
aws-firmware-dump
Acquires the EBS disks of an AWS AMI you can launch, streaming snapshots via EBS direct APIs to a private S3 bucket with sha256 manifests and…

Acquires the EBS disks of an AWS AMI you can launch, streaming snapshots via EBS direct APIs to a private S3 bucket with sha256 manifests and…

Hands-on DFIR challenges covering digital forensics, incident response, malware analysis, and threat hunting with CTF-style flags and real-world…

Curated index of incident response and DFIR tools, including memory and disk forensics, evidence collection, log analysis, playbooks, and educational…

A list of cyber-chef recipes and curated links



Python script for carving Bitlocker VMK keys

A Windows Batch script and a Unix Bash script to comprehensively collect host forensic data during incident response.

IOC and YARA-based scanner for detecting indicators of compromise via file name regex, YARA signatures, hash matching, and C2 back-connect checks on…

Collect, Process, and Hunt with host based data from MacOS, Windows, and Linux

A really good DFIR automation for collecting and analyzing evidence designed for cybersecurity professionals.

Collection of forensic tools

Dissect is a digital forensics & incident response framework and toolset that allows you to quickly access and analyse forensic artefacts from…
