Forensics

iocx-dev/iocx

An extensible, deterministic static‑analysis engine that extracts high‑signal IOCs from PE binaries and text, built for SOC automation and modern…

gchq/cyberchef

The Cyber Swiss Army Knife - a web app for encryption, encoding, compression and data analysis

rhematt/snap-scraper

Extracts and downloads Snap Map media by coordinates for OSINT, forensic analysis, and research. Supports metadata logging and bulk download.

torvalds/linux

Linux kernel source tree

carpedm20/awesome-hacking

A curated list of awesome Hacking tutorials, tools and resources

arkime/arkime

Arkime is an open source, large scale, full packet capturing, indexing, and database system.

wiltodelta/remove-ai-watermarks

Remove visible and invisible AI watermarks and provenance metadata from images and video. Python library and CLI for SynthID, C2PA, EXIF, IPTC, XMP,…

frankwxu/digital-forensics-lab

Free hands-on digital forensics labs for students and faculty

dominicbreuker/stego-toolkit

Collection of steganography tools - helps with CTF challenges

rabbitstack/fibratus

Security sensor for realtime threat detection and protection

droe/sslsplit

Transparent man-in-the-middle proxy that terminates SSL/TLS connections, forges certificates on-the-fly, and logs decrypted traffic for network…

cert-polska/drakvuf-sandbox

Automated hypervisor-level malware analysis sandbox with agentless guest introspection, web-based result exploration, and guided installer for…

echo-devim/fhex

A Full-Featured HexEditor compatible with Linux/Windows/MacOS

mrash/psad

psad: Intrusion Detection and Log Analysis with iptables

intezer/linux-explorer

Easy-to-use live forensics toolbox for Linux endpoints

mkorman90/regipy

Regipy is an os independent python library for parsing offline registry hives

necr00/credential-hunting

CredsHunter - Credential Hunting scripts for Windows and Linux OS