#1Tools for acquiring, preserving, and analyzing digital evidence for legal or investigative purposes.
Kitploit recommended
gcla/termsharkA terminal UI for tshark, inspired by Wireshark
google/gopacketProvides packet processing capabilities for Go
withsecureopensource/chainsawRapidly Search and Hunt through Windows Forensic Artefacts
yamato-security/hayabusaMulti-threaded Windows event log forensics timeline generator and threat hunting tool with full Sigma rule support, producing CSV/JSON timelines for…
cisagov/malcolmContainerized network traffic analysis suite ingesting PCAP, Zeek logs, and Suricata alerts for automated normalization, enrichment, and correlation…
guidobartoli/sherloqAn open-source digital image forensic toolset
dsheirer/sdrtrunkA cross-platform java application for decoding, monitoring, recording and streaming trunked mobile and related radio protocols using Software Defined…
usarmyresearchlab/dshellDshell is a network forensic analysis framework.
log2timeline/plasoDigital forensics engine that parses logs, files, and system artifacts to build super timelines, enabling chronological event correlation for…
microsoft/procdump-for-linuxA Linux version of the ProcDump Sysinternals tool
b16f00t/whapaGraphical forensic toolkit for parsing, decrypting, and extracting WhatsApp data from Android and iOS devices, including Google Drive and iCloud…
jpcertcc/logontracerInvestigate malicious Windows logon by visualizing and analyzing Windows event log
sleuthkit/autopsyAutopsy® is a digital forensics platform and graphical interface to The Sleuth Kit® and other digital forensics tools. It can be used by law…
rabbitstack/fibratusSecurity sensor for realtime threat detection and protection
yeti-platform/yetiYour Everyday Threat Intelligence
cgsecurity/testdiskRecovers lost partitions and repairs boot sectors; carves 480+ file formats from damaged disks and filesystems for data recovery and forensic use.
cyb3rmx/qu1cksc0peAll-in-One malware analysis tool.
charles2gan/gda-android-reversing-toolthe fastest and most powerful android decompiler(native tool working without Java VM) for the APK, DEX, ODEX, OAT, JAR, AAR, and CLASS file. which…
