
volatility3
Advanced framework for extracting digital artifacts from volatile memory (RAM) samples, enabling deep forensic analysis of system runtime state…
digital-forensicsforensicsincident-response+2
4.4k

Advanced framework for extracting digital artifacts from volatile memory (RAM) samples, enabling deep forensic analysis of system runtime state…

A Windows kernel dump C++ parser library with Python 3 bindings.

'Packet Capture Forensic Evidence eXtractor' is a tool that finds and extracts files from packet capture files