
ForensiX-Studio
Forensic intelligence platform that analyzes files, correlates threat indicators, maps behavior to MITRE ATT&CK, and generates actionable security…

Forensic intelligence platform that analyzes files, correlates threat indicators, maps behavior to MITRE ATT&CK, and generates actionable security…

SQL powered operating system instrumentation, monitoring, and analytics.

Java library to analyse Portable Executable files with a special focus on malware analysis and PE malformation robustness

A modular, skill-based autonomous Security Operations Center (SOC) agent that monitors OpenSearch/Elasticsearch data, builds RAG-based behavioral…

A network packet forensics tool for SSH

Flows-first PCAP TUI (case files, gorgeous UX). Do do do do.

Enumerate various traits from Windows processes as an aid to threat hunting


ML-assisted forensic analysis tool that automates memory, disk, and live system triage on Windows using Volatility 3, autorunsc, and sigcheck to…

Programmable packet inspection engine with NIDS, DNS classification, frequency analysis, and auto-regex generation. Supports Python/Ruby/Java/Lua…

PETriage: A symbol-unified PE file reader for triage, built for multi-platform and multi-interface use.

Basic log analysis tool to detect impossible travel via IP address geographic information

Fingerprint SSH clients and servers.

Unix endpoint detection and response solution using kernel-level mechanisms to detect anomalies and malware attacks in real time.

HASSH is a network fingerprinting standard which can be used to identify specific Client and Server SSH implementations. The fingerprints can be…

Offline-first network investigation and response platform for Windows. Turns a pcap or live capture into a full forensic verdict — attack story,…

Analysis and Representation of Graphs of Suspicious Operations (Analyse et Représentation des Graphes des Opérations Suspectes)