
mvt
Forensic collection and analysis toolkit for Android and iOS devices to identify potential compromise by known spyware using public and private…

Forensic collection and analysis toolkit for Android and iOS devices to identify potential compromise by known spyware using public and private…

Dshell is a network forensic analysis framework.


ngrep is like GNU grep applied to the network layer. It's a PCAP-based tool that allows you to specify an extended regular or hexadecimal expression…

Multiplatform C++ library for high-performance network packet capture, parsing, crafting, and analysis. Supports libpcap, DPDK, AF_XDP, PF_RING, and…

A command line tool for pstree-like output on macOS with additional pid capturing capabilities

GUI analyzer for deep-diving into PDF files. Detect malicious payloads, understand object relationships, and extract key information for threat…

Collects, processes, and visualizes forensic data from cloud and on-premise machine clusters for incident response and digital investigations.

Some setup scripts for security research tools.

Curated index of incident response and DFIR tools, including memory and disk forensics, evidence collection, log analysis, playbooks, and educational…

Offset Independent Credential Extraction Tool

Python CLI/TUI for forensic triage of Ubuntu systems — detects and remediates persistence mechanisms with artifact collection, timeline correlation,…

Curated Indicators of Compromise (IOCs) from Doctor Web malware investigations, published for threat intelligence, detection engineering, and…

chat log tool, easily use your own chat data. 聊天记录工具,轻松使用自己的聊天数据

A network sniffer that logs all DNS server replies for use in a passive DNS setup

privacy-first, open-source and free idevice management tool written in Rust and Qt

Software to identify the different types of hashes -

Moneta is a live usermode memory analysis tool for Windows with the capability to detect malware IOCs