digler: Analyze Disks and Recover Deleted Files
Summary
Digler is a Go tool for forensic disk analysis and file recovery from disk images or raw devices. It offers CLI and desktop workflows for scanning, carving files, reviewing DFXML reports, and recovering selected data.
At a glance
- Language
- Go
- License
- MIT
- Stars
- 1.5k
- Forks
- 93
- Added to OSRepos
- May 14, 2026
- Last analyzed
- October 3, 2026
Topics
Click on any tag to explore related repositories
Use at your own risk
OSRepos shares public repositories for knowledge and discovery only. Any installation, execution, configuration, or use of code from these repositories is the user's own responsibility. Always review the repository, source code, dependencies, licenses, and security implications before running or installing anything. OSRepos is not responsible for issues, damages, or losses resulting from third-party repositories.
Overview
Digler scans disk images and raw devices for recoverable files, including data whose filesystem metadata is missing or deleted. It is intended for digital forensics work and recovery tasks where users need to inspect a source first, then choose what to extract.
Its scan-first workflow produces a DFXML report that can guide later recovery or, on Linux, be mounted as a FUSE filesystem for browsing. A CLI and desktop application are available, and custom scanners can extend the supported file formats.
Key Features
- Scans disk image formats such as
.ddand.img, as well as raw devices. - Carves files across filesystem types, including NTFS, FAT32, and ext4.
- Generates analysis reports in Digital Forensics XML (DFXML) format.
- Recovers selected files from a scan report.
- On Linux, mounts scan results as a FUSE filesystem for browsing recovered files.
- Supports custom file scanners through a plugin architecture.
- Provides both command-line and desktop interfaces.
Use Cases
- Forensic practitioners can scan evidence images and preserve structured findings in DFXML reports.
- Data recovery users can examine a disk image before extracting selected files.
- Researchers and students can evaluate recovery behavior against public forensic datasets.
- Go developers can add format-specific carving logic through custom scanner plugins.
Project Facts
- Language: Go
- License: MIT
- Stars: 1.5k
- Forks: 93
- Topics: cli-tool, data-recovery, deleted-file-recovery, desktop-app, dfxml, digital-forensics, disk-analysis, disk-image, file-carving, filesystem-analysis, golang, photo-recovery, plugin-architecture
- Archived: No
Getting Started
Build from source:
git clone https://github.com/ostafen/digler.git
cd digler
make build
See the README for scan, recovery, mounting, and plugin instructions. Precompiled binaries are linked from the releases page.
Considerations
The project describes itself as early development and warns that bugs may exist. Scanning physical devices requires appropriate access, so testing with disk images can be a safer starting point. Mounting scan results is documented for Linux only. Plugin builds produce .so files, so verify platform compatibility before relying on custom plugins.
Source repository
Open the original repository on GitHub.
25 counted GitHub visits
Related repositories
Similar repositories that may be relevant next.
e2a: Open-Source Email API for Applications and AI Agents
September 29, 2026
e2a is an open-source email API designed for applications and AI agents, offering robust transactional email capabilities and real two-way inboxes. It supports both managed hosting and self-hosting with Docker, providing features like human-in-the-loop approval and advanced content screening. Built in Go, e2a aims to bridge email's universal addressability with the structured data world of AI agents.
Router: Optimize AI Model Selection and Costs for Agentic Systems
September 28, 2026
The Weave-OS Router is an intelligent model router for agentic systems, optimizing AI model selection for every request. It acts as a drop-in proxy for major AI providers, routing prompts to the most suitable model in under 50ms. This solution helps users significantly cut costs, often by 40-70%, simply by changing an endpoint.
KSail: The All-in-One Kubernetes SDK for Cluster Management and GitOps
September 27, 2026
KSail is a comprehensive Kubernetes SDK designed to simplify cluster creation, management, and operation across multiple distributions like Kind, K3d, Talos, and VCluster. It integrates essential features such as GitOps, secrets management, an AI assistant, and an MCP server, making cloud-native development accessible with just Docker or a cloud provider.
Memoh: An Open-Source Multi-Agent Platform with Dedicated AI Workspaces
September 26, 2026
Memoh is an innovative open-source multi-agent platform designed to provide each AI agent with its own dedicated cloud computer. This includes a filesystem, desktop, browser, network, and persistent long-term memory, ensuring agents remain online 24/7. Users can integrate their own API keys or host existing AI models, fostering a versatile and always-on environment for AI development and deployment.