
dissect
Dissect is a digital forensics & incident response framework and toolset that allows you to quickly access and analyse forensic artefacts from…

Dissect is a digital forensics & incident response framework and toolset that allows you to quickly access and analyse forensic artefacts from…

The multi-platform memory acquisition tool.

Portable Linux RAM acquisition tool for forensics and incident response, capturing LiME-compatible images with optional compression and remote…

DFIR forensics companion server + capture extension

Collaborative forensic timeline analysis platform for ingesting, searching, and annotating event logs to support incident response and DFIR…

Exploit and detect CVE-2026-31431 vulnerabilities using a static binary that monitors system integrity and bypasses PAM authentication.

Curated index of incident response and DFIR tools, including memory and disk forensics, evidence collection, log analysis, playbooks, and educational…

Collecting & Hunting for IOCs with gusto and style

Advanced framework for extracting digital artifacts from volatile memory (RAM) samples, enabling deep forensic analysis of system runtime state…

Volatility 3 ported to Rust. Same output, much faster.

Windows tool for dumping malware PE files from memory back to disk for analysis.

Extract Windows credentials directly from VM memory snapshots and virtual disks

Remote live forensics and incident response framework with Python agent for collecting forensic data from endpoints, including memory, disk, and…

A centralized and enhanced memory analysis platform

Security sensor for realtime threat detection and protection

🐍 High-performance, multi-threaded YARA & IOC scanner

ShadowNet is an anonymous routing protocol that forces all connections (system-wide) to go through Tor while implementing Mixnet-like…