
magika
Fast and accurate AI powered file content types detection

Fast and accurate AI powered file content types detection

Windows tool for dumping malware PE files from memory back to disk for analysis.

Forensics artefact collection tool for systems running Microsoft Windows

A Proof-of-Concept bootkit and UEFI boot application inspired by Petya ransomware, written in Assembly, C, and C++

Turn any collection of documents into a knowledge graph. Extract entities and relationships via LLM, deduplicate with your approval. Map domains,…

StalkPhish - The Phishing kits stalker, harvesting phishing kits for investigations.

Retrieve the master password of a keepass database <= 2.53.1

Brute-force tool that recovers full executable paths from Windows prefetch hashes using bodyfiles, supporting XP, Vista, and 2008 hash functions for…

a file-sharing tool that allows you to find the responsible person in case of a leakage

Automated forensic script hunting for cve-2019-19781