Topic: forensic-analysis Goto Github

👇 Here are 201 public repositories matching this topic...

adamwhitehat / judge-jury-and-executable
forensic-analysis,A file system forensics analysis scanner and threat hunting tool. Scans file systems at the MFT and OS level and stores data in SQL, SQLite or CSV. Threats and data can be probed harnessing the power and syntax of SQL.
User: adamwhitehat
security threat-hunting antivirus scanner query-language csharp forensics-level-scanning forensics mft threat-monitor

aff4 / pyaff4
forensic-analysis,The Python implementation of the AFF4 standard.
Organization: aff4
compression-formats compression-library digital-forensics forensic-analysis forensics

ahmedkhlief / apt-hunter
forensic-analysis,APT-Hunter is Threat Hunting tool for windows event logs which made by purple team mindset to provide detect APT movements hidden in the sea of windows event logs to decrease the time to uncover suspicious activity
User: ahmedkhlief
Home Page: https://shells.systems/introducing-apt-hunter-threat-hunting-tool-via-windows-event-log/
threat-hunting purpleteam python3 windows-eventlog apt-attacks incident-response forensic-analysis windows-event-logs

alcideio / kaudit
forensic-analysis,Alcide Kubernetes Audit Log Analyzer - Alcide kAudit
Organization: alcideio
Home Page: https://www.alcide.io
alcide-kaudit kubernetes vault security security-tools forensics forensic-analysis audit-log

avilladaniel / avillaforensics
forensic-analysis,Avilla Forensics 3.0
User: avilladaniel
mobile forensics whatsapp telegram signal adb android adb-commands ios apktool

b16f00t / whapa
forensic-analysis,WhatsApp Parser Toolset v1.59
User: b16f00t
forensic-analysis whatsapp-encryption whatsapp-parser

bitranox / fingerprint
forensic-analysis,Monitoring Registry and File Changes in Windows
User: bitranox
python3 windows-10 windows-7 windows registry registry-hacks registry-data registry-scripts hacking-tool hacking-tools

c0brabaghdad1 / fetb
forensic-analysis,FETB : Take URL of File For Analysis using File + ExifTool + Binwalk Commands
User: c0brabaghdad1
forensic-files forensic-analysis metadata-extractor exiftool exif-metadata binwalk digital-forensics

cado-security / rip_raw
forensic-analysis,Rip Raw is a small tool to analyse the memory of compromised Linux systems.
Organization: cado-security
dfir dfir-automation forensic-analysis forensics memory-forensics security

cblichmann / btrfscue
forensic-analysis,Recover files from damaged BTRFS filesystems
User: cblichmann
btrfs data-recovery forensic-analysis forensics recovery rescue

chmarax / forensix
forensic-analysis,Google Chrome forensic tool to process, analyze and visualize browsing artifacts
User: chmarax
browsing-activity browsing-history cache forensic-analysis forensics google-chrome google-chrome-history metadata

chriswmorris / metaforge
forensic-analysis,An OSINT Metadata analyzing tool that filters through tags and creates reports
User: chriswmorris
metadata python3 infosec forensic-analysis forensics security-tools meta metadata-management osint

circl / forensic-tools
forensic-analysis,CIRCL system forensic tools or a jumble of tools to support forensic
Organization: circl
dfir digital-forensics forensic forensic-analysis

cscorza / analisi-digital-forense
forensic-analysis,Strumenti di Acquisizione e Analisi di copie Forensi
User: cscorza
best-practices difr digital forensic-analysis forensics forensics-investigations forensics-tools linux macos tools

cugu / awesome-forensics
forensic-analysis,A curated list of awesome forensic analysis tools and resources
User: cugu
Home Page: http://cugu.github.io/awesome-forensics/
computer-forensics digital-forensics forensic-analysis dfir open-source free

davidjacobson / safetext
forensic-analysis,Script to remove homoglyphs and zero-width characters to allow for safe distribution of documents from anonymous sources.
User: davidjacobson
forensic-analysis

dfir-dd / dfir-toolkit
forensic-analysis,CLI tools for forensic investigation of Windows artifacts
Organization: dfir-dd
Home Page: https://github.com/dfir-dd/dfir-toolkit
cli dfir digital-forensics digital-forensics-incident-response forensic-analysis forensics forensics-tools rust rust-lang

dfir-iris / iris-web
forensic-analysis,Collaborative Incident Response platform
Organization: dfir-iris
forensic incident-response csirt-tooling python digital-forensics digital-forensics-incident-response forensic-analysis forensic-tools

dogoncouch / logdissect
forensic-analysis,CLI utility and Python module for analyzing log files and other data.
User: dogoncouch
log-analysis log-parser cli security forensics forensic-analysis command-line syslog python-library python-module library module parser data-science data-analysis parsing parsing-library json python-modules

ec-digit-csirc / sysdiagnose
forensic-analysis,Forensic toolkit for iOS sysdiagnose feature
Organization: ec-digit-csirc
forensic-analysis incident-response-tooling python

emrekybs / douglas-042
forensic-analysis,Powershell script to help Speed ​​up Threat hunting incident response processes
User: emrekybs
forensic-analysis forensics hunting incident-response powershell threat-hunting threat-intelligence

enferex / pdfresurrect
forensic-analysis,Analyze and help extract older "hidden" versions of a pdf from the current pdf.
User: enferex
pdf forensic-analysis

gaurav-gogia / dftools
forensic-analysis,A curated list of digital forensic tools.
User: gaurav-gogia
forensics forensic-analysis investigation security hacktoberfest curated-list hacktoberfest2020

hashlookup / hashlookup-forensic-analyser
forensic-analysis,Analyse a forensic target (such as a directory) to find and report files found and not found from CIRCL hashlookup public service - https://circl.lu/services/hashlookup/
Organization: hashlookup
Home Page: https://hashlookup.github.io/hashlookup-forensic-analyser/
dfir dfir-automation forensic-analysis forensics-investigations hashlookup nsrl nsrllookup bloom-filter

ivbeg / awesome-forensicstools
forensic-analysis,Awesome list of digital forensic tools
User: ivbeg
awesome awesome-list forensics forensic-analysis digital-forensics metadata investigative-journalism

johnlatwc / pypowershellxray
forensic-analysis,Python script to decode common encoded PowerShell scripts
User: johnlatwc
dfir forensic-analysis forensics incident-response powershell security security-tools shellcode

lxndrblz / forensicsim
forensic-analysis,A forensic open-source parser module for Autopsy that allows extracting the messages, comments, posts, contacts, calendar entries and reactions from a Microsoft Teams IndexedDB LevelDB database.
User: lxndrblz
Home Page: https://forensics.im
abertay-university autopsy electron forensic-analysis indexeddb leveldb microsoft module parser teams

matkowski-voy / palmprint-recognition-in-the-wild
forensic-analysis,
User: matkowski-voy
palmprint-recognition in-the-wild biometrics forensics biometric-identification palmprint-roi uncontrolled-environment uncooperative-environment forensics-investigations forensic-analysis

merces / entropy
forensic-analysis,CLI program to calculate file entropy
User: merces
compression cryptography forensic-analysis malware-analysis

mesquidar / forensicstools
forensic-analysis,A list of free and open forensics analysis tools and other resources
User: mesquidar
Home Page: https://mesquidar.github.io/ForensicsTools/
awesome-list computer-fore digital-forensics forensic-analysis forensic-tools forensics forensics-investigations free image-analysis linux macos metada metadata network open-source timeline tools windows

mikeroyal / digital-forensics-guide
forensic-analysis,Digital Forensics Guide. Learn all about Digital Forensics, Computer Forensics, Mobile device Forensics, Network Forensics, and Database Forensics.
User: mikeroyal
digitalforensics digitalforensicreadiness forensics security forensics-tools digital-forensics threat-intelligence intrusion-detection mitre-attack detection-engineering

mk-ware / forensic-tools
forensic-analysis,A collection of tools for forensic analysis
User: mk-ware
forensic-analysis python cookie extract-metadata parse exif-extractor metadata metadata-extraction forensics exif-data-extraction

mschermann / forensic_accounting
forensic-analysis,Case Studies on Forensic Accounting using Data Analysis
User: mschermann
python fraud fraud-case forensic-analysis forensics case-study

noxdafox / vminspect
forensic-analysis,Tools for inspecting disk images
User: noxdafox
virtualization malware-analysis vulnerability-scanners python forensics forensic-analysis

op7ic / unix_collector
forensic-analysis,unix_collector is a live response collection script for Incident Response on UNIX-like systems using native binaries.
User: op7ic
unix blueteam forensics freebsd linux openbsd posix script computer-forensics dfir

paulveillard / cybersecurity-forensics
forensic-analysis,A collection of forensics tools, software, libraries, learning tutorials, frameworks, academic and practical resources in Cybersecurity
User: paulveillard
digital-forensics forensic-analysis forensics-tools forensics forensics-investigations forensics-101 cybersecurity free open-source open-discovery

piesecurity / windowseventstocsvtimeline
forensic-analysis,Simple Powershell scripts to collect all Windows Event Logs from a host and parse them into one CSV timeline.
User: piesecurity
powershell-script timeline windows-eventlog forensic-analysis csv-export eventlog windows parsing

psmths / windows-forensic-artifacts
forensic-analysis,Handbook of windows forensic artifacts across multiple Windows version with interpretation tips with some examples. Work in progress!
User: psmths
Home Page: https://psmths.gitbook.io/windows-forensics/
forensics artifacts dfir windows windows-11 analysis reference digital-forensics forensic-analysis forensicartifacts

r3k4t / phone-number-info
forensic-analysis,Phone-number-info is a Phone Number Information Gathering Tool.
User: r3k4t
Home Page: https://github.com/r3k4t
python forensics-investigations forensic-analysis security-research security-testing software-engineering network-engineering software-development

resurrecting-open-source-projects / dcfldd
forensic-analysis,Enhanced version of dd for forensics and security
Organization: resurrecting-open-source-projects
forensics forensic-analysis forensics-investigations recovering-data recovery-image wipe

rupertbg / aws-public-account-ids
forensic-analysis,Publicly-listed AWS account IDs for easy lookup. Great for cleaning up false positives from unknown Account IDs in Cloudtrail
User: rupertbg
Home Page: https://rupertbg.github.io/aws-public-account-ids/dist/index.html
aws cloudtrail audit-log aws-account-management aws-accounts forensic-analysis

shadawck / awesome-anti-forensic
forensic-analysis,Tools and packages that are used for countering forensic activities, including encryption, steganography, and anything that modify attributes. This all includes tools to work with anything in general that makes changes to a system for the purposes of hiding information.
User: shadawck
Home Page: https://shadawck.github.io/awesome-anti-forensic/
anti-forensic anti-forensics antiforensics awesome awesome-list cybersecurity forensic-analysis security

srinivas11789 / pcapxray
forensic-analysis,:snowflake: PcapXray - A Network Forensics Tool - To visualize a Packet Capture offline as a Network Diagram including device identification, highlight important communication and file extraction
User: srinivas11789
forensics pcap network python computer-forensics tor-traffic forensic-analysis cybersecurity network-diagram tor

swwwolf / wdbgark
forensic-analysis,WinDBG Anti-RootKit Extension
User: swwwolf
Home Page: https://sww-it.ru
kernel-mode c-plus-plus malware malware-analysis malware-research forensic-analysis windbg windbg-extension anti-rootkit windows

therealdreg / lsrootkit
forensic-analysis,Rootkit Detector for UNIX
User: therealdreg
Home Page: https://rootkit.es/
linux unix forensics forensic-analysis rootkit rootkits antirootkit

vframeio / vframe
forensic-analysis,VFRAME: Visual Forensics and Metadata Extraction
Organization: vframeio
Home Page: https://vframe.io
object-detection image-classification image-search-engine forensic-analysis face-blur vframe dnn-inference redaction

viralmaniar / remote-desktop-caching-
forensic-analysis,This tool allows one to recover old RDP (mstsc) session information in the form of broken PNG files. These PNG files allows Red Team member to extract juicy information such as LAPS passwords or any sensitive information on the screen. Blue Team member can reconstruct PNG files to see what an attacker did on a compromised host. It is extremely useful for a forensics team to extract timestamps after an attack on a host to collect evidences and perform further analysis.
User: viralmaniar
blueteam redteam hacking internal-pentest penetration-testing redteaming forensics forensics-investigations forensic-analysis infrastructure-monitoring

visma-prodsec / columbo
forensic-analysis,Columbo is a computer forensic analysis tool used to simplify and identify specific patterns in compromised datasets.
Organization: visma-prodsec
Home Page: https://github.com/visma-prodsec/columbo
binary-analysis forensic-analysis forensics security security-tools windows

xiosec / computer-forensics
forensic-analysis,The best tools and resources for forensic analysis.
User: xiosec
analysis computer-forensics digital-forensics forensic-analysis forensics forensics-tools hacking scanner security security-tools

yampelo / beagle
forensic-analysis,Beagle is an incident response and digital forensics tool which transforms security logs and data into graphs.
User: yampelo
security digital-forensics incident-response graph dfir forensic-analysis threat-hunting