Tools

c3n7ral051nt4g3ncy/osint_inception-links

Current links from the OSINT Inception start-me project

threatlabz/tools

Tools developed by the Zscaler ThreatLabz Threat Intelligence team

dissectmalware/pyonenote

A python library to parse OneNote (.one) files

packetlss/android-locdump

android location service cache dumper

daffainfo/vol-rs

Volatility 3 ported to Rust. Same output, much faster.

controlplaneio/truffleproc

truffleproc — hunt secrets in process memory (TruffleHog & gdb mashup)

pandare9x/configuration_extractors

Configuration Extractors for Malware

jschicht/extractusnjrnl

Tool to extract the $UsnJrnl from an NTFS volume

mnrkbys/ma2tl

macOS forensic timeline generator using the analysis result DBs of mac_apt

libyal/libfwsi

Library to access the Windows Shell Item format

blueteam0ps/memoptix

A Jupyter notebook to assist with the analysis of the output generated from Volatility memory extraction framework.

lethal-forensics/macos-collector

macos-collector - Automated Collection of macOS Forensic Artifacts for DFIR

withsecurelabs/garbageman

GarbageMan is a set of tools for analyzing .NET binaries through heap analysis.

bedrock-safeguard/gentlemen-decryptor

First-ever decryptor for The Gentlemen ransomware — recovers encryption keys from process memory dumps using X25519 ephemeral key extraction. 35/35…

citrix/ioc-scanner-cve-2019-19781

Indicator of Compromise Scanner for CVE-2019-19781

hamza-megahed/volatility-gui

GUI for Volatility forensics tool written in PyQT5

d4vinci/exif-grabber

A python tool that will extract exif data from picture with two methods

weirdmachine64/sharkmcp

A swiss-knife MCP server for analysing PCAP files