
Arkime
7.3#1 in digital forensics softwareFree planFree planWebAPILinuxSelf-hosted
Visit

| Fact | Arkime | OSForensics |
|---|---|---|
| Purpose | Arkime is an open-source network analysis and session search tool that passively watches network traffic and creates searchable session records. | OSForensics is digital investigation software for extracting forensic data from computers. |
Arkime suits teams that need to search and inspect network sessions and can provide OpenSearch or Elasticsearch for metadata storage. It is designed for self-hosted use, with Linux installation guidance and a container guide.
OSForensics suits investigators who need to examine computer evidence, create case reports and maintain an audit trail. Its listed evidence sources include mobile file systems, disk images and memory dumps.