Guymager review
A focused Linux tool for acquiring and cloning storage media in forensic image formats.
Reviewed by iTechGuides Editors · Editorial team · Updated Oct 2026
Guymager is free, open-source forensic imaging software for Linux. It is designed for forensic investigators, incident responders, archivists, and other practitioners who need to acquire or clone local disks and removable media. Its graphical interface supports forensic acquisition of storage devices and removable media, with output in raw dd, EWF/E01, and AFF formats. Configurable acquisition metadata fields help capture information alongside each acquisition, while the multilingual interface supports different working languages.
The imaging workflow is the product’s main strength. Guymager uses multithreaded reading, hashing, writing, and compression, and calculates MD5 and SHA-256 hashes during acquisition. That combination gives practitioners a focused tool for creating forensic images while recording acquisition information. Disk cloning is also included, making the software suitable for workflows that require a copy of storage media rather than only an exported image. The published feature set stays centered on local acquisition rather than extending into a wider case-management or forensic-analysis environment.
Guymager follows an open-source, free-plan model, so the published offering is available without a paid tier distinction. Its platform fit is clear: Linux users who need a graphical imaging utility can work with dd, EWF/E01, and AFF outputs from supported storage sources. The trade-off is its narrow scope. Guymager is a strong choice when the requirement is Linux-based acquisition, cloning, hashing, compression, and metadata capture; practitioners looking for broader forensic analysis capabilities or AI features should choose a different product. The official homepage identifies version 0.8.13, and the project’s SourceForge files page shows a latest source release dated 2021-08-05.
Guymager pros and cons
- Where it wins
- Free, open-source acquisition and cloning for Linux
- Creates dd, EWF/E01, and AFF forensic images
- Multithreaded hashing, compression, reading, and writing
- Where it doesn't
- Runs on Linux rather than multiple platforms
- Focused on storage-media imaging, not broader forensic analysis
- Does not include AI features
Guymager fact sheet, pricing and score →
Advertiser disclosure: iTechGuides is reader-supported. Vendors can pay for top positions in our rankings and for a place on other products' pages, and we may earn a commission when you click some links. Bought places stand at the number bought; this page and our disclosure say so. Paying vendors may get a fuller, more detailed review from our editors, and that review can change their score. How we rank.
Last updated · How we research and update