
arkime
Arkime is an open source, large scale, full packet capturing, indexing, and database system.

Arkime is an open source, large scale, full packet capturing, indexing, and database system.

IPED Digital Forensic Tool. It is an open source software that can be used to process and analyze digital evidence, often seized at crime scenes by…

Open source Android, iOS and Web app for learning about and managing digital and physical security. From how to send a secure message to dealing with…

Open source Baltic Sea shadow fleet tracker. 1200+ vessels, live AIS, cable proximity alerts. No cloud, no subscription, runs locally

This framework combines a set of existing open source tools into an integrated package that automates the forensics investigation process. It is able…

Open source Android Forensics app and framework

Forensic library and CLI toolkit for analyzing disk and file system images, recovering deleted data, generating timelines, and validating evidence…

Collaborative forensic timeline analysis platform for ingesting, searching, and annotating event logs to support incident response and DFIR…

AIL framework - Analysis Information Leak framework. Project moved to https://github.com/ail-project

A free, open-source, and cross-platform iDevice management tool

IOC and YARA-based scanner for detecting indicators of compromise via file name regex, YARA signatures, hash matching, and C2 back-connect checks on…

Re-play Security Events

Cross-platform memory dumper using Frida to extract accessible memory from iOS, Android, and Windows applications for forensic analysis and…

The multi-platform memory acquisition tool.

System-based incident response tracking application for managing large-scale DFIR cases, with import/export, task workflows, and artifact tracking…

Open-source forensics framework for analyzing Industrial PLC metadata and project files. Scans for suspicious artifacts in ICS environments to…

Tool and framework for securely reading untrusted USB mass storage devices.

Forensics artefact collection tool for systems running Microsoft Windows