Yara seems to be quite widely used by the UK police for digital forensics (or at least by the companies that supply their tools).