
sherlock
Hunt down social media accounts by username across social networks

Hunt down social media accounts by username across social networks

Remove visible and invisible AI watermarks and provenance metadata from images and video. Python library and CLI for SynthID, C2PA, EXIF, IPTC, XMP,…

Zeek is a powerful network analysis framework that is much different from the typical IDS you may know.

Forensic collection and analysis toolkit for Android and iOS devices to identify potential compromise by known spyware using public and private…

OSINT & recon toolkit // 100+ tools, one-command installer, SOCMINT, GEOINT, network recon, dark web, forensics & more.

A modular OSINT & SOCMINT framework for social media intelligence, investigation, and public data analysis.

Curated collection of cybersecurity resources, labs, and training materials covering ethical hacking, penetration testing, exploit development,…

Python tool and library to help analyze files during malware triage and analysis.

Dshell is a network forensic analysis framework.

Real-time Windows system monitor with advanced process, network, and disk analysis, stack trace debugging, malware detection, and service management.…

Capture and analyze network traffic with deep packet inspection, protocol decoding across hundreds of protocols, and capture-file support for…

PowerShell-based incident response toolkit that collects 25+ forensic artifacts (processes, network connections, registry, browser history) and…

Investigate malicious Windows logon by visualizing and analyzing Windows event log

IoT firmware identification and extraction

Utility that converts an .etl file containing a Windows network packet capture into .pcapng format.

DFIR forensics companion server + capture extension

Forensic triage toolkit for Citrix NetScaler devices, featuring a Dissect-based IOC scanner for webshells, timestomping, and suspicious binaries,…

IOC and YARA-based scanner for detecting indicators of compromise via file name regex, YARA signatures, hash matching, and C2 back-connect checks on…