


The world's most powerful System Activity Monitor Engine · 一款功能强大的终端行为采集防御开发套件 ~ 旨在帮助EDR、零信任、数据安全、审计管控等终端安全软件可以快速实现产品功能,…

Linux Memory Cryptographic Keys Extractor

AI 驱动的 SOC 仿真平台

Resources for DFIR Professionals Responding to the REvil Ransomware Kaseya Supply Chain Attack


Python script that will extract all saved passwords from your google chrome database on windows only


Kernel-level security & attack response for Linux servers.

Blackout — The Official Blackout Public FAFO Repo.

linux security checks

Digital Forensics Intelligence Framework


A forensic evidence collection & analysis toolkit for OS X



OS X Auditor is a free Mac OS X computer forensics tool

Python wrapper for tshark, allowing python packet parsing using wireshark dissectors