
CertVerify
A scanner that files with compromised or untrusted code signing certificates written in python.

A scanner that files with compromised or untrusted code signing certificates written in python.

Collaborative forensic timeline analysis platform for ingesting, searching, and annotating event logs to support incident response and DFIR…

Automatic analysis of SWF files based on some heuristics. Extensible via plugins.

The Cyber Swiss Army Knife - a web app for encryption, encoding, compression and data analysis

Curated index of incident response and DFIR tools, including memory and disk forensics, evidence collection, log analysis, playbooks, and educational…

Real-time Windows system monitor with advanced process, network, and disk analysis, stack trace debugging, malware detection, and service management.…

Forensic collection and analysis toolkit for Android and iOS devices to identify potential compromise by known spyware using public and private…

Curated repository of live malware samples and source code for educational malware analysis and research, with an organized database and CLI tools…

Advanced framework for extracting digital artifacts from volatile memory (RAM) samples, enabling deep forensic analysis of system runtime state…

All-in-One malware analysis tool.

Multi-threaded Windows event log forensics timeline generator and threat hunting tool with full Sigma rule support, producing CSV/JSON timelines for…

Dshell is a network forensic analysis framework.

Python toolkit for analyzing MS OLE2 and Office documents, extracting VBA macros, detecting exploits, and performing forensic analysis of structured…

Extract and repack Android ADB backups (ICS+). Supports encrypted archives, tar conversion, and standard I/O for forensic analysis or data recovery.

Firmware Analysis and Comparison Tool

eBPF-based Linux security monitor and threat hunter providing chronologically ordered, container-aware events with on-host correlation for incident…

Materials for Windows Malware Analysis training (volume 1)
