Arkime
7.3#1 in digital forensics softwareFree planFree planWebAPILinuxSelf-hosted
VisitArkime vs Guymager
What both publish
| Fact | Arkime | Guymager |
|---|---|---|
| Integrations | Arkime uses OpenSearch or Elasticsearch for indexed metadata and offers WISE threat-intelligence integration. | The maker lists Guymager as included on several forensic live CDs and virtual machines, including CAINE, TSURUGI, BACKBOX, Kali, GRML, ForLEx, SANS SIFT, and BitCurator. |
| Purpose | Arkime is an open-source network analysis and session search tool that passively watches network traffic and creates searchable session records. | Guymager is a forensic imager for acquiring media. |
Arkime plans
- ArkimeFree
Guymager plans
- GuymagerFree
Pick Arkime if…
Arkime suits teams that need to search and inspect network sessions and can provide OpenSearch or Elasticsearch for metadata storage. It is designed for self-hosted use, with Linux installation guidance and a container guide.
Pick Guymager if…
Guymager suits Linux users who need to acquire or clone storage devices and removable media for forensic work. It is available as a free, open-source imager.