
VolWeb
A centralized and enhanced memory analysis platform

A centralized and enhanced memory analysis platform

Cross-platform hashing toolset for computing message digests (MD5, SHA-1, SHA-256, Tiger, Whirlpool) with recursive directory traversal and file…

PowerShell script helping Incident Responders discover potential adversary persistence mechanisms.

Collects, processes, and visualizes forensic data from cloud and on-premise machine clusters for incident response and digital investigations.

Dissect is a digital forensics & incident response framework and toolset that allows you to quickly access and analyse forensic artefacts from…

Labtainers: A Docker-based cyber lab framework

Linux Evidence Acquisition Framework

Collaborative Incident Response platform

A tool to listen on a KNX bus via TPUART and the Calimero Project suite and to dump the data from the packets into a Wireshark-Compatible file hex…

Browser forensics tool for Google Chrome, other Chromium-based browsers, and Mozilla Firefox

Interactively find and recover deleted or :point_right: overwritten :point_left: files from your terminal

Incident Response Documentation made easy. Developed by Incident Responders for Incident Responders

macOS forensic timeline generator using the analysis result DBs of mac_apt

Log what files are accessed by any Linux process

Audits Windows event log settings against best-practice guidelines and Sigma-rule detectability, with automated configuration for DFIR readiness.

Generates YARA rules from installed software on a running OS to baseline known software and find similar installations across digital forensic…

Blue Team detection lab created with Terraform and Ansible in Azure.

Artifact collection tool for *nix systems