy CD-DA Extractor (Poikosoft) – conversion between audio file formats
  http://www.poikosoft.com/
• Electronic Document Conversion - National Library of Medicine
  http://docmorph.nlm.nih.gov/docmorph/ - includes DocMorph, http://docmorph.nlm.nih.gov/docmorph/docmorph.htm and MyMorph, http://docmorph.nlm.nih.gov/docmorph/mymorph.htm
• Emailchemy (Weird Kid Software) – “email conversion, email migration and management of email archives”
  http://www.weirdkid.com/products/emailchemy/
• FFmpeg. http://ffmpeg.mplayerhq.hu/download.html - converts flash videos to MPEG
• FilAlyzer – “allows a basic analysis of files (showing file properties and file contents in hex dump form) and is able to interpret common file contents like resources structures (like text, graphics, HTML, media and PE)”
  http://www.safer-networking.org/en/filealyzer/
• File (Unix command)
• Jakarta POI - Java API for accessing and manipulating Microsoft format files
  http://jakarta.apache.org/poi/
• JHOVE - JSTOR/Harvard Object Validation Environment.
  http://hul.harvard.edu/jhove/index.html
• LibMagic – “library for the file utility that can classify files according to magic number tests”
  http://packages.debian.org/unstable/libdevel/libmagic-dev
• LuraDocument PDF Compressor Desktop - claims to convert TIFF, JPEG, BMP or PNM to PDF/A http://www.luratech.com/products/luradocument/pdf/compressor/index.jsp?OnlineShopId=26F2242CD8E5AB172C2B99F08E32B5C8
• Microsoft Office Compatibility Pack for Word, Excel, and PowerPoint 2007 File Formats http://www.microsoft.com/downloads/details.aspx?familyid=941B3470-3AE9-4AEE-8F43-C6BB74CD1466
• OpenDocument Fellowship - Conversion Software
  http://opendocumentfellowship.org/applications#convert
• Open Video Converter - "video conversion, splitting and editing"
  http://www.archive.org/details/tucows_371200_Open_Video_Converter
• OpenXML Translator (ODF Add-in for Word)
  http://sourceforge.net/projects/odf-converter/
• Outside In (Oracle) – “suite of software development kits (SDKs) that provides developers with a comprehensive solution to access, transform and control the contents of nearly 500 unstructured file formats”
  http://www.oracle.com/technology/products/content-management/oit/oit_all.html
• Reference Data Set, National Software Reference Library (NIST) – collection of millions of hash values for “known, traceable software applications”
  http://www.nsrl.nist.gov/
• TrID File Identifier - utility designed to identify file types from their binary signatures
  http://mark0.net/soft-trid-e.html
• TubeSock (Stinkbot) - for downloading and converting videos from Flash (e.g. from YouTube)
  http://www.stinkbot.com/Tubesock/index.html
• Typed Object Model (TOM)
  http://tom.library.upenn.edu/
• W3C Markup Validation Service - World Wide Web Consortium
  http://validator.w3.org/
• WMDecode (Biblet Computer Services) - "for extracting files from winmail.dat mail messages (files named winmail.dat or ATT00001.dat)," which are associated with email stored in Microsoft Outlook
  http://www.biblet.freeserve.co.uk/
• wvWare – various tools for extracting content from Microsoft Word files, now incorporated into AbiWord
  http://www.abisource.com/projects/

File Viewers

• IrfanView
  http://www.irfanview.com/
• Outside In (Oracle) – for software developers, rather than designed to be used directly on the desktop (e.g. incorporated into Encase)
  http://www.oracle.com/technology/products/content-management/oit/viewer.html
• Quick View Plus
  http://www.avantstar.com/Products/Quick_View_Plus/QuickViewPlusOverview

Forensic Application Packages and other Multi-Purpose Applications

These tools provide multiple functions, often including features listed elsewhere in this document.

• AFF Package – “VMWare Appliance with AFFLIB, aimage, SleuthKit, fiwalk, and other forensic tools already installed”
  http://www.afflib.org/applianaces.php
• Autopsy Forensic Browser – “graphical interface to the command line digital investigation tools in The Sleuth Kit”
  http://www.sleuthkit.org/autopsy/index.php
• DataLifter
  http://www.datalifter.com/
• Digital Intelligence Forensic Software
  http://www.digitalintelligence.com/software/disoftware.php
• Distributed Environment for Large Scale Investigation (DELV)
• EnCase Forensic (Guidance Software)
  http://www.guidancesoftware.com
• Farmer’s Boot CD (FBCD) – bootable CD with Linux and forensic tools
  http://www.forensicbootcd.com/
• FCCU GNU/Linux Forensic Boot CD – bootable CD with Linux and forensic tools
  http://www.lnx4n6.be/
• Forensic Toolkit (AccessData)
  http://www.accessdata.com/
• Helix (e-fense) – bootable CD with Linux and forensic tools
  http://www.e-fense.com/
• InfinaDyne – most known for their CD/DVD tools (especially CD/DVD Inspector), but also offer forensic tools for flash drives
  http://www.infinadyne.com/
• Open Computer Forensics Architecture (OCFA)
  http://sourceforge.net/projects/ocfa
• Paraben Forensics
  http://www.paraben-forensics.com/
• ProDiscover (Technology Pathways)
  http://www.techpathways.com/
• PyFLAG
  http://sourceforge.net/projects/pyflag/
• The Sleuth Kit – “collection of UNIX-based command line file and volume system forensic analysis tools”
  http://www.sleuthkit.org/
• XIRAF
  http://www.dfrws.org/2006/proceedings/7-Alink.pdf

Hardware

• Catweasel (Individual Computers) – controller for reading floppy disks
  http://www.jschoenfeld.com/products/catweasel_e.htm
• C-ONE Reconfigurable Computer – set of hardware for cloning 8-bit computers, originally designed to imitate the Commodore 64
  http://www.c64upgra.de/c-one/
• Write Blockers – Forensics Wiki
  http://www.forensicswiki.org/wiki/Write_Blockers

Hex Viewers/Editors

• Hex Workshop (BreakPoint Software) - "can edit, cut, copy, paste, insert, and delete hex, print customizable hex dumps, and export to RTF or HTML for publishing" and "find, replace, compare, add smart bookmarks, and generate character distributions within a sector or file"
  http://www.bpsoft.com/
• HView – very simple and lightweight hex viewer (can drag and drop a file into it to view hex dump)
• WinHex – many more features for forensic analysis than HView
  http://www.x-ways.net/winhex/

Metadata Extraction and Export

• DirPrinting – simple program for printing or exporting directory structures
  http://www.majusoft.de/DirPrinting/index_en.htm
• EXIF: Canon type1 Makernotes
  http://gvsoft.homedns.org/exif/makernote-canon-type1.html
• Exiv2 – “provides fast and easy read and write access to the Exif, IPTC and XMP metadata of images in various formats”
  http://www.exiv2.org
• Forensics Wiki – Document Metadata Extraction
  http://www.forensicswiki.org/wiki/Tools:Document_Metadata_Extraction
• Image-ExifTool (Phil Harvey) - "platform-independent Perl library plus a command-line application for reading, writing and editing meta information in image, audio and video files"
  http://search.cpan.org/dist/Image-ExifTool/
  http://www.sno.phy.queensu.ca/~phil/exiftool/
• Karen’s Directory Printer – for printing and exporting directory structures and associated attributes (more features than DirPrinting above)
  http://www.karenware.com/powertools/ptdirprn.asp
• Metadata Extraction Tool (National Library of New Zealand)
  http://meta-extractor.sourceforge.net/
  http://www.natlib.govt.nz/about-us/current-initiatives/metadata-extraction-tool
• Pdfinfo – for extracting and viewing metadata from PDF files, part of a package called  xpdf, for viewing, converting and extracting PDF content
  http://www.foolabs.com/xpdf/
• Tree (DOS command) – displays directories and their contents, which can be piped into a text file for use elsewhere
  http://technet.microsoft.com/en-us/library/cc771130.aspx

Network Data Transfer

• BagIt File Package Format
  http://www.cdlib.org/inside/diglib/bagit/bagitspec.html
• Cryptcat - version of Netcat that supports encryption of the data that is transported
  http://sourceforge.net/projects/cryptcat/
• imapsync - "tool for facilitating incremental recursive IMAP transfers from one mailbox to another"
  http://freshmeat.net/projects/imapsync/
• Netcat - can be used to transfer data from the computer where it originally resides, across a network (using TCP or UDP), and onto a target system
  http://www.vulnwatch.org/netcat/

Recovery of Passwords and Login Information

• bulk_extractor – “can produce a report of all email addresses and URLs found on an originator’s hard drive”
  http://www.simson.net/clips/academic/2009.BL.InternetFootprint.pdf
• Passware
  http://www.lostpassword.com/

Redaction and Removal of Information from Files

• Adobe Acrobat (full version, not just the free Reader) – true redaction of text from PDF requires saving redacted pages to TIFF, then re-saving as PDF
  http://www.adobe.com/products/acrobat/
• iRedact (Image Solutions) – part of ISITookBox
  http://www.isitoolbox.com/
• Microsoft Office 2003 Add-in: Word Redaction v1.2
  http://www.microsoft.com/downloads/details.aspx?familyid=028C0FD7-67C2-4B51-8E87-65CC9F30F2ED&displaylang=en
• Microsoft Office 2003/XP Add-in: Remove Hidden Data
  http://www.microsoft.com/downloads/details.aspx?familyid=144e54ed-d43e-42ca-bc7b-5446d34e5360&displaylang=en
• Microsoft Office 2007, Document Inspector
  http://office.microsoft.com/en-us/help/HA100375931033.aspx
• RapidRedact (Onstream Systems)
  http://www.rapidredact.com/
• "Redacting with Confidence: How to Safely Publish Sanitized Reports Converted from Word to PDF." Ft. Meade, MD: National Security Agency, 2005.
  http://www.fas.org/sgp/othergov/dod/nsa-redact.pdf
• Redax – “permanently removes sensitive text and graphics content from PDF documents”
  http://www.appligent.com/products/redax/redax.php

Reverse Engineering

Along with emulation and virtual machines discussed elsewhere in this list, reverse engineering tools can help in the isolation, analysis, revision/debugging, execution and portability of the software upon which digital objects depend. For a great discussion of these tools and related practices, see: Eilam, Eldad. Reversing: Secrets of Reverse Engineering. Indianapolis, IN: Wiley, 2005.

• Boomerang: A general, open source, retargetable decompiler of machine code programs.
  http://boomerang.sourceforge.net/
• DUMPBIN - Microsoft (part of 32-bit version of Microsoft Visual C++) - "to provide information about the format and symbols provided in executable, library, and DLL files"
  http://support.microsoft.com/kb/177429
• GDB - GNU Project Debugger
  http://www.gnu.org/software/gdb/
• IDA Pro (Interactive Disassmebler) - Data Rescue
  http://www.datarescue.com/
• ILDasm (MSIL Disassembler) - Microsoft - disassmembles a portable executable (PE) file that contains Microsoft intermediate language (MSIL) code, which is the low-level language used in the Microsoft .NET framework
  http://msdn2.microsoft.com/en-us/library/f7dy01k1(VS.80).aspx
• Jdec: Java Decompiler
  http://jdec.sourceforge.net/
• OllyDbg (Oleh Yuschuk) - free "32-bit assembler level analysing debugger for Microsoft Windows. Emphasis on binary code analysis makes it particularly useful in cases where source is unavailable."
  http://www.ollydbg.de/
• PEview (Wayne J. Radburn) - "to view the structure and content of 32-bit Portable Executable (PE) and Component Object File Format (COFF) files which supports the viewing of EXE, DLL, OBJ, LIB, DBG, and other file types"
  http://www.magma.ca/~wjr/
• Program-Transformation.org
  http://www.program-transformation.org/
• SyserDebugger - Syser Software
  http://www.sysersoft.com/
• Sysinternals (purchased by Microsoft in July 2006).
  http://www.microsoft.com/technet/sysinternals/ - see especially their System Information utilities: http://www.microsoft.com/technet/sysinternals/systeminformationutilities.mspx
• SmidgeonSoft.
  http://www.smidgeonsoft.com (See especially, PEBrowse Professional Interactive - http://www.smidgeonsoft.prohosting.com/pebrowse-pro-interactive-debugger.html)
• WinDbg (Microsoft) - free debugger for Windows
  http://www.microsoft.com/whdc/devtools/debugging/default.mspx

Screen Capture

• Capture Fox - Firefox Add-On for screen-by-screen capture
  http://www.advancity.net/eng/products/capturefox.html
• Snagit
  http://www.techsmith.com/screen-capture.asp

Search for Data in Disk Image or Other Bitstream

• grep (Unix Command)
• strings (Unix Comand)

Unix Tools on Windows

It is often helpful to be able to run Unix tools on a computer that is running Windows as its operating system.  See also Virtualization and Emulation below.

• ActivePerl (ActiveState) – for running Perl scripts in Windows
  http://www.activestate.com/activeperl/
• Cygwin - "a Linux-like environment for Windows" (usually requires access to source code of the program you want to run within Cygwin)
  http://www.cygwin.com/
• Explore2fs - for accessing ext2 and ext3 filesystems through Windows
  http://www.chrysocome.net/explore2fs
• GnuWin32 – “provides ports of tools with a GNU or similar open source license, to MS-Windows (Microsoft Windows 95 / 98 / ME / NT / 2000 / XP / 2003 / Vista / 2008)”
  http://gnuwin32.sourceforge.net/
• Subsystem for Unix-based Applications (SUA) – part of the “server” class of Microsoft operating systems, including Windows Server 2003 R2, and Vista Enterprise and Ultimate
  http://technet.microsoft.com/en-us/library/cc779522.aspx
• UWIN (AT&T Research) – "allows UNIX applications to be built and run on Windows XP/2000/NT/ME/98/95 with few, if any, changes necessary"
  http://www.research.att.com/sw/tools/uwin/

View Sector-Level Data on Disk

• DiskView
  http://technet.microsoft.com/en-us/sysinternals/bb896650.aspx
• FishWings – Apple ][ disk image viewer
  http://mysite.verizon.net/charlie.d/fishwings.htm

Virtualization and Emulation

This software can be used to create a sandbox in which an acquired computer can be “run” without interfering with operation or data of curator’s computer.  It can also be used to run other software on this list on operating systems for which the software wasn’t specifically developed.

• CrossOver (CodeWeavers) - proprietary software that is based on and contributes back to the Wine development effort
  http://www.codeweavers.com/
• VirtualBox (Sun)
  http://www.virtualbox.org/
• VMware Player
  http://www.vmware.com/products/player/
• Wine - open source implementation of the Windows API on top of X and Unix
  http://www.winehq.org/
• Xen – hypervisor, which “supports a wide range of guest operating systems including Windows, Linux, Solaris, and various versions of the BSD operating systems”
  http://www.xen.org/

Wiping Data and Removing Files from Bitstream (making sure data is truly gone)

• BCWipe (Jetico)
  http://www.jetico.com/bcwipe.htm
• cipher.exe
  http://support.microsoft.com/kb/315672
• Darik's Boot and Nuke (DBAN)
  http://dban.sourceforge.net/
• DCFLDD - an ehanced version of dd, which "can be used to wipe disks quickly and with a known pattern if desired"
  http://dcfldd.sourceforge.net/
• Eraser (Heidi)
  http://www.heidi.ie/node/6
  http://www.heidi.ie/node/38 (getting started guide)
  http://sourceforge.net/projects/eraser/
• Forensics Wiki – Secure Deletion
  http://www.forensicswiki.org/wiki/Category:Secure_deletion
• Mac OS X Secure Erase
  http://support.apple.com/kb/TA24002
• Ontrack Eraser
  http://www.ontrackdatarecovery.com/hard-drive-software/ontrack-eraser.aspx
• PDWipe (Digital Intelligence)
  http://www.digitalintelligence.com/software/disoftware/pdwipe/
• SDelete
  http://technet.microsoft.com/en-us/sysinternals/bb897443.aspx
• Secure Deletion – Electronic Frontier Foundation
  https://ssd.eff.org/tech/deletion
• Window Washer (WebRoot)
  http://www.webroot.com/En_US/consumer-products-windowwasher.html

General Resources for Information about Tools

• Carrier, Brian. "Open Source Digital Forensics."
  http://www.opensourceforensics.org/
• Links to Tools for use in archiving QA. National Library of Australia and Partners
  http://pandora.nla.gov.au/manual/qatools.html