Repolode
Submit
sepinf-inc

sepinf-inc/IPED

Open-source digital forensic tool in Java for processing, indexing and analyzing seized digital evidence such as disk images and devices.

Open-source alternative to:EnCaseFTK

View on GitHub
Stars
3,059
Forks
524
Open issues
389
Last commit
4 days ago

What is it?

IPED is a digital forensic tool used to process and analyze digital evidence, often seized at crime scenes by law enforcement or in corporate investigations by private examiners. It was developed by digital forensic experts at the Brazilian Federal Police and has been published as open source since 2019. It runs on Windows and Linux, supports batch case creation from the command line, and offers a graphical analysis interface.

The tool decodes disk images and file systems in formats such as RAW/DD, E01, VHD, VMDK, VHDX and AD1, then indexes file content and metadata for fast searching, including unallocated space. It provides hash-based deduplication and known-file set matching, file carving, categorization by file type, and recursive expansion of containers. Analysts can review images and videos, hex and text content, GPS locations on maps, timelines, and communication graphs.

IPED also includes analysis modules such as regex searches for wallets, emails and IP addresses, OCR, language detection, named entity recognition, similar document, image and face search, and audio transcription. Processing profiles, bookmarks, portable cases and HTML or CSV reports support investigative workflows. Scripts in JavaScript or Python extend its behavior.

Key features

  • 01Indexes file content and metadata for fast search, including unallocated space.
  • 02Decodes common disk image and virtual disk formats such as E01, VHD, VMDK and AD1.
  • 03Carves files from raw data and supports more than 40 file formats.
  • 04Provides hash computation, hash-set matching and deduplication.
  • 05Runs on Windows and Linux with command-line batch processing and portable cases.
  • 06Includes face, image and document similarity search, OCR and audio transcription.

Use cases

  • Law enforcement examiners processing seized disk images and phones from a case.
  • Private forensic investigators reviewing employee devices in corporate investigations.
  • Researchers or trainers who need a forensic indexing and analysis platform to study evidence workflows.

Quick start

  1. 1

    Install git, Maven and Java JDK 11 with JavaFX

  2. 2

    Clone the repository

    git clone https://github.com/sepinf-inc/IPED.git
  3. 3

    Enter the project folder

    cd IPED
  4. 4

    Build IPED with Maven (output in target/release)

    mvn clean install

Things to know

  • Default master branch is unstable development code; stable builds require checking out a release tag.
  • On Linux, The Sleuthkit and additional dependencies must be built separately.
  • Building requires JDK 11 with JavaFX, which adds setup effort.
  • Some advanced features need external models, keys or services, such as Stanford CoreNLP models or cloud transcription.

Topics

#digital-forensics#forensics#data-recovery#file-carving#indexing#ocr#java#forensic#recovery

FAQ

What is IPED?
Open-source digital forensic tool in Java for processing, indexing and analyzing seized digital evidence such as disk images and devices. IPED is a digital forensic tool used to process and analyze digital evidence, often seized at crime scenes by law enforcement or in corporate investigations by private examiners. It was developed by digital forensic experts at the Brazilian Federal Police and has been published as open source since 2019. It runs on Windows and Linux, supports batch case creation from the command line, and offers a graphical analysis interface.
Is IPED free to use? What license does it have?
IPED is open source under the Other license. Check the license terms before using it in commercial products.
Is IPED still maintained?
Actively maintained. The last commit to IPED was on Oct 17, 2026.
What can I use IPED for?
Law enforcement examiners processing seized disk images and phones from a case. Private forensic investigators reviewing employee devices in corporate investigations. Researchers or trainers who need a forensic indexing and analysis platform to study evidence workflows.
How do I install IPED?
Install git, Maven and Java JDK 11 with JavaFX Clone the repository: git clone https://github.com/sepinf-inc/IPED.git Enter the project folder: cd IPED Build IPED with Maven (output in target/release): mvn clean install
Where can I get IPED?
The source code and installation instructions are on GitHub: https://github.com/sepinf-inc/IPED

Summary generated by AI from the project's README. GitHub stats refresh daily.

Related projects