
machscope
macOS IPC, launchd, Mach-O, and trust relationship explorer — zero-dependency terminal-native forensic tool

macOS IPC, launchd, Mach-O, and trust relationship explorer — zero-dependency terminal-native forensic tool

Multi-threaded Windows event log forensics timeline generator and threat hunting tool with full Sigma rule support, producing CSV/JSON timelines for…



Utility for recovering ES File Explorer encrypted files (.eslock)

Telegram intelligence collection tool for researchers and investigators. Scrapes groups, messages, media, and user data with OCR, Elasticsearch…

Create and enumerate hidden desktops.

Malicious HTTP traffic explorer

Volatility Explorer Suit (volatility 3)

Search and extract blob files on the Ethereum Blockchain network

volatility explorer (volatility 2)