
hindsight
Browser forensics tool for Google Chrome, other Chromium-based browsers, and Mozilla Firefox

Browser forensics tool for Google Chrome, other Chromium-based browsers, and Mozilla Firefox

A forensic reconstruction engine for cloud and identity incident response.

Semantic search over videos using Gemini Embedding 2 or Qwen3-VL.

Know what changed inside your app: inspect Electron apps and binaries, trace findings to file and line, compare releases. Locally, without executing…

A repository to share publicly available Velociraptor detection content

mboxShell. Fast terminal viewer for MBOX files of any size. Open, search and export emails from Gmail Takeout backups (50GB+) without loading them…

UNIX-like reverse engineering framework and command-line toolset.

Parse and analyze a Windows Amcache.hve registry hive, VirusTotal integration.

Regipy is an os independent python library for parsing offline registry hives

IoT firmware identification and extraction

DFIR forensics companion server + capture extension

GTK4 and CLI cellular security toolkit with 57 modules for 2G GSM, 3G UMTS, 4G LTE and 5G NR air interface, core network, SIM identity, RF tracking,…

YARA signature and IOC database for my scanners and tools

Automation and Scaling of Digital Forensics Tools

A security-first MCP server that empowers AI agents to perform automated reverse engineering, malware analysis, forensics, vulnerability research,…

A modular OSINT & SOCMINT framework for social media intelligence, investigation, and public data analysis.

Tool for recovering and decrypting ES File Explorer encrypted files (.eslock)

A desktop workbench for writing, validating, compiling, and testing YARA rules.