
DFIR-O365RC
PowerShell module for Office 365 and Azure log collection

PowerShell module for Office 365 and Azure log collection

Capturing, analysing and responding to cyber attacks

Linux Distro for Mobile Security, Malware Analysis, and Forensics

Extract WhatsApp private key from any non-rooted Android device (Android 7+ supported)

Agentic AI memory with Ebbinghaus forgetting curve decay. +16pp better recall than Mem0 on LoCoMo.


Portable forensic acquisition tool for Android devices that collects relevant data via USB debugging to identify potential spyware or compromise…


Bash script to extract data from a "chekcra1ned" iOS device

android location service cache dumper

AMIRA: Automated Malware Incident Response & Analysis

Web-based tool for browsing mobile application sandboxes, previewing SQLite databases and binary files, and downloading app data via Frida…


Incarcero is a tool that creates Virtual Machines (VMs) preconfigured with malware analysis tools and security settings tailored for malware analysis…

Automated steganography detection tool that scans websites, web servers, and local directories using AI-driven object/text recognition and deep file…

Wireshark-like forensic analysis for Model Context Protocol communications Capture, inspect, and investigate all HTTP requests and responses between…

A file system forensics analysis scanner and threat hunting tool. Scans file systems at the MFT and OS level and stores data in SQL, SQLite or CSV.…

This toolkit aims to help forensicators perform different kinds of acquisitions on iOS devices