
CapTipper
Malicious HTTP traffic explorer

Malicious HTTP traffic explorer

Remote live forensics and incident response framework with Python agent for collecting forensic data from endpoints, including memory, disk, and…

UNIX-like reverse engineering framework and command-line toolset.

Labtainers: A Docker-based cyber lab framework

Process heap analysis framework - Windows/Linux - record type inference and forensics

An advanced memory forensics framework


Python scriptable Reverse Engineering Sandbox, a Virtual Machine instrumentation and inspection framework based on QEMU

PowerShell tool that extracts Active Directory artifacts via LDAP or ADWS and generates Excel reports for auditing, DFIR, and penetration testing.