DFIR Toolkit
Forensic reference & case docs
About
This app provides forensic examiners with tools for documentation and reference, including chain-of-custody forms, case organization, and artifact lookups. It operates entirely offline and encrypts data on the device, ensuring privacy and security in the field.
What's New in DFIR Toolkit
1.0
August 18, 2026
Subscriptions & In-App Purchases
DFIR Toolkit Pro
Unlocks the Artifact Reference, Case Workspace, Forms
FAQ
What is DFIR Toolkit?
DFIR Toolkit is a mobile application designed for digital forensic examiners. It offers tools for creating chain-of-custody and consent-to-search documentation, organizing case files, and accessing a reference library of forensic artifacts and file signatures. The app operates fully offline and encrypts all data on the device.
Is DFIR Toolkit free to use?
The reference features of DFIR Toolkit, including the File Signature Database, calculators, iOS artifact reference, and Dashboard, are available for free. The documentation features, such as Evidence Forms and Case Workspace, require a subscription to DFIR Toolkit Pro.
How much does DFIR Toolkit Pro cost?
DFIR Toolkit Pro is an auto-renewable subscription priced at $119.00 USD per year. Payment is processed through your Apple Account upon purchase confirmation. You can manage or cancel your subscription at any time within your Apple Account settings.
Does DFIR Toolkit collect any user data?
No, DFIR Toolkit is designed with privacy as a core principle and declares "Data Not Collected." It does not collect any user data, require an account, or need a network connection for any of its features. All case data and captured signatures are encrypted at rest on your device.
Can DFIR Toolkit be used offline?
Yes, DFIR Toolkit is built for offline use. All features, including documentation, reference lookups, and calculations, run entirely on the device. This allows examiners to use the toolkit effectively in environments with no signal or internet access.
What devices does DFIR Toolkit support?
DFIR Toolkit is available for iPhone and iPad devices. It supports Dynamic Type and VoiceOver, and features a dark mode for enhanced usability across Apple's mobile ecosystem.
How often is DFIR Toolkit updated?
DFIR Toolkit was last updated on August 18, 2026, with version 1.0. The release date was August 17, 2026. Specific update frequency is not detailed, but it is developed by The Waldrep Company, a digital forensics practice.
What kind of documentation can I create with DFIR Toolkit Pro?
DFIR Toolkit Pro allows you to create and complete chain-of-custody and consent-to-search documentation directly on your device. Completed forms are locked to prevent overwriting, with corrections creating new versions. The app also supports deterministic PDF and JSON exports.
