
mvt
Forensic collection and analysis toolkit for Android and iOS devices to identify potential compromise by known spyware using public and private…

Forensic collection and analysis toolkit for Android and iOS devices to identify potential compromise by known spyware using public and private…

Dshell is a network forensic analysis framework.

ngrep is like GNU grep applied to the network layer. It's a PCAP-based tool that allows you to specify an extended regular or hexadecimal expression…

Multiplatform C++ library for high-performance network packet capture, parsing, crafting, and analysis. Supports libpcap, DPDK, AF_XDP, PF_RING, and…

Collects, processes, and visualizes forensic data from cloud and on-premise machine clusters for incident response and digital investigations.

A command line tool for pstree-like output on macOS with additional pid capturing capabilities

Some setup scripts for security research tools.

Curated index of incident response and DFIR tools, including memory and disk forensics, evidence collection, log analysis, playbooks, and educational…

GUI analyzer for deep-diving into PDF files. Detect malicious payloads, understand object relationships, and extract key information for threat…

Offset Independent Credential Extraction Tool

Curated Indicators of Compromise (IOCs) from Doctor Web malware investigations, published for threat intelligence, detection engineering, and…

Python CLI/TUI for forensic triage of Ubuntu systems — detects and remediates persistence mechanisms with artifact collection, timeline correlation,…

chat log tool, easily use your own chat data. 聊天记录工具,轻松使用自己的聊天数据

Software to identify the different types of hashes -

Moneta is a live usermode memory analysis tool for Windows with the capability to detect malware IOCs

privacy-first, open-source and free idevice management tool written in Rust and Qt

Open-source forensics framework for analyzing Industrial PLC metadata and project files. Scans for suspicious artifacts in ICS environments to…