SIFT Workstation

About tool:
SANS' free Ubuntu-based digital forensics and incident response distribution. Standard environment for chain-of-custody-grade evidence handling.

Website: https://www.sans.org/tools/sift-workstation/

Similar Tools

Debian-based offensive-security distribution preloaded with hundreds of OSINT, reconnaissance and forensics tools. The default analyst VM for red-team-leaning workflows.
Debian-based security distribution focused on penetration testing, digital forensics and OSINT, with built-in privacy and anonymity tooling.
Mike Bazzell's OSINT resource hub: tool collection, search-engine forms, training courses and the IntelTechniques OSINT virtual machine.
Knowledge base of adversary tactics, techniques and procedures observed in the wild. Standard taxonomy for mapping OSINT findings to threat behaviour.
Australian OSINT firm publishing dozens of free in-house tools (alt-tech search, profile checkers, data converters) alongside commercial training and Nexus Xplore.