winevt_logs_analysis
georgi-i/winevt_logs_analysisParses Windows .evtx logs to identify remote connections and public IPs by analyzing EventIDs related to remote logins and sessions.
digital-forensicsforensicslog-analysis
georgi-i/winevt_logs_analysisParses Windows .evtx logs to identify remote connections and public IPs by analyzing EventIDs related to remote logins and sessions.
nccgroup/mortimerA collection of scripts for processing network forensics type data and intelligence, mainly into a postgres database.
synacktiv/synacktiv-rulesPublic repository of Sigma and YARA rules created by Synacktiv
farukalpay/neurocoreNeuroCore is a native macOS application that visualizes the internal structure of binary files using a Hilbert Curve mapping and Shannon Entropy…
unicornunicode/factCollects, processes, and visualizes forensic data from cloud and on-premise machine clusters for incident response and digital investigations.
chrism09/knx-bus-dumpA tool to listen on a KNX bus via TPUART and the Calimero Project suite and to dump the data from the packets into a Wireshark-Compatible file hex…
hellgatecorp/docxnginxfxDeep File Forensic. Create or manipulate Wordlists out of Text Documents (ex: for BruteForcing). Save it Line by Line as a Binary .BIN File or as a…
corelight/hasshFingerprint SSH clients and servers.
matank001/asclepiusAsclepius validates backup integrity by restoring files and actively testing their recoverability. Instead of trusting metadata, it attempts to parse…
benadia/an-integrated-wireless-network-forensic-analysis-frameworkThis framework combines a set of existing open source tools into an integrated package that automates the forensics investigation process. It is able…
airbus-cert/cve-2025-24985Detection of malicious VHD files for CVE-2025-24985
busindre/mozcacheSimple shell script to perform forensic analysis of the Mozilla-Browsers cache (Firefox, Iceweasel and Seamonkey).
aquibpro/forensix-studioForensic intelligence platform that analyzes files, correlates threat indicators, maps behavior to MITRE ATT&CK, and generates actionable security…
dawnl3ss/cve-2023-32784Retrieve the master password of a keepass database <= 2.53.1
mikesxrs/cve-2023-21716_yara_resultsResults of retrohunt for files matching YARA rules from https://github.com/AmgdGocha/Detection-Rules/blob/main/CVE-2023-21716.yar
d4vinci/dr0p1t-frameworkA framework that create an advanced stealthy dropper that bypass most AVs and have a lot of tricks
sherlock-project/sherlockHunt down social media accounts by username across social networks
chipsec/chipsecPlatform Security Assessment Framework