Disk Forensics

google/grr

Remote live forensics and incident response framework with Python agent for collecting forensic data from endpoints, including memory, disk, and…

sepinf-inc/iped

IPED Digital Forensic Tool. It is an open source software that can be used to process and analyze digital evidence, often seized at crime scenes by…

sleuthkit/autopsy

Autopsy® is a digital forensics platform and graphical interface to The Sleuth Kit® and other digital forensics tools. It can be used by law…

jipegit/osxauditor

OS X Auditor is a free Mac OS X computer forensics tool

mattnotmax/cyberchef-recipes

A list of cyber-chef recipes and curated links

simsong/bulk_extractor

This is the development tree. Production downloads are at:

ericzimmerman/kapefiles

This repository serves as a place for community created Targets and Modules for use with KAPE.

pablolec/recoverpy

Interactively find and recover deleted or :point_right: overwritten :point_left: files from your terminal

lazza/recuperabit

A tool for forensic file system reconstruction.

fox-it/dissect

Dissect is a digital forensics & incident response framework and toolset that allows you to quickly access and analyse forensic artefacts from…

bert-janp/incident-response-powershell

PowerShell-based incident response toolkit that collects 25+ forensic artifacts (processes, network connections, registry, browser history) and…

thewhiteninja/ntfstool

Forensics tool for NTFS (parser, mft, bitlocker, deleted files)

teamdfir/sift

SIFT

diogo-fernan/ir-rescue

A Windows Batch script and a Unix Bash script to comprehensively collect host forensic data during incident response.

cryps1s/darksurgeon

DARKSURGEON is a Windows packer project to empower incident response, digital forensics, malware analysis, and network defense.

aburgh/disk-arbitrator

A Mac OS X forensic utility which manages file system mounting in support of forensic procedures.

biggiesmallsag/nighthawkresponse

Incident Response Forensic Framework