
freedomfighting
A collection of scripts which may come in handy during your freedom fighting activities.

A collection of scripts which may come in handy during your freedom fighting activities.

Cross-platform Yara scanner written in Go

A scanner that files with compromised or untrusted code signing certificates written in python.

Collaborative forensic timeline analysis platform for ingesting, searching, and annotating event logs to support incident response and DFIR…

Automatic analysis of SWF files based on some heuristics. Extensible via plugins.

The Cyber Swiss Army Knife - a web app for encryption, encoding, compression and data analysis

Curated index of incident response and DFIR tools, including memory and disk forensics, evidence collection, log analysis, playbooks, and educational…

Real-time Windows system monitor with advanced process, network, and disk analysis, stack trace debugging, malware detection, and service management.…

Forensic collection and analysis toolkit for Android and iOS devices to identify potential compromise by known spyware using public and private…

Curated repository of live malware samples and source code for educational malware analysis and research, with an organized database and CLI tools…

Dshell is a network forensic analysis framework.

Advanced framework for extracting digital artifacts from volatile memory (RAM) samples, enabling deep forensic analysis of system runtime state…

Multi-threaded Windows event log forensics timeline generator and threat hunting tool with full Sigma rule support, producing CSV/JSON timelines for…

All-in-One malware analysis tool.

Python toolkit for analyzing MS OLE2 and Office documents, extracting VBA macros, detecting exploits, and performing forensic analysis of structured…

Windows tool for dumping malware PE files from memory back to disk for analysis.

Firmware Analysis and Comparison Tool

Materials for Windows Malware Analysis training (volume 1)