flare-floss
mandiant/flare-flossFLARE Obfuscated String Solver - Automatically extract obfuscated strings from malware.
ai-assisted-reversingbinary-analysisdigital-forensics+8
mandiant/flare-flossFLARE Obfuscated String Solver - Automatically extract obfuscated strings from malware.
velocidex/velociraptorEndpoint visibility and collection tool using VQL queries for host-based state information gathering, incident response triage, and forensic artifact…
mvt-project/mvtForensic collection and analysis toolkit for Android and iOS devices to identify potential compromise by known spyware using public and private…
virustotal/yara-xRust-based pattern matching engine for malware researchers. Create YARA rules with textual/binary patterns, wildcards, and regex to identify and…
cristianzsh/forensictoolsWindows toolkit that installs and configures a comprehensive suite of digital forensics and incident response tools, integrating them into the system…
cgsecurity/testdiskRecovers lost partitions and repairs boot sectors; carves 480+ file formats from damaged disks and filesystems for data recovery and forensic use.
sleuthkit/sleuthkitForensic library and CLI toolkit for analyzing disk and file system images, recovering deleted data, generating timelines, and validating evidence…
google/timesketchCollaborative forensic timeline analysis platform for ingesting, searching, and annotating event logs to support incident response and DFIR…
simsong/bulk_extractorThis is the development tree. Production downloads are at:
cristiancmoises/zuptBackup compression with AES-256 authenticated encryption and post-quantum key encapsulation.
r3nzsec/irflow-timelineDFIR Timeline Analysis for macOS — SQLite-backed viewer for CSV, TSV, XLSX, EVTX, Plaso, $MFT, and $J files with AI Artifacts, AI Secret Hunt,…
sepinf-inc/ipedOpen-source digital forensic platform for processing and analyzing seized evidence. Supports disk images, file carving, hash analysis, OCR, audio…
ghassan-elsman/crow-eyeOpen-source Windows forensics engine that acquires, parses, and correlates artifacts (MFT, USN, Registry, etc.) to reconstruct timelines with…
log2timeline/plasoDigital forensics engine that parses logs, files, and system artifacts to build super timelines, enabling chronological event correlation for…
xchwarze/magic-extractorUniversal Windows extraction tool that detects unknown files and routes them to the right bundled extractor.
frankwxu/digital-forensics-labHands-on digital forensics lab curriculum with case studies in disk, memory, network, and mobile forensics, plus AI-powered investigation modules and…
lazza/recuperabitA tool for forensic file system reconstruction.
pablolec/recoverpyInteractively find and recover deleted or :point_right: overwritten :point_left: files from your terminal