
iDescriptor
privacy-first, open-source and free idevice management tool written in Rust and Qt

privacy-first, open-source and free idevice management tool written in Rust and Qt

Telegram OSINT, scraping and archival as a local web app. Multi-account collection, profile lookup with historic photos and change diffs, ten export…

Arkime is an open source, large scale, full packet capturing, indexing, and database system.

Incident Response Documentation made easy. Developed by Incident Responders for Incident Responders

PowerShell tool that extracts Active Directory artifacts via LDAP or ADWS and generates Excel reports for auditing, DFIR, and penetration testing.

Bash tool used for proactive detection of malicious activity on macOS systems.

Generates YARA rules from installed software on a running OS to baseline known software and find similar installations across digital forensic…

A portable C# utility for enumerating local and remote windows sessions

The best-in-class macOS app to See every packet clearly on your Mac. Alternative to Wireshark

Browser forensics tool for Google Chrome, other Chromium-based browsers, and Mozilla Firefox

Portable, dependency-free incident response tool that automates forensic artifact collection from Unix-like systems, including memory acquisition,…

Extract all forensic interesting information of Firefox, Iceweasel and Seamonkey browsers

This tool allows one to recover old RDP (mstsc) session information in the form of broken PNG files. These PNG files allows Red Team member to…

Download and View Skype History Without Skype

Semantic search over videos using Gemini Embedding 2 or Qwen3-VL.

This repository contains a list of new remediation scripts.


Proof-of-concept script that analyzes Windows memory dumps to recover visited Tor onion services, bypassing Tor Browser's anonymity by exploiting…