RecuperaBit VS DFIRMindMaps

What are some alternatives?

xfs_undelete - An undelete tool for the XFS filesystem.

awesome-incident-response - A curated list of tools for incident response

RELY - RELY (Name composed on project members Romy, Esther, Lucille and Yassir) is a python tool developed to help a Digital Forensics Triage procedure on some Microsoft Windows devices.

KapeFiles - This repository serves as a place for community created Targets and Modules for use with KAPE.

ansible-manage-lvm - Ansible role to manage LVM Groups/Logical Volumes

ccl_chrome_indexeddb - (Sometimes partial) Python re-implementations of the technologies involved in reading various data sources in Chrome-esque applications.

mac_apt - macOS (& ios) Artifact Parsing Tool

sysmon-config - Advanced Sysmon ATT&CK configuration focusing on Detecting the Most Techniques per Data source in MITRE ATT&CK, Provide Visibility into Forensic Artifact Events for UEBA, Detect Exploitation events with wide CVE Coverage, and Risk Scoring of CVE, UEBA, Forensic, and MITRE ATT&CK Events.

INDXRipper - Carve file metadata from NTFS index ($I30) attributes

EventTranscript.db-Research - A repo for centralizing ongoing research on the new Windows 10/11 DFIR artifact, EventTranscript.db.

PSNTFSPermissions - A PowerShell module for getting and managing NTFS permissions in a Windows Active Directory environment.

ntfsdump - An efficient tool for extracting files, directories, and alternate data streams directly from NTFS image files.