Free Downloads

Sherlock Forensic Tools

Free forensic utilities built by investigators, for investigators. 20 years of courtroom-tested methodology in every tool.

Free forensic software from Sherlock Forensics: Android logical acquisition with chain of custody reporting, PST/OST email viewer with hash verification, file hash calculator (MD5, SHA1, SHA256, SHA512), metadata viewer/stripper for EXIF, PDF and Office documents. All tools produce SHA256 hashes for forensic integrity. Built by CISSP, ISSAP, ISSMP certified examiners in Vancouver.

Download

Desktop Forensic Tools

Coming Soon

Sherlock Acquire

Android logical acquisition tool. Extract contacts, SMS, photos, call logs and app data from Android devices via ADB with full forensic integrity.

  • Logical acquisition via ADB
  • SHA256 hash of all acquired data
  • Automated chain of custody report
  • Export to forensic standard formats
  • Detailed operation logging
Windows 10/11 v1.0
Coming Soon

Sherlock PST Viewer

Free PST and OST email archive viewer. Open, search and export emails without Outlook. Hash verification for forensic integrity.

  • Open PST and OST files
  • Full-text search across all emails
  • Export individual emails or batches
  • Attachment extraction
  • Hash verification per message
Windows 10/11 v1.0
Coming Soon

Sherlock Hash

Drag-and-drop file hash calculator. Compute MD5, SHA1, SHA256 and SHA512 hashes instantly. Compare against known values. Batch processing.

  • Drag-and-drop or browse
  • MD5, SHA1, SHA256, SHA512
  • Hash comparison mode
  • Batch file processing
  • Copy/export results
Windows 10/11 v1.0
Coming Soon

Sherlock Meta

File metadata viewer and stripper. View, export and remove EXIF data from photos, metadata from PDFs and Office documents.

  • EXIF data from images (GPS, camera, dates)
  • PDF metadata and properties
  • Office document metadata
  • Strip metadata for privacy
  • Export metadata reports
Windows 10/11 v1.0
Available Now

Email Header Analyzer

Paste email headers, get visual hop trace, SPF/DKIM/DMARC authentication and spoofing detection. Runs in your browser.

  • Visual hop-by-hop timeline
  • SPF, DKIM, DMARC verification
  • Sender mismatch detection
  • Spoofing verdict
  • No installation required
Any browser Web tool
Launch Tool

Need More?

These tools handle collection. We handle investigation.

Free tools collect and verify data. Professional forensic analysis interprets it. Sherlock Forensics provides court-admissible investigations, expert witness testimony and incident response. 20 years of experience.

Since 20064.8/5 ratingCISSP, ISSAP, ISSMP certified
Start Investigation

Questions

About Forensic Tools

Are these tools free?
Yes. All tools are free for lawful forensic investigation, incident response and security research. No trial periods or feature restrictions.
Are these tools forensically sound?
Yes. Every tool produces SHA256 hashes, maintains operation logs and follows chain of custody principles. Built by the same team that produces court-admissible reports.
What systems are supported?
Desktop tools: Windows 10/11 (64-bit). Web tools: any modern browser on any OS.
How do I verify download integrity?
Every download includes a published SHA256 hash. Compare it against the hash of your downloaded file. If they match, the file is intact.
Can I use these in legal proceedings?
The tools produce forensically sound output with hash verification. For expert testimony support, contact Sherlock Forensics at 604.229.1994.

These tools are provided as-is for lawful forensic investigation purposes. Terms of Service

Download

Enter your details to download. We will send you update notifications for new versions.