


Tool and framework for securely reading untrusted USB mass storage devices.


Tool to securely and efficiently wipe devices and partiitions for Linux

Tool for recovering and decrypting ES File Explorer encrypted files (.eslock)

Collaborative forensic timeline analysis platform for ingesting, searching, and annotating event logs to support incident response and DFIR…

Mediatek Flash and Repair Utility

IPED Digital Forensic Tool. It is an open source software that can be used to process and analyze digital evidence, often seized at crime scenes by…

androidqf (Android Quick Forensics) helps quickly gathering forensic evidence from Android devices, in order to identify potential traces of…

An OSINT investigation case mapping tool for organizing entities, relationships, evidence, and intelligence.

Manage and recover BitLocker encrypted drives with this tool for Windows 11 recovery key management and educational study of CVE-2026-45585.

This is the development tree. Production downloads are at:

Tools developed by the Zscaler ThreatLabz Threat Intelligence team

Extracts cryptocurrency private keys and addresses from wallet.dat files for Bitcoin and Litecoin, enabling wallet recovery and forensic analysis.

High-performance, streaming-first container format with per-block codec polymorphism and robust data recoverability. Reference implementation in Rust.

A simple, modern and secure encryption tool (and Go library) with small explicit keys, no config options, and UNIX-style composability.

Universal Windows extraction tool that detects unknown files and routes them to the right bundled extractor.

Static-first research tool for unpacking Nuitka-compiled binaries: extracts constants, modules, recovers .pyc files, and generates analysis reports.