Forensics

hluwa/frida-dexdump

A frida tool to dump dex in memory to support security engineers analyzing malware.

spipm/depixelization_poc

Depix is a PoC for a technique to recover plaintext from pixelized screenshots.

google/rekall

Rekall Memory Forensic Framework

deepfence/packetstreamer

⭐ ⭐ Distributed tcpdump for cloud native environments ⭐ ⭐

yelparchive/osxcollector

A forensic evidence collection & analysis toolkit for OS X

maliceio/malice

VirusTotal Wanna Be - Now with 100% more Hipster

google/stenographer

Stenographer is a packet capture solution which aims to quickly spool all packets to disk, then provide simple, fast access to subsets of those…

viper-framework/viper

Binary analysis and management framework

d4vinci/dr0p1t-framework

A framework that create an advanced stealthy dropper that bypass most AVs and have a lot of tricks

blackberry/pe_tree

Python module for viewing Portable Executable (PE) files in a tree-view using pefile and PyQt5. Can also be used with IDA Pro and Rekall to dump…

mozilla/mig

Distributed & real time digital forensics at the speed of the cloud

snovvcrash/usbrip

Tracking history of USB events on GNU/Linux

robindavid/lsb-steganography

Python program to steganography files into images using the Least Significant Bit.

mandiant/silketw

C# wrapper for ETW that serializes kernel and user-mode event data to JSON for threat hunting, malware analysis, and incident response, with Yara…

etsy/midas

Mac Intrusion Detection Analysis System

grapl-security/grapl

Graph platform for Detection and Response

t4d/stalkphish

StalkPhish - The Phishing kits stalker, harvesting phishing kits for investigations.