{ pkgs, ... }:
{
  environment.systemPackages = with pkgs; [
    aesfix
    aeskeyfind
    afflib
    bmap-tools
    bulk_extractor
    chainsaw
    chipsec
    chkrootkit
    chntpw
    dc3dd
    dcfldd
    ddrescue
    dmg2img
    exiftool
    firefox_decrypt
    foremost
    libewf
    libpst
    mdbtools
    ms-sys
    networkminer
    oletools
    pdf-parser
    pev
    pngcheck
    recoverjpeg
    regripper
    safecopy
    sleuthkit
    snort
    tell-me-your-secrets
    testdisk
    usbrip
    volatility3
  ];
}
