pict
thomasareed/pictModular incident response toolkit for collecting forensic data from potentially infected macOS endpoints, capturing browser artifacts, persistence…
digital-forensicsforensicsincident-response+2
95
thomasareed/pictModular incident response toolkit for collecting forensic data from potentially infected macOS endpoints, capturing browser artifacts, persistence…
synacktiv/sharkerA simple, reliable and reasonably fast network capture analyzer.
arkime/arkimeArkime is an open source, large scale, full packet capturing, indexing, and database system.
proxymanapp/tcpviewerThe best-in-class macOS app to See every packet clearly on your Mac. Alternative to Wireshark
sevagas/swap_diggerAutomates Linux swap analysis to extract user credentials, web form data, WiFi keys, and HTTP authentication during post-exploitation or forensic…
invoke-ir/aceAutomated, Collection, and Enrichment Platform
haruu77g/phantomprintPassive hybrid fingerprinting engine — identify hosts without sending a single packet
ssrajadh/sentrysearchSemantic search over videos using Gemini Embedding 2 or Qwen3-VL.
idescriptor/idescriptorprivacy-first, open-source and free idevice management tool written in Rust and Qt
thehive-project/cortexCortex: a Powerful Observable Analysis and Active Response Engine
ryandfir/hindsightBrowser forensics tool for Google Chrome, other Chromium-based browsers, and Mozilla Firefox
tclahr/uacPortable, dependency-free incident response tool that automates forensic artifact collection from Unix-like systems, including memory acquisition,…
cisagov/untitledgoosetoolUntitled Goose Tool is a robust and flexible hunt and incident response tool that adds novel authentication and data gathering methods in order to…
adrecon/adreconPowerShell tool that extracts Active Directory artifacts via LDAP or ADWS and generates Excel reports for auditing, DFIR, and penetration testing.
nightbringer21/fridumpCross-platform memory dumper using Frida to extract accessible memory from iOS, Android, and Windows applications for forensic analysis and…
cyb3rfox/aurora-incident-responseIncident Response Documentation made easy. Developed by Incident Responders for Incident Responders
invictus-ir/microsoft-extractor-suiteA PowerShell module for acquisition of data from Microsoft 365 and Azure for Incident Response and Cyber Security purposes.
