Welcome to the Home of Wombat Forensics!

Wombat Forensics is the name for my "company", but really it is just the name for my forensic gui tool that I have been working on in my free time. I work in DFIR for my day job and prefer Linux as my operating system of choice. I found there were no good gui forensic tools available at the time, so I decided to develop a forensic gui tool which can be used on Linux.

While developing this tool, I have also been developing other tools as I determined there wasn't a tool available on Linux that I liked or suited my needs. As such all these tools were/are hosted on Github. But I was annoyed when they were bought by Microsoft, and then doubly annoyed by the AI code scraping that was going to occur. Not that my code is anything special, but it is more the principle of the thing. So to remove my code off of github, I decided to migrate my repositories to fossil and then self host them by buying a domain and buying a small virtual host with which to access my repositories on my own.

With all that being said, this site and the repos are a work in progress and once I get them configured, I will post them below along with a description and information regarding each repository.


Wombat Forensics - Linux GUI forensic tool, similar in scope to X-Ways, EnCase, Autopsy, etc.


Wombat Tools - set of command line tools for use with a custom forensic imager and custom logical imager using walafus, zstd, and blake3 which is integrated with wombat forensics and can also be used on their own.


Wombat Hasher - Command Line Hash List and Hash Comparison tool compatible with wombatforensics hash lists and hash matching using the BLAKE3 hash.


Wombat Registry - View Registry Files, Tag Values, and Generate Reports.


Wombat Mail Viewer - Review, Tag, and Generate Report for MBOX, PST, OST, MSG, and EML email messages.


Wombat SQLite Viewer - SQLite Forensic Tool with tagging and report generation.


Wombat Jmp List Viewer - JmpList Viewer with tagging and report generation.


Wombat HTML Viewer - Fox Toolkit doesn't have an small HTML viewer, so this is an attempt to create one.


Wombat Tag Manager - Tag Manager for all Wombat Forensic Tools.


Wombat Reporter - Report Generator and Previewer for all Wombat Forensic Tools.


Mark's Forensic Linux Boot Disk - Arch Linux based forensic boot disk with built in forensic tools.


If you have stumbled onto to this page and have any questions or comments, feel free to reach out to me: developer at wombatforensics dot com