Topic: forensics Goto Github

👇 Here are 1094 public repositories matching this topic...

alphaseclab / awesome-forensics
forensics,Awesome Forensics Resources. Almost 300 open source forensics tools, and 600 blog posts about forensics.
User: alphaseclab
forensics anti-forensics

ashemery / linuxforensics
forensics,Everything related to Linux Forensics
User: ashemery
Home Page: https://linuxdfir.ashemery.com/
dfir digital-forensics forensics investigations linux

avilladaniel / avillaforensics
forensics,Avilla Forensics 3.0
User: avilladaniel
mobile forensics whatsapp telegram signal adb android adb-commands ios apktool

bluecapesecurity / pwf
forensics,Practical Windows Forensics Training
Organization: bluecapesecurity
Home Page: https://www.bluecapesecurity.com
cybersecurity forensics blueteam purpleteam

cecio / usbvalve
forensics,Expose USB activity on the fly
User: cecio
badusb malware usb usb-hid forensics

danieldurnea / fbi-tools
forensics,🕵️ OSINT Tools for gathering information and actions forensics 🕵️
User: danieldurnea
forensics osint cybersecurity hacking security-automation security-tools infosec awesome-list incident-response penetration-testing

decalage2 / oletools
forensics,oletools - python tools to analyze MS OLE2 files (Structured Storage, Compound File Binary Format) and MS Office documents, for malware analysis, forensics and debugging.
User: decalage2
Home Page: http://www.decalage.info/python/oletools
python python-library olefile malware-analysis ms-office-documents compound rtf forensics ole-files security

den4uk / andriller
forensics,📱 Andriller - is software utility with a collection of forensic tools for smartphones. It performs read-only, forensically sound, non-destructive acquisition from Android devices.
User: den4uk
forensics python android

dreddsa5dies / gohacktools
forensics,Hacker tools on Go (Golang)
User: dreddsa5dies
Home Page: https://dreddsa5dies.github.io/goHackTools/
go golang hack tools bruteforce scanner forensics beginner security hackers

frankwxu / digital-forensics-lab
forensics,Free hands-on digital forensics labs for students and faculty
User: frankwxu
Home Page: https://github.com/frankwxu/digital-forensics-lab
cybersecurity digital education forensics free cyber cybercrime cybersecurity-education investigation hands-on

gaulliath / operative-framework
forensics,operative framework is a rust investigation OSINT framework, you can interact with multiple targets, execute multiple modules, create links with target, export rapport to PDF file, add note to target or results, interact with RESTFul API, write your own modules.
Organization: gaulliath
enterprise fingerprint forensics framework gathering geoint investigation linkedin osint phone rust rust-lang scraper societe whatsapp whatsapp-api whatsapp-web

google / docker-explorer
forensics,A tool to help forensicate offline docker acquisitions
Organization: google
forensics docker

google / timesketch
forensics,Collaborative forensic timeline analysis
Organization: google
forensics dfir security timeline analysis

google / turbinia
forensics,Automation and Scaling of Digital Forensics Tools
Organization: google
forensics dfir security security-automation cloud

hack-with-github / free-security-ebooks
forensics,Free Security and Hacking eBooks
Organization: hack-with-github
security hacking penetration-testing hacking-ebooks forensics hackers-handbook cloud-security kali-linux cyber-security ebooks

jekil / awesome-hacking
forensics,Awesome hacking is an awesome collection of hacking tools.
User: jekil
Home Page: https://awesomehacking.org
hacking hacking-tools curated-list penetration-testing forensics malware security security-tools

kubeshark / kubeshark
forensics,The API traffic analyzer for Kubernetes providing real-time K8s protocol-level visibility, capturing and monitoring all traffic and payloads going in, out and across containers, pods, nodes and clusters. Inspired by Wireshark, purposely built for Kubernetes
Organization: kubeshark
Home Page: https://kubeshark.co
kubernetes microservices golang rest grpc amqp kafka redis go microservice

lazza / recuperabit
forensics,A tool for forensic file system reconstruction.
User: lazza
forensics dfir partition recover-files ntfs disk

log2timeline / plaso
forensics,Super timeline all the things
Organization: log2timeline
Home Page: https://plaso.readthedocs.io
forensics parsing timeline

marcopon / seqbox
forensics,A single file container/archive that can be reconstructed even after total loss of file system structures
User: marcopon
sbx recovery hash metadata archiver container undelete unformat forensics hiding

mesquidar / forensicstools
forensics,A list of free and open forensics analysis tools and other resources
User: mesquidar
Home Page: https://mesquidar.github.io/ForensicsTools/
awesome-list computer-fore digital-forensics forensic-analysis forensic-tools forensics forensics-investigations free image-analysis linux macos metada metadata network open-source timeline tools windows

mikeroyal / digital-forensics-guide
forensics,Digital Forensics Guide. Learn all about Digital Forensics, Computer Forensics, Mobile device Forensics, Network Forensics, and Database Forensics.
User: mikeroyal
digitalforensics digitalforensicreadiness forensics security forensics-tools digital-forensics threat-intelligence intrusion-detection mitre-attack detection-engineering

mvt-project / mvt
forensics,MVT (Mobile Verification Toolkit) helps with conducting forensics of mobile devices in order to find signs of a potential compromise.
Organization: mvt-project
Home Page: https://mvt.re
forensics mobile security android ios forensics-tools

netflix-skunkworks / diffy
forensics,:no_entry: (DEPRECATED) Diffy is a triage tool used during cloud-centric security incidents, to help digital forensics and incident response (DFIR) teams quickly identify suspicious hosts on which to focus their response.
Organization: netflix-skunkworks
security dfir forensics

nhoya / gosint
forensics,OSINT Swiss Army Knife
User: nhoya
go golang osint haveibeenpwnd pgp github bitbucket git telegram scraper

obsidianforensics / hindsight
forensics,Web browser forensics for Google Chrome/Chromium
User: obsidianforensics
Home Page: https://dfir.blog/hindsight/
google-chrome hindsight chrome forensics dfir

pablolec / recoverpy
forensics,Interactively find and recover deleted or :point_right: overwritten :point_left: files from your terminal
User: pablolec
python3 tui data recovery cybersecurity python cli console terminal linux

paulnorman01 / forensia
forensics,Anti Forensics Tool For Red Teamers, Used For Erasing Footprints In The Post Exploitation Phase.
User: paulnorman01
anti-forensics evasion forensics post-exploitation redteam

prowler-cloud / prowler
forensics,Prowler is an Open Source Security tool for AWS, Azure, GCP and Kubernetes to do security assessments, audits, incident response, compliance, continuous monitoring, hardening and forensics readiness. Includes CIS, NIST 800, NIST CSF, CISA, FedRAMP, PCI-DSS, GDPR, HIPAA, FFIEC, SOC2, GXP, Well-Architected Security, ENS and more
Organization: prowler-cloud
Home Page: https://prowler.com
security security-tools security-audit security-hardening hardening aws cis-benchmark compliance gdpr forensics

radareorg / radare2
forensics,UNIX-like reverse engineering framework and command-line toolset
Organization: radareorg
Home Page: https://www.radare.org/
radare2 c commandline reverse-engineering forensics security binary-analysis malware-analysis disassembler hacktoberfest

rmusser01 / infosec_reference
forensics,An Information Security Reference That Doesn't Suck; https://rmusser.net/git/admin-2/Infosec_Reference for non-MS Git hosted version.
User: rmusser01
Home Page: https://rmusser.net/docs
infosec infosec-reference reverse-engineering hacking pentesting penetration-testing references linux privilege-escalation information-security

simsong / tcpflow
forensics,TCP/IP packet demultiplexer. Download from:
User: simsong
Home Page: http://downloads.digitalcorpora.org/downloads/tcpflow/
digital-forensics forensics tcp-protocol tcpip

sleuthkit / autopsy
forensics,Autopsy® is a digital forensics platform and graphical interface to The Sleuth Kit® and other digital forensics tools. It can be used by law enforcement, military, and corporate examiners to investigate what happened on a computer. You can even use it to recover photos from your camera's memory card.
Organization: sleuthkit
Home Page: http://www.sleuthkit.org/autopsy/
forensics java

sleuthkit / sleuthkit
forensics,The Sleuth Kit® (TSK) is a library and collection of command line digital forensics tools that allow you to investigate volume and file system data. The library can be incorporated into larger digital forensics tools and the command line tools can be directly used to find evidence.
Organization: sleuthkit
Home Page: http://www.sleuthkit.org/sleuthkit/
sleuthkit tct ntfs forensics incident-response

snovvcrash / usbrip
forensics,Tracking history of USB events on GNU/Linux
User: snovvcrash
Home Page: https://habr.com/ru/post/352254/
security forensics usb-events usb-history usb-devices

srinivas11789 / pcapxray
forensics,:snowflake: PcapXray - A Network Forensics Tool - To visualize a Packet Capture offline as a Network Diagram including device identification, highlight important communication and file extraction
User: srinivas11789
forensics pcap network python computer-forensics tor-traffic forensic-analysis cybersecurity network-diagram tor

stuhli / awesome-event-ids
forensics,Collection of Event ID ressources useful for Digital Forensics and Incident Response
User: stuhli
ir dfir digitalforensics forensics incident-response

stuxnet999 / memlabs
forensics,Educational, CTF-styled labs for individuals interested in Memory Forensics
User: stuxnet999
forensics dfir memory-forensics windows ctf ctf-challenges digital-forensics security cybersecurity

tclahr / uac
forensics,UAC is a Live Response collection script for Incident Response that makes use of native binaries and tools to automate the collection of AIX, Android, ESXi, FreeBSD, Linux, macOS, NetBSD, NetScaler, OpenBSD and Solaris systems artifacts.
User: tclahr
Home Page: https://tclahr.github.io/uac-docs
incident-response forensics computer-forensics triage linux aix solaris macos openbsd freebsd

thehackingsage / hackdroid
forensics,Security Apps for Android
User: thehackingsage
Home Page: https://thehackingsage.com/hackdroid/
android apk apps cryptography dos forensics hacking-tool hid-attacks mitm networking penetration-testing pentesting privacy security sniffing terminal wireless

tonyphipps / siem
forensics,SIEM Tactics, Techiques, and Procedures
User: tonyphipps
threat hunt red blue purple team incident response baseline monitor

toolswatch / blackhat-arsenal-tools
forensics,Official Black Hat Arsenal Security Tools Repository
User: toolswatch
Home Page: https://www.toolswatch.org/category/arsenal/
blackhat arsenal security-tools hacking-tool security-scanner forensics ics-scada webapp hacking

volatilityfoundation / volatility3
forensics,Volatility 3.0 development
Organization: volatilityfoundation
Home Page: http://volatilityfoundation.org/
digital-investigation forensics incident-response malware memory python ram volatility volatility-framework

wagga40 / zircolite
forensics,A standalone SIGMA-based detection tool for EVTX, Auditd and Sysmon for Linux logs
User: wagga40
sigma python3 evtx sigma-rules detection auditd sysmon pysigma evtxtract forensics

werwolv / imhex
forensics,🔍 A Hex Editor for Reverse Engineers, Programmers and people who value their retinas when working at 3 AM.
User: werwolv
Home Page: https://imhex.werwolv.net
hex-editor reverse-engineering ips dear-imgui disassembler analyzer mathematical-evaluator pattern-language dark-mode hacktoberfest

williballenthin / python-evtx
forensics,Pure Python parser for Windows Event Log files (.evtx)
User: williballenthin
event-log evtx forensics

withsecurelabs / chainsaw
forensics,Rapidly Search and Hunt through Windows Forensic Artefacts
Organization: withsecurelabs
attack rust security threat-hunting blueteam chainsaw detection dfir forensics logs

yamato-security / hayabusa
forensics,Hayabusa (隼) is a sigma-based threat hunting and fast forensics timeline generator for Windows event logs.
Organization: yamato-security
dfir threat hunting windows event logs rust sigma detection attack

yamato-security / wela
forensics,WELA (Windows Event Log Analyzer): The Swiss Army knife for Windows Event Logs! ゑ羅（ウェラ）
Organization: yamato-security
dfir log analysis forensics incident response sigma windows event logs

ydkhatri / mac_apt
forensics,macOS (& ios) Artifact Parsing Tool
User: ydkhatri
Home Page: https://swiftforensics.com
dfir forensics macos