
Process-Dump
Windows tool for dumping malware PE files from memory back to disk for analysis.

Windows tool for dumping malware PE files from memory back to disk for analysis.

Browser forensics tool for Google Chrome, other Chromium-based browsers, and Mozilla Firefox

APT-Hunter is Threat Hunting tool for windows event logs which made by purple team mindset to provide detect APT movements hidden in the sea of…

Portable Linux RAM acquisition tool for forensics and incident response, capturing LiME-compatible images with optional compression and remote…

A standalone SIGMA-based detection tool for EVTX, Auditd and Sysmon for Linux logs

Forensics artefact collection tool for systems running Microsoft Windows

A tool for studying JavaScript malware.

Forensics tool for NTFS (parser, mft, bitlocker, deleted files)

A tool for forensic file system reconstruction.

Moneta is a live usermode memory analysis tool for Windows with the capability to detect malware IOCs

Anti Forensics Tool For Red Teamers, Used For Erasing Footprints In The Post Exploitation Phase.

Automated forensic analysis tool for Google Workspace audit logs. Acquires all log types, maps events to MITRE ATT&CK Cloud Framework, and identifies…

A command line tool for pstree-like output on macOS with additional pid capturing capabilities

Telegram intelligence collection tool for researchers and investigators. Scrapes groups, messages, media, and user data with OCR, Elasticsearch…

Digital forensic acquisition tool for Windows based incident response.

PowerShell tool for red teamers that clears execution evidence by stopping event logging, removing file and registry artifacts, and saving timestamps…

Static-first research tool for unpacking Nuitka-compiled binaries: extracts constants, modules, recovers .pyc files, and generates analysis reports.

A tool for processing a lot of pcaps using tshark