
Arkime
7.3#1 in digital forensics softwareFree planFree planWebAPILinuxSelf-hosted
Visit

| Fact | Arkime | Paraben E3 Forensic Platform |
|---|---|---|
| Founded | 2012 | 1999 |
| Integrations | Arkime uses OpenSearch or Elasticsearch for indexed metadata and offers WISE threat-intelligence integration. | E3 supports Cellebrite XML and UFD processing, GrayKey data parsing, Passware imports, and Relativity exports including load files and RSMF. |
| Purpose | Arkime is an open-source network analysis and session search tool that passively watches network traffic and creates searchable session records. | The E3 Forensic Platform is a complete digital investigation solution for professionals in digital forensics, incident response, OSINT, cyber, and eDiscovery. |
| Security | The architecture guide recommends restricting database and viewer ports with firewall rules and routing operator access through a central viewer, potentially behind a reverse proxy. | E3 remote imaging uses TLS version 1.2 to protect data in transit. |
Arkime suits teams that need to search and inspect network sessions and can provide OpenSearch or Elasticsearch for metadata storage. It is designed for self-hosted use, with Linux installation guidance and a container guide.
E3 is aimed at corporate, law-enforcement, government, and consulting investigators handling digital evidence. Users should check its Windows system requirements before choosing it.