
rizin
UNIX-like reverse engineering framework and command-line toolset.

UNIX-like reverse engineering framework and command-line toolset.

Zeek is a powerful network analysis framework that is much different from the typical IDS you may know.

AIL framework - Analysis Information Leak framework. Project moved to https://github.com/ail-project

Tool and framework for securely reading untrusted USB mass storage devices.

Advanced framework for extracting digital artifacts from volatile memory (RAM) samples, enabling deep forensic analysis of system runtime state…

Framework for hashing declared permissions in Chromium extensions and APKs, enabling clustering, hunting, and pivoting across potentially malicious…

Dissect is a digital forensics & incident response framework and toolset that allows you to quickly access and analyse forensic artefacts from…

Volatility 3 ported to Rust. Same output, much faster.

Remote live forensics and incident response framework with Python agent for collecting forensic data from endpoints, including memory, disk, and…

A modular OSINT & SOCMINT framework for social media intelligence, investigation, and public data analysis.

Labtainers: A Docker-based cyber lab framework

Automated forensic analysis tool for Google Workspace audit logs. Acquires all log types, maps events to MITRE ATT&CK Cloud Framework, and identifies…

Collects macOS and iOS artifacts to build timelines of network activity, cross-device identity, and physical location correlation for reconnaissance…

High-performance OSINT/CTI framework for automated identity pivoting and risk analysis across 120+ sources.

The ultimate steganography and digital forensics toolkit. Hide and extract data across images, audio, video, documents, and network packets, or run…

Digital Forensics Intelligence Framework

🦅 ZeroScout: The Autonomous Local & Cloud Threat Hunter. Visualize attacks in a live War Room, identify APT groups via Genetic Analysis, and…

Swift-based macOS incident response framework for collecting and analyzing host artifacts, including filesystem timestamps, browser data, unified…