diff --git a/flake.nix b/flake.nix
index 08122ec..f121f3d 100644
--- a/flake.nix
+++ b/flake.nix
@@ -156,6 +156,7 @@
           ./modules/graphical/ime.nix
           ./modules/graphical/code.nix
           ./modules/graphical/shared.nix
+          ./modules/fh/forensik.nix
           ./systems/laptop/configuration.nix
           ./modules/cli-tools.nix
           ./modules/virt-manager.nix
diff --git a/home-manager/hyprland-settings.nix b/home-manager/hyprland-settings.nix
index 4f87bc2..5e1453b 100644
--- a/home-manager/hyprland-settings.nix
+++ b/home-manager/hyprland-settings.nix
@@ -198,8 +198,8 @@
           "$mainMod, mouse_down, workspace, e+1"
           "$mainMod, mouse_up, workspace, e-1"
           
-          "ALT, Tab, cyclenext,"
-          "ALT, Tab, bringactivetotop,"
+          # "ALT, Tab, cyclenext,"
+          # "ALT, Tab, bringactivetotop,"
 	];
 
 	bindm = [
diff --git a/modules/cli-tools.nix b/modules/cli-tools.nix
index 248ef8d..5403f6d 100644
--- a/modules/cli-tools.nix
+++ b/modules/cli-tools.nix
@@ -18,5 +18,7 @@
     nethogs
     dig
     smartmontools
+    bc
+    xxd
   ];
 }
diff --git a/modules/fh/forensik.nix b/modules/fh/forensik.nix
new file mode 100644
index 0000000..8d0c012
--- /dev/null
+++ b/modules/fh/forensik.nix
@@ -0,0 +1,9 @@
+{ pkgs, ...} :
+{
+    environment.systemPackages = with pkgs; [
+        regripper
+        volatility3
+        foremost
+        binwalk
+    ];
+}