
SOCMIntelligence
A modular OSINT & SOCMINT framework for social media intelligence, investigation, and public data analysis.

A modular OSINT & SOCMINT framework for social media intelligence, investigation, and public data analysis.

A privacy-first app that strips AI watermarks from content you own.

Analysis and cleanup guide for BadBox malware on Allwinner H713 Android projectors: ADB access, infection proof, firmware backup, dropper removal,…

Curated repository of threat intelligence feeds, IoC lists, YARA rules, and DFIR tool references for SOC/CERT/CTI detection and incident response.


A Mac OS X forensic utility which manages file system mounting in support of forensic procedures.

Extract a concerning amount of user information from Unisoc ZTE devices using CVE-2022-38694.

Finding secrets in kernel and user memory

Python ctypes wrapper for Event Tracing for Windows (ETW) enabling session control, event capture, and custom callbacks for security monitoring and…

Read-only triage script for WordPress sites after PHP2Shell (CVE-2026-109618, CVE-2026-109619). Checks for signs of compromise and writes a report…

Read-only PowerShell module for detecting UNC2452 and other threat actor artifacts in Azure AD, auditing federated domains, service principals,…

Read-only Windows forensic scanner for software traces — persistence, execution artifacts (Prefetch, Shimcache, BAM), user activity and Ghost Tasks…

Visualize the virtual address space of a Windows process on a Hilbert curve.

volatility explorer (volatility 2)

Automates Linux swap analysis to extract user credentials, web form data, WiFi keys, and HTTP authentication during post-exploitation or forensic…

A repository hosting example goodware evtx logs containing sample software installation and basic user interaction

SSH-based Linux incident response tool that executes diagnostic commands to collect network configs, logs, user accounts, and processes, then…