Your download link is at the very bottom of the page... always.

Processed through Paypal
No account required.

Donate Bitcoin to this wallet:
Donate Ethereum to this wallet:
Donate Litecoin to this wallet:

Buy our over-priced crap to help keep things running.

Join our Facebook groupFollow us on TwitterFollow us on InstagramOur RSS FeedJoin us on TikTokJoin us on LinkedIn

 Home » Freeware Downloads » Surveillance, Forensics, Evidence   
  File Name Rating Downloads
Last Update/Developer
Agent DVR v3.8.0.0
Agent DVR v3.8.0.0 A free, super advanced video surveillance platform for Windows, macOS, Linux, Raspberry Pi and Docker. Agent has a unified user interface that runs on all modern computers, mobile devices and even Virtual Reality. Agent DVR supports remote access from anywhere with no port forwarding required. (Note from Remote access requires a very cheap subscription. Everything else is free for personal use.) Agent DVR is translated to: English, Čeötina, Deutsch, EspaŮol, FranÁaise, Hindi, Italiano, Nederlands, Polskie, PortuguÍs, Русский, عربي, 中文, 繁体中文, বাংলা Installing Agent DVR on Windows: To install run the setup utility which will check the dependencies, download the application and install the service and a tray helper app that discovers and monitors Agent DVR network connections. Agent for Windows runs on Windows 7 SP1+. Requires the .net framework v4.7+. To run on Windows Server you will need to enable Windows Media Foundation. For server 2012, install that from here. Installing Agent DVR on MacOS/Linux/RPi Open up a terminal and go to the directory you want to install Agent DVR. The install script will create a folder called "AgentDVR". This script works on macOS (>= 10.14) and most versions of 64 bit Linux (Supported ARM 32 and 64 bit for Raspberry Pi). Copy and paste this setup script into your terminal and press Enter (you may need to install curl first on Linux - run "sudo apt-get install curl"): bash <(curl -s "") Install may take a while as it will need to download and build FFMPEG. You may need to enter your password as part of the build process. For install related bug reports please see our issues tracker. For issues with AgentDVR itself please see our Reddit forums Open a web browser at http://localhost:8090 to start configuring ...
5/5 344 Feb 28, 2022
ContaCam v9.9.19
ContaCam v9.9.19 This Free Video Surveillance and Live Webcam software for Windows is extremely easy on system resources, and does not contain unnecessary bloat. It is fast, light, and versatile enough to meet all your security needs while still being very user friendly and able to run on even the most moderate systems. Features Supported from Windows 7 up to Windows 10. The program is available in the following languages: English, Chinese, French, German, Italian, Portuguese, Russian and Spanish. CCTV security surveillance with motion detection recording. Motion detection events presented as animated thumbnails in web browser, check the street demo and the home demo Motion detection actions like sending email with attached movement file or running any external program. Daily summary video creation option. Manual records and snapshots (video game captures, movie recording, ...). Integrated web server with password protection Supported are Webcams, WDM, DV devices and Network / IP cameras (streaming with RTSP / H.264 / H.265 or MJPEG) Integrated with Plate Recognizer for license plate recognition. Do person detection with DeepQuest AI / DeepStack. Remote watching by enabling port forwarding or using a Cloud Client (Dropbox, ...). Unlimited parallel cameras setup. Re-stream a video source through the web server. Can be started as a Windows Service to keep running and recording even if not logged in. Audio support for USB webcams, capture cards and rtsp ip cameras. Changes: 9.9.19 (August 25th 2021) - Introduced profiles to configure up to 4 commands per camera - Added magnetic/snapping borders to the camera windows - Updated internal ...
5/5 6,176 Oct 22, 2021
DumpItBlue+ v2.0.2
DumpItBlue+ v2.0.2 A Google Chrome extension that helps to dump Facebook stuff for analysis or reporting purposes. This extension is a complement to the DumpItBlue tool (now abandoned) and contain small but useful functionalities like scrolling, expanding, removing, isolate scrollable area, etc. What is it? This extension was developed for Google Chrome browser. It is activated when you are on a Facebook page. Provides some basic functions like scrolling, expanding, removing, dumping, isolating and more. When you are on a Facebook page and you open DumpItBlue+, it will try to get the Current Facebook ID related to the page in the current tab. It should work for any Facebook profile and even from your Facebook Messenger. It will then display the Facebook ID of the current counterpart. You can select and copy the Facebook ID from the textfield. It will also try to the determine the profile type of the page and preselect options in the interface. You must know that any modification made by this extension only apply to the cached copy of the page in your local browser. Any modification may be reversed by refreshing the current page. Scrolling This function will scroll the page or the scrollable area to display additional content. It can scroll: Page to bottom: This option is for page that scroll vertically to the bottom. Likes in popup: This option is for Likes popup that appears when you click on Likes link. Messenger current chat: This option is for Messenger. It will scroll a conversation to the top. Messenger contacts: This option is for Messenger. It will scroll the contact list to the ...
5/5 3,745 Feb 18, 2022
Alain Rioux
Electronic Evidence Workbook 2022
Electronic Evidence Workbook 2022 Used in Craig Ball's three credit E-Discovery and Digital Evidence course at the University of Texas Law School, UT Computer Science School and UT School of Information. From the author: "The chapters on processing are extensively revamped. Iím hell bent on making encoding understandable, and Iíve incorporated the new Processing Glossary I wrote for the EDRM. Glossaries are no oneís idea of light reading, but I hope this one proves a handy reference as the students cram for the five quizzes and final exam theyíll face." "Recognizing that a crucial component of competence in electronic discovery is mastering the arcane argot of legaltech, Iíve added Vital Vocabulary lists throughout, concluded chapters with Key Takeaway callouts and, for the first time, broken the Workbook into volumes such that this release covers just the first eight classes, almost entirely Information Technology." "Come Spring Break in mid-March, Iíll release the revamped omnibus volume adding new practical exercises in Search, Processing, Production, Review and Meet &amp; Confer and introducing new tools. Because university students use Mac machines more than Windows PCs, the exercises ahead employ Cloud applications so as to be wholly platform-independent. The second half of the course folds in more case law to the relief of law students and chagrin of CS and IS students. The non-law students do a great job on the law but approach it with trepidation; the law students kiss the terra firma of case law like white-knuckled passengers off a turbulent flight." "Though written for grad students, the Workbook is also written for you, Dear Reader. If youíve longed to learn more about information technology and e-discovery but never knew quite where or how to start, perhaps the 2022 Workbook is your gateway. The law students at UT Austin pay almost $60,000 per year for their educations; ...
5/5 348 Apr 11, 2022
Craig D. Ball, P.C.
FBCacheView v1.21
FBCacheView v1.21 A simple tool that scans the cache of your Web browser (Internet Explorer, Firefox, or Chrome), and lists all images displayed in Facebook pages that you previously visited, including profile pictures, images uploaded to Facebook, and images taken from other Web sites. For every Facebook image, the following information is displayed: URL of the image, Web browser that was used to visit the page, image type, date/time of the image, visit time, image file size, and external URL (For images taken from another Web site). System Requirements And Limitations This utility works in any version of Windows, starting from Windows XP and up to Windows 10. Both 32-bit and 64-bit systems are supported. The following Web browsers are supported: Internet Explorer, Mozilla Firefox, SeaMonkey, and Google Chrome. Opera is not supported because it stores the JPEG images in Webp format. FBCacheView won't work if you configure your Web browser to clear the cache after closing it. It's recommended to close all windows of your Web browser before using FBCacheView, to ensure that all cache files are saved to the disk. Versions History Version 1.21: Updated to work properly with the cache partitioning of Chrome and Firefox. Start Using FBCacheView FBCacheView doesn't require any installation process or additional DLL files. In order to start using it, simply run the executable file - FBCacheView.exe After running it, FBCacheView begins to scan the cache of your Web browser and displays the list of all images loaded from Facebook Web pages. You may need to wait up to a few minutes until the scanning process is finished. After the scanning process is finished, you can also watch the image in the lower pane of FBCacheView, by selecting the ...
5/5 7,386 Jul 13, 2021
Nir Sofer
iSpy iSpy uses your webcams and microphones to detect and record movement or sound and provides security, surveillance, monitoring and alerting services. Any media that is captured is compressed to flash video and made available, securely over the web. iSpy can be setup to run on multiple computers simultaneously. iSpy is free, open-source software, so if you want it to do anything else, please download the source code and customise it to your requirements. With iSpy you can: Connect and monitor as many cameras and microphones as you like. Import and export object lists to share with colleagues. Connect multiple computers in a group and manage over the web Install iSpy Server and publish your webcam to other instances of iSpy, over your network and to the web Detect, highlight, track and record movement Detect loitering Customise movement detection areas on your cameras Detect and record sound Run any program or send an email or SMS alert when movement or sound is detected Run any program or send an email or SMS alert when movement or sound is not detected (monitor machinery or staff activity) Receive email movement alerts with attached frame grab images from your webcams Periodically receive image grabs via email from your webcams Connect to any device, even webcams attached to other computers with JPEG, MJPEG, IP Cam, webcam and AVI file support Watch live and recorded media over the web (through this website) and also via mobile devices Access and control iSpy remotely Password protect iSpy and hide it in the System Tray Schedule sound and video capturing to start and stop automatically Time-lapse record from any camera Motion track and count moving objects Connect multiple instances of iSpy and iSpy server running on different computers to this website and view all aggregated media online Create groups, invite friends and share access to your webcams and microphones Receive email alerts if your connection goes offline Download the source ...
0/5 7,735 Mar 03, 2015
JumpListsView v1.16
JumpListsView v1.16 JumpListsView is a simple tool that displays the information stored by the 'Jump Lists' feature of Windows 7 and Windows 8. For every record found in the Jump Lists, the following information is displayed: The filename that the user opened, the date/time of the file opening event, the ID of the application that was used to open the file, the size/time/attributes of the file on the time that the file was opened, and more... You can also export the Jump Lists records to csv/tab-delimited/xml/html file. System Requirements This utility works on Windows 7, Windows 8, and Windows 10. Both 32-bit and 64-bit systems are supported. On previous version of Windows, the 'Jump Lists' feature doesn't exist, and thus JumpListsView won't display any data, but... You can still read data from external hard-drive containing installation of Windows 7/8 by using the 'Advanced Options' window. Jump Lists Folders The jump lists information is stored under the following folders: C:\Users\[User Profile]\AppData\Roaming\Microsoft\Windows\Recent\AutomaticDestinations C:\Users\[User Profile]\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations Currently, JumpListsView only reads the information from the AutomaticDestinations folder. Changes: UPDATED 03/26 Patch My PC Updater Scans for outdated programs &amp; patches them. Start Using JumpListsView JumpListsView doesn't require any installation process or additional dll files. In order to start using it, simply run the executable file - JumpListsView.exe After running JumpListsView.exe, it scans the jump lists on your system and displays the information on the main window. You can select one or more items, and then export them to xml/html/csv/tab-delimited file. You can also copy the selected items to the clipboard (CTRL+C) and the paste the data into Excel or other spreadsheet application. JumpListsView Columns Filename and Full Path: The filename that the user probably opened. Record Time: Specifies the date/time that the user probably opened the specified filename. Created Time, Modified Time, ...
5/5 3,473 Sep 14, 2019
Nir Sofer
LastActivityView v1.35
LastActivityView v1.35 LastActivityView is a tool for Windows operating system that collects information from various sources on a running system, and displays a log of actions made by the user and events occurred on this computer. The activity displayed by LastActivityView includes: Running .exe file, Opening open/save dialog-box, Opening file/folder from Explorer or other software, software installation, system shutdown/start, application or system crash, network connection/disconnection and more... You can easily export this information into csv/tab-delimited/xml/html file or copy it to the clipboard and then paste into Excel or other software. System Requirements This utility works on any version of Windows, starting from Windows 2000 and up to Windows 10. Both 32-bit and 64-bit systems are supported. Known Limitations This tool gathers information from various sources, including the Registry, the events log of Windows, the Prefetch folder of Windows (C:\windows\Prefetch), the MiniDump folder of Windows (C:\Windows\Minidump), and more... The accuracy and the availability of the information displayed by LastActivityView might be different from one system to another. For example, if the user or a software makes changes in the Registry, the action time displayed by LastActivityView might be wrong, because it's based on the modified time of some Registry keys. Also, for every type of action/event, there is some limitation according to the way that the information is saved in the system. For example, the 'Select file in open/save dialog-box' action is limited for one action of every file extension, so if the user opened 2 .doc files with the open/save dialog-box, only the last one will be displayed. Versions History Version 1.35: Added 'Data Source' column, which displays the Registry key or filename where the activity information was found. Added 'Add Header Line To CSV/Tab-Delimited File' option (Turned on by default). Start Using LastActivityView LastActivityView doesn't require any installation process or additional dll ...
5/5 7,368 Aug 01, 2019
Nir Sofer
MobileFileSearch v1.42
MobileFileSearch v1.42 A tool for Windows that allows you to search files inside a mobile device (Smartphone or Tablet) plugged to the USB port on your computer, with Media Transfer Protocol (MTP). You can search files by their size, their created time, their modified time, or their name (using wildcard). After finding the files on your Smartphone / Tablet, you can optionally delete them, copy them to a folder on your computer, or export the files list to csv/tab-delimited/html/xml/JSON file. MobileFileSearch also allows you to activate the search from command-line and then export the result to a file, or copy the found files to the desired folder on your computer. System Requirements This tool works on any version of Windows, starting from Windows Vista and up to Windows 11. Both 32-bit and 64-bit systems are supported. Be aware that this tool is useful if your Smartphone/Tablet uses the Media Transfer Protocol (MTP) to view and transfer files via USB. If you have an option to connect your Smartphone/Tablet as mass storage device (with drive letter), then this tool is not needed, and you can search files with any other search tool, like SearchMyFiles. Changes v1.42 Added 'Copy Explorer Path' option, which copies to the clipboard the Windows Explorer path of the selected file. If you paste this path string into the path text-box of Explorer Windows, the file will be opened with the default program. Start Using MobileFileSearch MobileFileSearch doesn't require any installation process or additional DLL files. In order to start using it, simply run the executable file - MobileFileSearch.exe After running MobileFileSearch, the 'Search Options' window is opened, you should choose the desired search configuration (see below) and then click the 'Start Search' button to start searching files in your Smartphone/tablet. Search Options The following options ...
5/5 2,181 Mar 18, 2022
Nir Sofer
RDP-Parser v1.1
RDP-Parser v1.1 RDP-Parser extracts RDP activities from Microsoft Windows Event Logs. This tool has been designed for any investigation involving exploitation of RDP service. It supports Evt and Evtx formats. How it works This is a command line tool and there is no installer. You should unzip and copy the program where you want to use it. Open a command line in the directory where the program is. You can print help message using "RDP-Parser --h": More details about options: --p: By default, RDP-Parser will check in the current directory, so you can copy the program in the same folder as the Event Logs you want to parse. If there is no given path and current directory doesn't contain Event Logs, RDP-Parser will copy the live system Event Logs in the current directory. This command require admin priviledge and it doesn't work for old format logs. --t: There are three types of report: 1: minimal: This is the default type. The report will contain following columns: TimeGenerated, Source, EventID and Details. Only events with public IP addresses will be extracted and all details will be removed except IP address. 2: minimal with all IP addresses: Same as type 1, but it also includes private IP addresses. 3: normal: The report will contain all columns and all details. Columns are: TimeGenerated, Timewritten, Computer, Source, RecordNumber, Category, EventID, EventType and Details. Only events with public IP addresses will be extracted but all details will be included. 4: normal with all IP addresses: Same as type 3, but it also includes private IP addresses. 5: full: All events related to RDP or login activities will be included. Included events IDs are: ...
5/5 2,664 Feb 27, 2019
Alain Rioux
ShellBagsView v1.30
ShellBagsView v1.30 Each time that you open a folder in Explorer, Windows automatically save the settings of this folder into the Registry. This utility displays the list of all folder settings saved by Windows. For each folder, the following information is displayed: The date/time that you opened it, the entry number, display mode (Details, Icons, Tiles, and so on...), the last position of the window, and the last size of the window. System Requirements This utility works on Windows XP, Windows Server 2003/2008, Windows Vista, Windows 7, Windows 8.x, and Windows 10. Previous versions of Windows are not supported. Registry Keys Windows uses the following Registry keys to save the folders information: HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam HKEY_CURRENT_USER\Software\Microsoft\Windows\Shell HKEY_CURRENT_USER\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell (Only in Windows Vista) Version 1.30: Added option to connect a remote computer on your network. You can view the Explorer folders of the users currently logged on on the remote machine, as well as modify their view mode (Tiles, Details, Content, List, Small Icons, Medium Icons, Large Icons) In order to connect a remote computer, simply go to the 'Advanced Options' window (F7), choose 'Remote Computer' as data source, type the name or IP address of the remote computer, and press the OK button. Added 'User Name' column, which displays the user name when connecting a remote computer. Using ShellBagsView ShellBagsView doesn't require any installation process or additional DLL files. In order to start using it, simply run the executable file - ShellBagsView.exe After running it, the main window of ShellBagsView displays the list of all folder entries in your system. Command-Line Options /stext <Filename> Save the list of folders into a regular text file. /stab <Filename> Save the list of folders into a tab-delimited text file. /scomma <Filename> Save the list of folders ...
5/5 1,595 Jan 12, 2022
Nir Sofer
VideoCleaner v5.8
VideoCleaner v5.8 Free Forensic Video Enhancement Software and tamper detection Relied upon by forensic experts, law enforcement, and investigators worldwide. Developed by programmers from around the globe and presented by Forensic Protection. VideoCleaner is professional grade, cost-free, ad-free, and open source. Solutions for most video restoration and enhancement problems Here are a few examples, and their corresponding VideoCleaner solution (denoted as feature SECTION - feature GROUP - specific feature). PROBLEM...................................................................... SOLUTION Video details appear fuzzy............................................... MAIN - TOOLS - Unsharpen, Sharpen strength Video details are compressed or expanded..................... MAIN - TOOLS - Video Contrast strength Video colors are compressed or expanded...................... MAIN - TOOLS - Color Contrast strength Video colors are too subtle or intense.............................. MAIN - TOOLS - Color Saturation strength Eliminate glare and steady lights...................................... MAIN - TOOLS - Remove Brightest Strength Distracting flashing emergency lights............................... MAIN - TOOLS - Suppress HotSpot Strength Video appears extremely dark or overly bright................. MAIN - TOOLS - Automatic histogram Distant details are lost in the darker areas....................... MAIN - TOOLS - Backlight compensation Video is cluttered with tiny random specks....................... MAIN - TOOLS - Denoise Portions of the scene are out of focus.............................. MAIN - TOOLS - Focus &amp; Deblur Lens License plate, text or logo is hard to read......................... MAIN - FORENSIC - Canny, Sobel, Edge Filter Mode Movement or color changes are too faint......................... MAIN - FORENSIC - RGBamplifier strength Hard to detect moving objects/people.............................. MAIN - FORENSIC - Isolate Scene Changes Can't read stationary signage or license plate.................. MAIN - FORENSIC - Frame Averaging Only examine complete frames (iFrames)........................ MAIN - FORENSIC - iFrames isolation Video's authenticity is suspect.......................................... MAIN - ANALYSIS - Extract &amp; Test See and read file's characteristics.................................... MAIN - ANALYSIS - File Information Scene is too dark or too bright.......................................... MAIN - EQUALIZER and CURVE Scene looks like a mosaic of tiny squares........................ MAIN - DEBLOCKING Video contains repeated frames....................................... PROPERTIES - DUPLICATE removal Audio is ...
5/5 4,207 Nov 29, 2019
Doug Carner
WhoisLogin v1.0
WhoisLogin v1.0 Who logged into your computer? WhoisLogin takes a webcam photo automatically after successful login in startup or when the user have unlocked the screen. The photos will be stored in the applicaton's directory with the time naming. You may use WhoisLogin.bat to add program to startup or terminate it. Click here to visit the author's website.
5/5 1,138 Feb 03, 2021
Aulap Software
Windows File Analyzer v2.10.0
Windows File Analyzer v2.10.0 Tool for forensic file analysis This application decodes and analyzes some special files used by Windows OS. In these files is interesting information for forensic analysis. Every analysis results can be printed in user-friendly form. It's designed in Multiple Document Interface. Here are described individual analyzers: Windows XP Thumbnail Database Analyzer This analyzer reads Thumbs.db file and displays its content with stored data include image preview. ACDSee Thumbnail Database Analyzer This analyzer reads ACDSee *.fpt file and displays its content with stored data include image preview. Google Picasa Thumbnail Database Analyzer This analyzer reads Picasa *.db file and displays its content with stored data include image preview. FastStone Viewer Thumbnail Database Analyzer This analyzer reads fsviewer.db file and displays its content with stored data include image preview. HP Digital Imaging Thumbnail Database Analyzer This analyzer reads *.db or *.dat file and displays its content with stored data include image preview. Prefetch Analyzer It reads files stored usually in Prefetch folder and diggs out stored informaton. Shortcut Analyzer This tool reads all shortcut files in specified folder and displays data stored in them. Index.DAT Analyzer This analyzer reads specified Index.Dat file and displays its content. Index.Dat files store usually data of Internet Explorer cookies, temporary files or history. Recycle Bin Analyzer This analyzer decodes and displays Info2 files that hold WinXP recycle bin content information or $I files holding Vista and above recycle bin information. Read manual. OS compatibility Windows XP Windows 2003 Windows Vista Windows 7 Windows Server 2008 Windows 8 Windows ...
5/5 651 Sep 28, 2021
XL-Parser v1.3.2
XL-Parser v1.3.2 XL-Parser is a tool for data extraction and analysis. Input can be a directory, a file or multiple files, or the clipboard. File formats: XL-Parser supports many file formats like plain text, unicode, text inside binaries, doc and docx, xls and xlsx, evt and evtx, pdf, msg and text inside zip files. You can even extract a file using a different parser. For example, you can extract data from a docx file, but open it as a zip, so you will have access to xml file inside it. File filters: If the input is a directory, you can include the subfolder or not. You can also set a combinaison of filters: keyword or regex that match filename, size of the file, last modified time or last accessed time. Your combinaison of filters can be save for a later use. Extraction: You can extract data using a combinaison of keyword or regex or use the special objects already set which are: IPv4, IPv6, URLs, Emails, Hostnames, Domain names, MAC addresses or credit card numbers. XL-Parser provides a lot of options for extraction and for report. Web log analysis: One specialty of XL-Parser is web log analysis. When you analyse web logs, you can extract data using anything that is in the logs. For example, you can extract all requests related to a particular IP address, but you cannot search for requests related to an ISP, because this information is not in the log. XL-Parser provides you the way to do this and much more. First, XL-Parser will help you parse the log and build a SQlite database from it. When it's done, XL-Parser provides a bunch of functions to query the database and find suspicious activities. Cool! ...
5/5 3,572 Feb 27, 2019
Alain Rioux
Showing rows 1 to 15 of 15 Showing Page 1 of 1  1 Copyright (c) 2022

Tweets by @GeekOnTheLoose