
OsintCase
An OSINT investigation case mapping tool for organizing entities, relationships, evidence, and intelligence.

An OSINT investigation case mapping tool for organizing entities, relationships, evidence, and intelligence.

File carving utility that recovers deleted files from disk images and raw drives by matching headers, footers, and internal structures via…

File carving and indexing tool for digital forensics, recovering files from disk images based on header/footer pattern matching, regular expressions,…

Library and tools to access the QEMU Copy-On-Write (QCOW) image format

secure vault for your files

Tools developed by the Zscaler ThreatLabz Threat Intelligence team

Parser for $LogFile on NTFS

Autopsy® is a digital forensics platform and graphical interface to The Sleuth Kit® and other digital forensics tools. It can be used by law…

Manage WhatsApp .crypt12, .crypt14 and .crypt15 files.

Tool for recovering and decrypting ES File Explorer encrypted files (.eslock)

Manage BitLocker encrypted drives on Windows. Extract recovery keys, check encryption status, and apply security mitigations for CVE-2026-45585.


android location service cache dumper

Extracts and decrypts the 4-digit restriction passcode from iPhone backups on Windows machines, enabling recovery of device access controls.

ParanoiDF - PDF Analysis Suite based on PeePDF by Jose Miguel Esparza (http://peepdf.eternal-todo.com/). Tools added: Password cracking, redaction…

A robust digital forensics tool for extracting and analyzing Google Chrome artifacts from Android devices

Proof-of-concept for CVE-2025-50422: demonstrates heap memory disclosure in Poppler's pdftocairo, allowing local attackers to recover clear-text PDF…

Hex Viewer/Editor/Analyzer compatible with Linux/Windows/MacOS