BinText / strings / strings2 / bstrings Process Monitor Process Hacker Autoruns PEiD Regshot LordPE Ollydbg IDA Pro/FREE WireShark 7zip Notepad++ Dependancy Walker CheckSum MD5Deep Volatility Autopsy Encase FTK Helix XRY HxD JetBrains .Net Peek Immunity Debugger Fiddler FResponse PEStudio 8.4 densityscout pescan sigcheck Sysdig (Linux) FileInsight (McAfee) ApateDNS OfficeMalScanner ISply DnSpy Capture-BAT flypaper Kernel Outlook PST Viewier https://www.nucleustechnologies.com/pst-viewer.html Kernel Outlook OST Viewier https://www.nucleustechnologies.com/pst-viewer.html Timeline Explorer https://binaryforay.blogspot.co.uk/2017/10/timeline-explorer-060-released.html