
OSXAuditor
OS X Auditor is a free Mac OS X computer forensics tool

OS X Auditor is a free Mac OS X computer forensics tool

This is the development tree. Production downloads are at:

A list of cyber-chef recipes and curated links


Dissect is a digital forensics & incident response framework and toolset that allows you to quickly access and analyse forensic artefacts from…

Hands-on DFIR challenges covering digital forensics, incident response, malware analysis, and threat hunting with CTF-style flags and real-world…

A Mac OS X forensic utility which manages file system mounting in support of forensic procedures.

Library and tools to access the Windows New Technology File System (NTFS)

Library and tools to access the VMware Virtual Disk (VMDK) format

Library and tools to access the Virtual Hard Disk (VHD) image format

FAT filesystems explore, extract, repair, and forensic tool

Library and tools to access the Volume Shadow Snapshot (VSS) format

Open-source Windows forensics engine that acquires, parses, and correlates artifacts (MFT, USN, Registry, etc.) to reconstruct timelines with…

Tool to extract the $UsnJrnl from an NTFS volume

Library and tools to access the QEMU Copy-On-Write (QCOW) image format


It's not just UsnJrnl (USN Journal Records/Change Journal Records) parser.

Digital Forensics Intelligence Framework