Free Digital Forensics Tools & Guides

Here you will find practical, field-tested tools and guides built to support digital forensic work. From iOS backup normalization to VarInt decoding, these utilities help you work faster and more precisely. We update the collection regularly.
digital forensics free tools

Field-tested, free tools

free tool | backup 2fs

Backup 2FS. A free tool to recover and normalize files from iOS backups.

Backup 2FS is a free Windows tool that helps you recover and normalize files from iOS backups.

free tool | varint calculator

VarInt Calculator. A free tool for calculating and decoding VarInts.

A free utility designed to help forensic analysts interpret and work with variable-length integers (VarInts), commonly found in app databases, protobufs, and messaging data.

digital forensics free guides & e-books

Free guides & e-books

free guide

Forensic Guide to GPT Partitioning

This free guide provides a practical walkthrough of GPT-partitioned disks, covering the Protective MBR, GPT Header, and Partition Entry Array. It’s designed to help forensic professionals understand disk structures, recover data, and validate evidence.

free guide

How to decrypt Locked Apple Notes on iOS 16.x. A step-by-step Workflow.

This free guide provides a practical walkthrough for forensic analysts dealing with encrypted Apple Notes in iOS 16.x. It focuses on identifying and decrypting locked notes stored in the NoteStore.sqlite database extracted from iOS backups.

news and articles

Latest news and articles

Dive into our curated articles, case studies, and guides designed to empower forensic professionals with the latest techniques and industry developments.

Decoding Varints: A Critical Skill in SQLite Forensics

Decoding Varints: A Critical Skill in SQLite Forensics

Varints are the backbone of SQLite’s efficient data storage, encoding values in a compact format that digital forensic investigators must decode to uncover critical evidence. This blog dives into the decoding process, real-world examples, and tools like the Varint Calculator to simplify forensic analysis.

New Free Tool Release: Backup2FS – Normalize iOS Backups for Easier Analysis

New Free Tool Release: Backup2FS – Normalize iOS Backups for Easier Analysis

Discover Backup2FS, a free tool from Elusive Data that simplifies iOS backup analysis by normalizing backups into an easy-to-navigate file system.

Navigating the GPT Partition Entry Array for Forensic Analysis. Part 3.

Navigating the GPT Partition Entry Array for Forensic Analysis. Part 3.

Gain a deeper understanding of the GPT Partition Entry Array and its significance in digital forensic analysis. This guide explores key techniques and insights to enhance your forensic investigations.

stay updated

Want to stay informed about new tools and updates?

Be the first to hear about new training opportunities, free tools, case-based blog posts, guides and practical insights. Our monthly newsletter is built to help you learn faster, solve cases smarter, and keep up in a field that never stands still.

Fill in your email to sign up.