
KapeFiles
This repository serves as a place for community created Targets and Modules for use with KAPE.

This repository serves as a place for community created Targets and Modules for use with KAPE.

A tool for forensic file system reconstruction.

Incident Response Forensic Framework

Open-source Windows forensics engine that acquires, parses, and correlates artifacts (MFT, USN, Registry, etc.) to reconstruct timelines with…

Forensics tool for NTFS (parser, mft, bitlocker, deleted files)

OS X Auditor is a free Mac OS X computer forensics tool

Distributed & real time digital forensics at the speed of the cloud

Collection of forensic tools

Digital Forensics Intelligence Framework

ltm is a machine-history debugger for Linux. It records process, file, network, memory, and block-I/O metadata via eBPF, then lets you query the…

F*ck file system - cli file search tool that bypasses OS kernel and reads your disc directlry

A list of cyber-chef recipes and curated links

A forensic evidence collection & analysis toolkit for OS X

Library and tools to access the VMware Virtual Disk (VMDK) format


Acquires the EBS disks of an AWS AMI you can launch, streaming snapshots via EBS direct APIs to a private S3 bucket with sha256 manifests and…

Interactively find and recover deleted or :point_right: overwritten :point_left: files from your terminal

Commandline low level file extractor for NTFS