
systeminformer
Real-time Windows system monitor with advanced process, network, and disk analysis, stack trace debugging, malware detection, and service management.…

Real-time Windows system monitor with advanced process, network, and disk analysis, stack trace debugging, malware detection, and service management.…

Wireshark's official code repository. You can keep the releases coming by donating at https://wiresharkfoundation.org/donate/.


mboxShell. Fast terminal viewer for MBOX files of any size. Open, search and export emails from Gmail Takeout backups (50GB+) without loading them…

Security sensor for realtime threat detection and protection

Program for determining types of files for Windows, Linux and MacOS.

pefile is a Python module to read and work with PE (Portable Executable) files

Per-process network monitoring for your terminal with deep packet inspection. Cross-platform, sandboxed.

Free hands-on digital forensics labs for students and faculty

Indicators of compromise from to analysis and research by Nextron Threat Research team

Capture and analyze network traffic with deep packet inspection, protocol decoding across hundreds of protocols, and capture-file support for…

DFIR forensics companion server + capture extension

Bulk-run Hayabusa across a folder of triage collections, one run per host, with per-host reports and a cross-host triage dashboard

Python-based interactive packet manipulation library for forging, decoding, sending, capturing, and analyzing network packets across a wide range of…

SQL powered operating system instrumentation, monitoring, and analytics.

Universal Windows extraction tool that detects unknown files and routes them to the right bundled extractor.

Extract and decrypt browser data, supporting multiple data types, runnable on various operating systems (macOS, Windows, Linux).

Search Windows forensic artifacts, see where each one lives on disk, and copy the KAPE command to collect it. Also builds collection scripts and…