


Remote live forensics and incident response framework with Python agent for collecting forensic data from endpoints, including memory, disk, and…


An advanced memory forensics framework

Volatility 3 ported to Rust. Same output, much faster.

UNIX-like reverse engineering framework and command-line toolset.

Swift-based macOS incident response framework for collecting and analyzing host artifacts, including filesystem timestamps, browser data, unified…

Advanced framework for extracting digital artifacts from volatile memory (RAM) samples, enabling deep forensic analysis of system runtime state…

Dissect is a digital forensics & incident response framework and toolset that allows you to quickly access and analyse forensic artefacts from…

Malicious HTTP traffic explorer


The ultimate steganography and digital forensics toolkit. Hide and extract data across images, audio, video, documents, and network packets, or run…

Framework for hashing declared permissions in Chromium extensions and APKs, enabling clustering, hunting, and pivoting across potentially malicious…

Python scriptable Reverse Engineering Sandbox, a Virtual Machine instrumentation and inspection framework based on QEMU

🦅 ZeroScout: The Autonomous Local & Cloud Threat Hunter. Visualize attacks in a live War Room, identify APT groups via Genetic Analysis, and…

Incident Response Forensic Framework

Digital Forensics Intelligence Framework

A Jupyter notebook to assist with the analysis of the output generated from Volatility memory extraction framework.