
Detect-It-Easy
Program for determining types of files for Windows, Linux and MacOS.

Program for determining types of files for Windows, Linux and MacOS.

Wireshark's official code repository. You can keep the releases coming by donating at https://wiresharkfoundation.org/donate/.

Python-based interactive packet manipulation library for forging, decoding, sending, capturing, and analyzing network packets across a wide range of…

Extract files from any kind of container formats

Remove visible and invisible AI watermarks from images and video, and AI provenance metadata from images, video, and audio. Python library, CLI, and…

Browser forensics tool for Google Chrome, other Chromium-based browsers, and Mozilla Firefox

UNIX-like reverse engineering framework and command-line toolset

A Fast (and safe) parser for the Windows XML Event Log (EVTX) format

Parses iOS and iPadOS forensic extractions into HTML, TSV, timeline, KML, and LAVA reports with modular artifact discovery and encrypted iTunes…

Semantic search over videos using Gemini Embedding 2 or Qwen3-VL.

the TCPdump network dissector

A network sniffer that logs all DNS server replies for use in a passive DNS setup

A standalone SIGMA-based detection tool for EVTX, Auditd and Sysmon for Linux logs

A simple application that extracts your IoCs from garbage input and checks their reputation using multiple CTI services.

mboxShell. Fast terminal viewer for MBOX files of any size. Open, search and export emails from Gmail Takeout backups (50GB+) without loading them…

Real-time Windows system monitor with advanced process, network, and disk analysis, stack trace debugging, malware detection, and service management.…

Arkime is an open source, large scale, full packet capturing, indexing, and database system.

Digital forensics engine that parses logs, files, and system artifacts to build super timelines, enabling chronological event correlation for…