
analyzeMFT
analyzeMFT.py is designed to fully parse the MFT file from an NTFS filesystem and present the results as accurately as possible in multiple formats.

analyzeMFT.py is designed to fully parse the MFT file from an NTFS filesystem and present the results as accurately as possible in multiple formats.


Collection of forensic tools

A Mac OS X forensic utility which manages file system mounting in support of forensic procedures.

FAT filesystems explore, extract, repair, and forensic tool

A bare-metal x86 utility to dump physical RAM directly to disk. Built and tested for Cold Boot Attack experiments on frozen memory.

A python tool that will extract exif data from picture with two methods

Offset Independent Credential Extraction Tool

Utility for recovering ES File Explorer encrypted files (.eslock)

Python Security Project that implements a file encryption and decryption tool

Detection and restoration of Windows Snipping Tool PNG captures vulnerable to CVE-2023-28303

A lightweight CLI tool to detect and reconstruct cropped images vulnerable to Acropalypse (CVE-2023-21036 and CVE-2023-28303) written in Python.