
Detect-It-Easy
Program for determining types of files for Windows, Linux and MacOS.

Program for determining types of files for Windows, Linux and MacOS.

Multi-threaded Windows event log forensics timeline generator and threat hunting tool with full Sigma rule support, producing CSV/JSON timelines for…

Curated repository of threat intelligence feeds, IoC lists, YARA rules, and DFIR tool references for SOC/CERT/CTI detection and incident response.

IPED Digital Forensic Tool. It is an open source software that can be used to process and analyze digital evidence, often seized at crime scenes by…

Portable Linux RAM acquisition tool for forensics and incident response, capturing LiME-compatible images with optional compression and remote…

Real-time Windows system monitor with advanced process, network, and disk analysis, stack trace debugging, malware detection, and service management.…


Tool and framework for securely reading untrusted USB mass storage devices.

Collaborative forensic timeline analysis platform for ingesting, searching, and annotating event logs to support incident response and DFIR…

Encrypted peer-to-peer mesh VPN for remote mobile forensics, enabling wireless ADB and libimobiledevice acquisition, network monitoring, and…

A command line tool for pstree-like output on macOS with additional pid capturing capabilities

The multi-platform memory acquisition tool.

An OSINT investigation case mapping tool for organizing entities, relationships, evidence, and intelligence.

Browser forensics tool for Google Chrome, other Chromium-based browsers, and Mozilla Firefox

Parse and analyze a Windows Amcache.hve registry hive, VirusTotal integration.

A modular OSINT & SOCMINT framework for social media intelligence, investigation, and public data analysis.

Tool for recovering and decrypting ES File Explorer encrypted files (.eslock)

Algorithmic PE de-obfuscator, Shannon entropy radar, and incident triage engine