Arkime
7.3#1 in digital forensics softwareFree planFree planWebAPILinuxSelf-hosted
VisitArkime vs Tsurugi Linux
Tsurugi Linux
5.8#24 in digital forensics softwareFree planFree planLinux
VisitWhat both publish
| Fact | Arkime | Tsurugi Linux |
|---|---|---|
| Deployment | The installation guide covers Linux, recommends Debian or Ubuntu LTS, and also links to a container installation guide. | It can run in live mode, though its main goal is to be installed as a default forensics lab. |
| Founded | 2012 | 2018 |
| Purpose | Arkime is an open-source network analysis and session search tool that passively watches network traffic and creates searchable session records. | Tsurugi Linux is a customized distribution for digital forensics, incident response, malware analysis, and OSINT. |
Arkime plans
- ArkimeFree
Tsurugi Linux plans
- Tsurugi Linux [LAB]Free
Pick Arkime if…
Arkime suits teams that need to search and inspect network sessions and can provide OpenSearch or Elasticsearch for metadata storage. It is designed for self-hosted use, with Linux installation guidance and a container guide.
Pick Tsurugi Linux if…
Tsurugi Linux is intended for educational use and for law enforcement and professionals working in forensics, incident response, malware analysis, or OSINT.