
TEx
Telegram intelligence collection tool for researchers and investigators. Scrapes groups, messages, media, and user data with OCR, Elasticsearch…

Telegram intelligence collection tool for researchers and investigators. Scrapes groups, messages, media, and user data with OCR, Elasticsearch…

FLARE floss applied to all unpacked+dumped samples in Malpedia, pre-processed for further use.

ML-assisted forensic analysis tool that automates memory, disk, and live system triage on Windows using Volatility 3, autorunsc, and sigcheck to…

A python tool that will extract exif data from picture with two methods

Static analysis tool for investigating potentially malicious Microsoft Excel files, extracting metadata, macros, and embedded objects to aid digital…

Tool that gathers a customizable set of ETW telemetry and generates user-defined detections

Browser-based tool for visual steganography detection via LSB analysis on digital images, enabling forensic examination and stegomalware…

JAR analysis tool for exploring, searching, and extracting specific classes from large JAR files with bytecode search, multi-selection extraction,…

Bash-based Linux persistence detection tool for DFIR investigations. Scans 15+ persistence mechanisms (systemd, cron, kernel modules, SSH,…

This Python application scans for the CVE-2023-38831 vulnerability in WinRAR.

Finding secrets in kernel and user memory

This is repository contains a script to check for current IOCs listed in the freepbx forum topic of the CVE-2025-57819

Automates incident response tasks via Carbon Black Response API: file/registry deletion, process killing, sensor isolation, binary collection, and…

A scanner that files with compromised or untrusted code signing certificates written in python.

Utility for recovering ES File Explorer encrypted files (.eslock)

APKinspector is a powerful GUI tool for analysts to analyze the Android applications.

FAT filesystems explore, extract, repair, and forensic tool

NetworkAssessment: Network Compromise Assessment Tool