iLEAPP
abrignoni/ileappParses iOS and iPadOS forensic extractions into HTML, TSV, timeline, KML, and LAVA reports with modular artifact discovery and encrypted iTunes…
digital-forensicsforensicsincident-response+3
abrignoni/ileappParses iOS and iPadOS forensic extractions into HTML, TSV, timeline, KML, and LAVA reports with modular artifact discovery and encrypted iTunes…
bitcoin/bitcoinFull-node Bitcoin client that validates transactions and blocks on the peer-to-peer network, with integrated wallet, cryptographic security, and…
abrignoni/aleappAndroid Logs Events And Protobuf Parser
xephora/threat-remediation-scriptsThis repository contains a list of new remediation scripts.
winsiderss/systeminformerReal-time Windows system monitor with advanced process, network, and disk analysis, stack trace debugging, malware detection, and service management.…
graphworlok/cve-2021-35394-ecosystemTracking the family of unrelated IoT botnets sharing CVE-2021-35394 as a delivery vector — findings, relationships, methodology.
mkorman90/regipyRegipy is an os independent python library for parsing offline registry hives
lethal-forensics/macos-collectormacos-collector - Automated Collection of macOS Forensic Artifacts for DFIR
omerbenamram/evtxA Fast (and safe) parser for the Windows XML Event Log (EVTX) format
yamato-security/hayabusaMulti-threaded Windows event log forensics timeline generator and threat hunting tool with full Sigma rule support, producing CSV/JSON timelines for…
daffainfo/vol-rsVolatility 3 ported to Rust. Same output, much faster.
karim852/kage-dfir-toolkitWindows host DFIR triage console that chains artefact collection, Sigma-correlated timelines, YARA scans, socket and account inspection, indicator…
idescriptor/idescriptorprivacy-first, open-source and free idevice management tool written in Rust and Qt
tclahr/uacPortable, dependency-free incident response tool that automates forensic artifact collection from Unix-like systems, including memory acquisition,…
volatilityfoundation/volatility3Advanced framework for extracting digital artifacts from volatile memory (RAM) samples, enabling deep forensic analysis of system runtime state…
mgreen27/detectraptorA repository to share publicly available Velociraptor detection content
kraxel/virt-firmwareToolkit for decoding, inspecting, and modifying UEFI firmware volumes and variable stores. Supports secure boot certificate enrollment, PE binary…