#1Digital forensics, evidence collection, timeline analysis, and incident investigation tools.
Kitploit recommended
smtimesiwndr/gdid-reversalReverse-engineered analysis of Microsoft's Global Device Identifier (GDID) revealing its generation as a server-assigned MSA Device PUID, storage in…
adamkadaban/ctfsCTF Cheat Sheet + Writeups / Files for some of the Security CTFs that I've done
lazza/recuperabitA tool for forensic file system reconstruction.
dfir-orc/dfir-orcForensics artefact collection tool for systems running Microsoft Windows
ashemery/linuxforensicsEverything related to Linux Forensics
cristianzsh/forensictoolsCollection of forensic tools
mfthomps/labtainersLabtainers: A Docker-based cyber lab framework
jessek/hashdeepCross-platform hashing toolset for computing message digests (MD5, SHA-1, SHA-256, Tiger, Whirlpool) with recursive directory traversal and file…
securisec/chepyChepy is a python lib/cli equivalent of the awesome CyberChef tool.
libyal/libewfC library and command-line toolkit for forensic EWF image handling: acquire, export, verify, recover, and mount evidence files in EnCase and SMART…
alessandroz/lazagneforensicWindows passwords decryption from dump files
maldev-academy/dumpbrowsersecretsExtracts browser-stored data such as refresh tokens, cookies, saved credentials, credit cards, autofill entries, browsing history, and bookmarks from…
dougburks/so-cratesSO-CRATES: Security Onion Containerized Rapid Analysis of Threats, Evil, and Sus!
secdevops-cuse/cyberrangeThe Open-Source AWS Cyber Range
bert-janp/incident-response-powershellPowerShell-based incident response toolkit that collects 25+ forensic artifacts (processes, network connections, registry, browser history) and…
capacitorset/box-jsA tool for studying JavaScript malware.
microsoft/routeros-scannerTool to scan for RouterOS (Mikrotik) forensic artifacts and vulnerabilities.
