Dropbox® Decryptor from Magnet Forensics is a free tool that will decrypt the Dropbox filecache.dbx and config.dbx files which are encrypted SQLite databases.
Encrypted Disk Detector (EDD) is a command-line tool that checks the local physical drives on a system for encrypted volumes created by TrueCrypt, PGP®, Bitlocker®, and other full disk encryption products.
Google Maps Tile Investigator (GMTI) assists in putting more meaning around the Google Maps tile files left behind when viewing maps or getting directions on the Google Maps website.
The IEF LEF Creator for EnCase v7 is an EnScript that creates an LEF from a pre-existing IEF case folder, enabling an examiner running IEF separately from EnCase to later incorporate the findings into EnCase v7.
This IEF Evidence Processor Module for EnCase® v7 is designed to integrate IEF with the EnCase v7 Evidence Processor.
This Internet Evidence Finder™ (IEF) to EnCase® Connector was specifically designed for use with EnCase v6.
This Internet Evidence Finder™ (IEF) to EnCase® Connector was specifically designed for use with EnCase v7.
Magnet RAM Capture is a free imaging tool designed to capture the physical memory of a suspect’s computer, allowing investigators to recover and analyze valuable artifacts that are often only found in memory.
The TSV to TLN Converter is a free tool from Magnet Forensics that converts the X-Ways generated TSV file into the TLN file format which can be loaded into the IEF Timeline View for visual analysis.
Web Page Saver (WPS) is a program that takes a list of URLs and saves scrolling captures (“snapshots”) of each page.