Skip to main content

IPED Digital Forensic Tool

IPED (Digital Evidence Processor and Indexer) is an open source software that processes and analyzes digital evidence seized at crime scenes by law enforcement or in corporate investigations by private examiners.

Quick Start

Get IPED running and process your first case

Installation

Build from source or download a release

Processing Evidence

Learn command-line processing options

Analysis Interface

Explore the integrated analysis GUI

Key Features

IPED provides professional-grade digital forensics capabilities for law enforcement and corporate investigators.

Fast Processing

Up to 400GB/h processing speed with multithreaded architecture supporting up to 135 million items

Data Carving

Efficient carving engine supporting 40+ file formats including videos, extensible by scripting

Advanced Search

Fast indexing and searching with regex support, OCR, face recognition, and similar document search

Timeline Analysis

Unified timeline view with event filtering and graph analysis for communications

Custom Parsers

Specialized parsers for WhatsApp, Telegram, Skype, BitTorrent, Emule, and more

Extensible

Script custom tasks in JavaScript and Python with external tool integration

Processing Profiles

IPED includes specialized processing profiles for different investigation types:
  • Forensic - Complete forensic analysis with all features enabled
  • CSAM - Optimized for child safety investigations with specialized detection
  • Triage - Quick analysis for time-sensitive cases
  • Fastmode - Preview processing for rapid assessment
  • Blind - Automatic data extraction without manual intervention

Supported Evidence Sources

Process multiple evidence types with comprehensive format support:
  • Disk Images: RAW/DD, E01, EX01, ISO9660, AFF, VHD, VHDX, VMDK (including differential)
  • Mobile: UFDR (Cellebrite), AD1 (AccessData), logical extractions
  • File Systems: NTFS, FAT, exFAT, HFS+, APFS, Ext2/3/4
  • Containers: Recursive expansion of dozens of archive and container formats
IPED was developed by digital forensic experts from the Brazilian Federal Police since 2012 and officially open-sourced in 2019.

Build docs developers (and LLMs) love