License(s)

The SANS Investigative Forensic Tookit is a linux distribution, a collection of many applications and scripts, all with various licenses. Most tools and scripts are installed via debian packages that are presumably built by their authors, however some packages are not built by the original authors.

Below is an attempt to identify some of the tools that are known to not be built by the original author but by someone in the community. While these tools exist on SIFT, they have their own project website and associated licenses. Not all tools will be listed here.

Packages

Name License Install Method Website
afterglow GNU GPL v2 .deb (SIFT REPO) https://github.com/zrlram/afterglow
binplist Apache License, Version 2.0 .deb (SIFT REPO) http://code.google.com/p/binplist/
bulk_extractor Public Domain Software .deb (SIFT REPO) http://digitalcorpora.org/downloads/bulk_extractor
dumppig GNU GPL v2 .deb (SIFT REPO) https://code.google.com/p/dumbpig/
flowgrep BSD 3-clause .deb (SIFT REPO) http://www.monkey.org/~jose/software/flowgrep/
libbde LGPLv3+ .deb (SIFT REPO) https://github.com/libyal/libbde
libdata-hexify-perl Perl 5 License / GNU GPL .deb (SIFT REPO) http://search.cpan.org/~jv/Data-Hexify/lib/Data/Hexify.pm
libesedb LGPLv3+ .deb (SIFT REPO) https://github.com/libyal/libesedb
libevt LGPLv3+ .deb (SIFT REPO) https://github.com/libyal/libevt
libevtx LGPLv3+ .deb (SIFT REPO) https://github.com/libyal/libevtx
libewf LGPLv3+ .deb (SIFT REPO) https://github.com/libyal/libewf
libfile-mork-perl MIT .deb (SIFT REPO) http://search.cpan.org/~simonw/File-Mork-0.3/lib/File/Mork.pm
libfvde LGPLv3+ .deb (SIFT REPO) https://github.com/libyal/libfvde
libfwsi LGPLv3+ .deb (SIFT REPO) https://github.com/libyal/libfwsi
liblightgrep GNU GPL .deb (SIFT REPO) https://github.com/jonstewart/liblightgrep
liblnk LGPLv3+ .deb (SIFT REPO) https://github.com/libyal/liblnk
libmac-propertylist-perl Perl 5 License / GNU GPL .deb (SIFT REPO) http://search.cpan.org/~bdfoy/Mac-PropertyList-1.40/lib/Mac/PropertyList.pm
libmsiecf LGPLv3+ .deb (SIFT REPO) https://github.com/libyal/libmsiecf
libolecf LGPLv3+ .deb (SIFT REPO) https://github.com/libyal/libolecf
libpff LGPLv3+ .deb (SIFT REPO) https://github.com/libyal/libpff
libqcow LGPLv3+ .deb (SIFT REPO) https://github.com/libyal/libqcow
libregf LGPLv3+ .deb (SIFT REPO) https://github.com/libyal/libregf
libsmdev LGPLv3+ .deb (SIFT REPO) https://github.com/libyal/libsmdev
libsmraw LGPLv3+ .deb (SIFT REPO) https://github.com/libyal/libsmraw
libvhdi LGPLv3+ .deb (SIFT REPO) https://github.com/libyal/libvhdi
libvmdk LGPLv3+ .deb (SIFT REPO) https://github.com/libyal/libvmdk
libvshadow LGPLv3+ .deb (SIFT REPO) https://github.com/libyal/libvshadow
libxml-entities-perl Not Specified .deb (SIFT REPO) http://search.cpan.org/~msergeant/XML-LibXML-1.00/LibXML.pm
log2timeline-perl GNU GPL v3 .deb (SIFT REPO) http://log2timeline.net/
mac-robber GNU GPL v3 .deb (SIFT REPO)  
maltegoce Free for Non-Commercial Use .deb (SIFT REPO) https://www.paterva.com/web6/products/download2.php
mantaray GNU GPL v3 .deb (SIFT REPO) http://mantarayforensics.com/
ntdsxtract GNU GPL v3 .deb (SIFT REPO) https://github.com/csababarta/ntdsxtract
ntopng GNU GPL v3 .deb (SIFT REPO) http://www.ntop.org/products/traffic-analysis/ntop/
pdf-tools Not Specified .deb (SIFT REPO) http://blog.didierstevens.com/programs/pdf-tools/
pyelftools Unlicensed - Public Domain .deb (SIFT REPO) https://github.com/eliben/pyelftools
python-bencode BitTorrent Open Source Lic .deb (SIFT REPO) http://www.bittorrent.com/
python-construct MIT .deb (SIFT REPO) http://construct.readthedocs.org/en/latest/
python-dfvfs Apache License, Version 2.0 .deb (SIFT REPO) https://github.com/log2timeline/dfvfs
python-dpkt BSD 3-clause .deb (SIFT REPO)  
python-plaso Apache License, Version 2.0 .deb (SIFT REPO) https://github.com/log2timeline/plaso
python-pyparsing MIT .deb (SIFT REPO) http://pyparsing.wikispaces.com/
pytsk Apache License, Version 2.0 .deb (SIFT REPO) https://github.com/py4n6/pytsk
re2 BSD-style .deb (SIFT REPO) https://github.com/google/re2
regripper GNU GPL v3 .deb (SIFT REPO)  
sleuthkit Multiple .deb (SIFT REPO) http://www.sleuthkit.org/sleuthkit/licenses.php
volatility GNU GPL v2 .deb (SIFT REPO) https://code.google.com/p/volatility/
windows-perl GNU GPL v2 .deb (SIFT REPO) https://github.com/keydet89/RegRipper2.8
xmount GNU GPL v3 .deb (SIFT REPO)  

Scripts

Name License Install Method Website
densityscout MIT git repo https://github.com/sans-dfir/sift-files
extract_mft_record_slack.py Apache License, Version 2.0 git repo https://github.com/sans-dfir/sift-files
ga-parser.py GNU GPL git repo https://github.com/sans-dfir/sift-files
java_idx_parser Apache License, Version 2.0 git repo https://github.com/sans-dfir/sift-files
jobparser.py GNU GPL git repo https://github.com/sans-dfir/sift-files
page_brute Not Specified git repo https://github.com/matonis/page_brute
pe_carver Apache License, Version 2.0 git repo https://github.com/sans-dfir/sift-files
pescanner.py GNU GPL v3 git repo https://github.com/sans-dfir/sift-files
shellbags.py Apache License, Version 2.0 git repo https://github.com/sans-dfir/sift-files
shimcacheparser.py Apache License, Version 2.0 git repo https://github.com/sans-dfir/sift-files
sqlparser.py GNU GPL git repo https://github.com/sans-dfir/sift-files

Volatility Plugins

Name License Install Method Website
apihooksdeep.py GNU GPLv2+ git repo https://github.com/sans-dfir/sift-files
autoruns.py Not Specified git repo https://github.com/sans-dfir/sift-files
baseline.py GNU GPLv2+ git repo https://github.com/sans-dfir/sift-files
chromehistory.py GNU GPLv2+ git repo https://github.com/sans-dfir/sift-files
editbox.py GNU GPLv2+ git repo https://github.com/sans-dfir/sift-files
firefoxhistory.py GNU GPLv2+ git repo https://github.com/sans-dfir/sift-files
idxparser.py Apache License, Version 2.0 git repo https://github.com/sans-dfir/sift-files
malfinddeep.py GNU GPLv2+ git repo https://github.com/sans-dfir/sift-files
malprocfind.py GNU GPLv2+ git repo https://github.com/sans-dfir/sift-files
malsysproc.py GNU GPLv2+ git repo https://github.com/sans-dfir/sift-files
mimikatz.py GNU GPLv2+ git repo https://github.com/sans-dfir/sift-files
prefetch.py GNU GPLv2+ git repo https://github.com/sans-dfir/sift-files
pstotal.py GNU GPLv2+ git repo https://github.com/sans-dfir/sift-files
sqlite_help.py GNU GPLv2+ git repo https://github.com/sans-dfir/sift-files
ssdeepscan.py GNU GPLv2+ git repo https://github.com/sans-dfir/sift-files
trustrecords.py GNU GPLv2+ git repo https://github.com/sans-dfir/sift-files
uninstallinfo.py GNU GPLv2+ git repo https://github.com/sans-dfir/sift-files
usnparser.py GNU GPLv2+ git repo https://github.com/sans-dfir/sift-files