Today I packaged ssdeep (detect similarities between files based on hash values), ptfinder (extract process information from a Windows memory dump) and afflib (utils for the Advanced Forensic Format [aff]).
