
An-Integrated-Wireless-Network-Forensic-Analysis-Framework
This framework combines a set of existing open source tools into an integrated package that automates the forensics investigation process. It is able…

This framework combines a set of existing open source tools into an integrated package that automates the forensics investigation process. It is able…

An open standard for hashing network flows into identifiers, a.k.a "Community IDs".

Arkime is an open source, large scale, full packet capturing, indexing, and database system.

Volatility plugin to extract X screenshots from a memory dump

An advanced memory forensics framework

mboxShell. Fast terminal viewer for MBOX files of any size. Open, search and export emails from Gmail Takeout backups (50GB+) without loading them…

Differential Analysis of Malware in Memory

AIL framework - Analysis Information Leak framework. Project moved to https://github.com/ail-project

StyleSmuggler (CVE-2026-75650) IOC toolkit for Magento Open Source and Adobe Commerce. Detect compromised stores, Rust implants, PHP web shells,…

IOC and YARA-based scanner for detecting indicators of compromise via file name regex, YARA signatures, hash matching, and C2 back-connect checks on…

privacy-first, open-source and free idevice management tool written in Rust and Qt

Extracts and downloads Snap Map media by coordinates for OSINT, forensic analysis, and research. Supports metadata logging and bulk download.

Cross-platform memory dumper using Frida to extract accessible memory from iOS, Android, and Windows applications for forensic analysis and…

Generates YARA rules from installed software on a running OS to baseline known software and find similar installations across digital forensic…


Collects macOS and iOS artifacts to build timelines of network activity, cross-device identity, and physical location correlation for reconnaissance…

Dshell is a network forensic analysis framework.

Imaginary C2 is a python tool which aims to help in the behavioral (network) analysis of malware. Imaginary C2 hosts a HTTP server which captures…