forensics

There are 138 repositories under forensics topic.

ImHex
WerWolv / ImHex
🔍 A Hex Editor for Reverse Engineers, Programmers and people who value their retinas when working at 3 AM.
analyzer binary-analysis c-plus-plus cybersecurity dark-mode dear-imgui disassembler forensics hacking hacktoberfest hex-editor ips mathematical-evaluator multi-platform pattern-language preprocessor reverse-engineering static-analysis windows
Language:C++ 33140
radareorg / radare2
UNIX-like reverse engineering framework and command-line toolset
binary-analysis c commandline disassembler forensics hacktoberfest malware-analysis radare2 reverse-engineering security
Language:C 19686
kubeshark
kubeshark / kubeshark
The API traffic analyzer for Kubernetes providing real-time K8s protocol-level visibility, capturing and monitoring all traffic and payloads going in, out and across containers, pods, nodes and clusters. Inspired by Wireshark, purposely built for Kubernetes
kubernetes microservices golang rest grpc amqp kafka redis go microservice microservices-application devops devops-tools sniffer observability wireshark cloud-native docker forensics incident-response
Language:Go 10589
mvt-project / mvt
MVT (Mobile Verification Toolkit) helps with conducting forensics of mobile devices in order to find signs of a potential compromise.
android forensics forensics-tools ios mobile security
Language:Python 9844
prowler
prowler-cloud / prowler
Prowler is an Open Source Security tool for AWS, Azure, GCP and Kubernetes to do security assessments, audits, incident response, compliance, continuous monitoring, hardening and forensics readiness. Includes CIS, NIST 800, NIST CSF, CISA, FedRAMP, PCI-DSS, GDPR, HIPAA, FFIEC, SOC2, GXP, Well-Architected Security, ENS and more
security security-tools security-audit security-hardening hardening aws cis-benchmark compliance gdpr forensics cloud well-architected devsecops azure iam python gcp multi-cloud
Language:Python 9626
rmusser01 / Infosec_Reference
An Information Security Reference That Doesn't Suck; https://rmusser.net/git/admin-2/Infosec_Reference for non-MS Git hosted version.
infosec infosec-reference reverse-engineering hacking pentesting penetration-testing references linux privilege-escalation information-security blueteam red-team windows osx forensics hacking-simulator privilege-escalation-exploits hacktoberfest hacktoberfest2021
Language:CSS 5368
Hack-with-Github / Free-Security-eBooks
Free Security and Hacking eBooks
security hacking penetration-testing hacking-ebooks forensics hackers-handbook cloud-security kali-linux cyber-security ebooks
4151
toolswatch / blackhat-arsenal-tools
Official Black Hat Arsenal Security Tools Repository
blackhat arsenal security-tools hacking-tool security-scanner forensics ics-scada webapp hacking
3734
jekil / awesome-hacking
Awesome hacking is an awesome collection of hacking tools.
curated-list forensics hacking hacking-tools malware penetration-testing security security-tools
Language:Python 2838
decalage2 / oletools
oletools - python tools to analyze MS OLE2 files (Structured Storage, Compound File Binary Format) and MS Office documents, for malware analysis, forensics and debugging.
python python-library olefile malware-analysis ms-office-documents compound rtf forensics ole-files security parser pyparsing vba macros
Language:Python 2752
WithSecureLabs / chainsaw
Rapidly Search and Hunt through Windows Forensic Artefacts
attack rust security threat-hunting blueteam chainsaw detection dfir forensics logs sigma windows countercept
Language:Rust 2562
timesketch
google / timesketch
Collaborative forensic timeline analysis
forensics dfir security timeline analysis
Language:Python 2499
sleuthkit / sleuthkit
The Sleuth Kit® (TSK) is a library and collection of command line digital forensics tools that allow you to investigate volume and file system data. The library can be incorporated into larger digital forensics tools and the command line tools can be directly used to find evidence.
forensics incident-response ntfs sleuthkit tct
Language:C 2487
sleuthkit / autopsy
Autopsy® is a digital forensics platform and graphical interface to The Sleuth Kit® and other digital forensics tools. It can be used by law enforcement, military, and corporate examiners to investigate what happened on a computer. You can even use it to recover photos from your camera's memory card.
forensics java
Language:Java 2259
volatilityfoundation / volatility3
Volatility 3.0 development
digital-investigation forensics incident-response malware memory python ram volatility volatility-framework
Language:Python 2239
dreddsa5dies / goHackTools
Hacker tools on Go (Golang)
go golang hack tools bruteforce scanner forensics beginner security hackers pentesters
Language:Go 2085
Yamato-Security / hayabusa
Hayabusa (隼) is a sigma-based threat hunting and fast forensics timeline generator for Windows event logs.
dfir threat hunting windows event logs rust sigma detection attack forensics incident response hayabusa yamato security cybersecurity incident-response security-automation threat-hunting
Language:Rust 1970
simsong / tcpflow
TCP/IP packet demultiplexer. Download from:
digital-forensics forensics tcp-protocol tcpip
Language:C++ 1646
Srinivas11789 / PcapXray
:snowflake: PcapXray - A Network Forensics Tool - To visualize a Packet Capture offline as a Network Diagram including device identification, highlight important communication and file extraction
forensics pcap network python computer-forensics tor-traffic forensic-analysis cybersecurity network-diagram tor traffic packets security
Language:Python 1645
log2timeline / plaso
Super timeline all the things
forensics parsing timeline
Language:Python 1628
MemLabs
stuxnet999 / MemLabs
Educational, CTF-styled labs for individuals interested in Memory Forensics
forensics dfir memory-forensics windows ctf ctf-challenges digital-forensics security cybersecurity
Language:Shell 1558
danieldurnea / FBI-tools
🕵️ OSINT Tools for gathering information and actions forensics 🕵️
awesome awesome-list bug-bounty cybersecurity forensics hacking incident-response infosec osint penetration-testing pentesting reconnaissance security security-automation security-tools
1515
frankwxu / digital-forensics-lab
Free hands-on digital forensics labs for students and faculty
cybersecurity digital education forensics free cyber cybercrime cybersecurity-education investigation hands-on
Language:Roff 1396
Digital-Forensics-Guide
mikeroyal / Digital-Forensics-Guide
Digital Forensics Guide. Learn all about Digital Forensics, Computer Forensics, Mobile device Forensics, Network Forensics, and Database Forensics.
digitalforensics digitalforensicreadiness forensics security forensics-tools digital-forensics threat-intelligence intrusion-detection mitre-attack detection-engineering network-security offensive-security cyber-security port-scanning siem alerting forensic-analysis forensics-investigations osint dfir
Language:Python 1364
andriller
den4uk / andriller
📱 Andriller - is software utility with a collection of forensic tools for smartphones. It performs read-only, forensically sound, non-destructive acquisition from Android devices.
forensics python android
Language:Python 1260
RecoverPy
PabloLec / RecoverPy
Interactively find and recover deleted or :point_right: overwritten :point_left: files from your terminal
cli console cybersecurity data data-recovery files forensics hacking linux macos pentesting python python3 recovery search search-interface terminal textual tool tui
Language:Python 1174
usbrip
snovvcrash / usbrip
Tracking history of USB events on GNU/Linux
security forensics usb-events usb-history usb-devices
Language:Python 1145
cecio / USBvalve
Expose USB activity on the fly
badusb forensics malware usb usb-hid
Language:C 1103
hindsight
obsidianforensics / hindsight
Web browser forensics for Google Chrome/Chromium
google-chrome hindsight chrome forensics dfir
Language:Python 1021
ForensicsTools
mesquidar / ForensicsTools
A list of free and open forensics analysis tools and other resources
forensics digital-forensics computer-fore forensic-analysis forensics-investigations forensic-tools tools free open-source awesome-list metada metadata image-analysis timeline network windows macos linux
898
hackdroid
thehackingsage / hackdroid
Security Apps for Android
android apk apps cryptography dos forensics hacking-tool hid-attacks mitm networking penetration-testing pentesting privacy security sniffing terminal wireless
883
ion-storm / sysmon-config
Advanced Sysmon ATT&CK configuration focusing on Detecting the Most Techniques per Data source in MITRE ATT&CK, Provide Visibility into Forensic Artifact Events for UEBA, Detect Exploitation events with wide CVE Coverage, and Risk Scoring of CVE, UEBA, Forensic, and MITRE ATT&CK Events.
sysmon threatintel threat-hunting netsec sysinternals logging graylog graylog-plugin dfir threat-intelligence threat-sharing threat-analysis mitre-attack digitalforensics forensic-analysis forensicartifacts forensics siem sigma-rules humio
Language:PowerShell 752
ydkhatri / mac_apt
macOS (& ios) Artifact Parsing Tool
dfir forensics macos
Language:Python 719
google / turbinia
Automation and Scaling of Digital Forensics Tools
forensics dfir security security-automation cloud
Language:Python 714
Yamato-Security / WELA
WELA (Windows Event Log Analyzer): The Swiss Army knife for Windows Event Logs! ゑ羅（ウェラ）
dfir log analysis forensics incident response sigma windows event logs threat hunting timeline
Language:PowerShell 678
williballenthin / python-evtx
Pure Python parser for Windows Event Log files (.evtx)
event-log evtx forensics
Language:Python 677

forensics

WerWolv / ImHex

radareorg / radare2

kubeshark / kubeshark

mvt-project / mvt

prowler-cloud / prowler

rmusser01 / Infosec_Reference

Hack-with-Github / Free-Security-eBooks

toolswatch / blackhat-arsenal-tools

jekil / awesome-hacking

decalage2 / oletools

WithSecureLabs / chainsaw

google / timesketch

sleuthkit / sleuthkit

sleuthkit / autopsy

volatilityfoundation / volatility3

dreddsa5dies / goHackTools

Yamato-Security / hayabusa

simsong / tcpflow

Srinivas11789 / PcapXray

log2timeline / plaso

stuxnet999 / MemLabs

danieldurnea / FBI-tools

frankwxu / digital-forensics-lab

mikeroyal / Digital-Forensics-Guide

den4uk / andriller

PabloLec / RecoverPy

snovvcrash / usbrip

cecio / USBvalve

obsidianforensics / hindsight

mesquidar / ForensicsTools

thehackingsage / hackdroid

ion-storm / sysmon-config

ydkhatri / mac_apt

google / turbinia

Yamato-Security / WELA

williballenthin / python-evtx