#1Digital forensics, evidence collection, timeline analysis, and incident investigation tools.
Kitploit recommended
omerbenamram/evtxA Fast (and safe) parser for the Windows XML Event Log (EVTX) format
zeek/zeekZeek is a powerful network analysis framework that is much different from the typical IDS you may know.
ljagiello/ctf-skillsAgent skills for solving CTF challenges - web exploitation, binary pwn, crypto, reverse engineering, forensics, OSINT, and more
radareorg/radare2UNIX-like reverse engineering framework and command-line toolset
arkime/arkimeArkime is an open source, large scale, full packet capturing, indexing, and database system.
wiltodelta/remove-ai-watermarksRemove visible and invisible AI watermarks from images and video, and AI provenance metadata from images, video, and audio. Python library, CLI, and…
ericzimmerman/kapefilesThis repository serves as a place for community created Targets and Modules for use with KAPE.
microsoft/avmlPortable Linux RAM acquisition tool for forensics and incident response, capturing LiME-compatible images with optional compression and remote…
abrignoni/ileappParses iOS and iPadOS forensic extractions into HTML, TSV, timeline, KML, and LAVA reports with modular artifact discovery and encrypted iTunes…
horsicq/detect-it-easyProgram for determining types of files for Windows, Linux and MacOS.
magicsword-io/loldriversCurated database of vulnerable and malicious Windows drivers with YARA, Sigma, ClamAV, and Sysmon detection rules for proactive threat hunting and…
mandiant/flare-flossFLARE Obfuscated String Solver - Automatically extract obfuscated strings from malware.
domcyrus/rustnetPer-process network monitoring for your terminal with deep packet inspection. Cross-platform, sandboxed.
prowler-cloud/prowlerProwler is the world’s most widely used open-source cloud security platform that automates security and compliance across any cloud environment.…
winsiderss/systeminformerReal-time Windows system monitor with advanced process, network, and disk analysis, stack trace debugging, malware detection, and service management.…
wireshark/wiresharkCapture and analyze network traffic with deep packet inspection, protocol decoding across hundreds of protocols, and capture-file support for…
wireshark/wiresharkWireshark's official code repository. You can keep the releases coming by donating at https://wiresharkfoundation.org/donate/.
