
hindsight
Browser forensics tool for Google Chrome, other Chromium-based browsers, and Mozilla Firefox

Browser forensics tool for Google Chrome, other Chromium-based browsers, and Mozilla Firefox

Portable Linux RAM acquisition tool for forensics and incident response, capturing LiME-compatible images with optional compression and remote…

Powershell Based tool for gathering information related to O365 intrusions and potential Breaches

File carving and indexing tool for digital forensics, recovering files from disk images based on header/footer pattern matching, regular expressions,…

Forensics artefact collection tool for systems running Microsoft Windows

Forensics tool for NTFS (parser, mft, bitlocker, deleted files)

A tool for forensic file system reconstruction.

Moneta is a live usermode memory analysis tool for Windows with the capability to detect malware IOCs

Automated forensic analysis tool for Google Workspace audit logs. Acquires all log types, maps events to MITRE ATT&CK Cloud Framework, and identifies…

A command line tool for pstree-like output on macOS with additional pid capturing capabilities

ELEGANTBOUNCER is a detection tool for file-based mobile exploits.

Telegram intelligence collection tool for researchers and investigators. Scrapes groups, messages, media, and user data with OCR, Elasticsearch…

A tool for mapping cyber crime

Digital forensic acquisition tool for Windows based incident response.

Artifact collection tool for *nix systems

Automated threat hunting and incident response tool for Windows Event Logs with Sigma rule integration, real-time detection, and forensic artifact…

Live memory analysis tool for detecting reflectively loaded .NET DLLs by scanning process memory regions for abnormal flags, page types, and PE…

Interrogate is a proof-of-concept tool for identification of cryptographic keys in binary material (regardless of target operating system), first and…