
Nimbus Vestige
A forensic reconstruction engine for cloud and identity incident response.

A forensic reconstruction engine for cloud and identity incident response.

Portable Linux RAM acquisition tool for forensics and incident response, capturing LiME-compatible images with optional compression and remote…

A repository of sysmon configuration modules

Forensics artefact collection tool for systems running Microsoft Windows

A PowerShell module for acquisition of data from Microsoft 365 and Azure for Incident Response and Cyber Security purposes.

Extracts browser-stored data such as refresh tokens, cookies, saved credentials, credit cards, autofill entries, browsing history, and bookmarks from…

Utility that converts an .etl file containing a Windows network packet capture into .pcapng format.

Tool to scan for RouterOS (Mikrotik) forensic artifacts and vulnerabilities.

A tool to use novel locations to extract metadata from Office documents.

Incident Response & Digital Forensics Debugging Extension