Scholarlink

This study evaluates the performance of digital forensic tools on Kali Linux across multiple categories, including imaging tools (dd and Guymager), analysis tools (bulk extractor and autopsy), memory dumping (dd and memdump), password cracking tools (fcrackzip and John the Ripper), network scanning tools (Nmap and Nikto) and penetration testing tools (Metasploit Framework and Armitage). Findings reveal variations in tool performance with test time ranging from 0.06 s to 66 s for password cracking, 11 s to 25.23 s for data carving, 25.2 s to 63.28 s for analysis tools, and 1:46:09 h to 3:44:59 h for imaging tools. Most tools utilize terminal interfaces, with a few offering GUI options, and the analysis provides forensic investigators with an overview of tool capabilities, versions, and update status to inform open-source tools selection for digital investigations.

错误：搜索内容不能为空，请输入英文关键词
错误：关键词超出字数限制，请精简
高级检索

Performance Evaluation of Widely Used Digital Forensic Tools on Kali Linux

  • 会议论文

  • 发表日期：

    2026年

查看全文
  • Erasmus Mfodwo,
  • Juli Dutta,
  • Pacific Stensland,
  • Cihan Varol

摘要

This study evaluates the performance of digital forensic tools on Kali Linux across multiple categories, including imaging tools (dd and Guymager), analysis tools (bulk extractor and autopsy), memory dumping (dd and memdump), password cracking tools (fcrackzip and John the Ripper), network scanning tools (Nmap and Nikto) and penetration testing tools (Metasploit Framework and Armitage). Findings reveal variations in tool performance with test time ranging from 0.06 s to 66 s for password cracking, 11 s to 25.23 s for data carving, 25.2 s to 63.28 s for analysis tools, and 1:46:09 h to 3:44:59 h for imaging tools. Most tools utilize terminal interfaces, with a few offering GUI options, and the analysis provides forensic investigators with an overview of tool capabilities, versions, and update status to inform open-source tools selection for digital investigations.