
usbsas
Tool and framework for securely reading untrusted USB mass storage devices.

Tool and framework for securely reading untrusted USB mass storage devices.

An OSINT investigation case mapping tool for organizing entities, relationships, evidence, and intelligence.

mboxShell. Fast terminal viewer for MBOX files of any size. Open, search and export emails from Gmail Takeout backups (50GB+) without loading them…

Extracts cryptocurrency private keys and addresses from wallet.dat files for Bitcoin and Litecoin, enabling wallet recovery and forensic analysis.

Tools and Techniques for Blue Team / Incident Response

A utility for extracting cryptocurrency wallet data from wallet.dat files.

Python tool that parses the NTFS $MFT to copy locked files during incident response, bypassing OS locks by reading raw disk locations. Supports…

Use to copy a file from an NTFS partitioned volume by reading the raw volume and parsing the NTFS structures.

Commandline low level file extractor for NTFS