forensics

There are 136 repositories under forensics topic.

ImHex
WerWolv / ImHex
🔍 A Hex Editor for Reverse Engineers, Programmers and people who value their retinas when working at 3 AM.
analyzer binary-analysis c-plus-plus cybersecurity dark-mode dear-imgui disassembler forensics hacking hacktoberfest hex-editor ips mathematical-evaluator multi-platform pattern-language preprocessor reverse-engineering static-analysis windows
Language:C++ 32877
radareorg / radare2
UNIX-like reverse engineering framework and command-line toolset
binary-analysis c commandline disassembler forensics hacktoberfest malware-analysis radare2 reverse-engineering security
Language:C 19612
kubeshark
kubeshark / kubeshark
The API traffic analyzer for Kubernetes providing real-time K8s protocol-level visibility, capturing and monitoring all traffic and payloads going in, out and across containers, pods, nodes and clusters. Inspired by Wireshark, purposely built for Kubernetes
amqp cloud-native devops devops-tools docker forensics go golang grpc incident-response kafka kubernetes microservice microservices microservices-application observability redis rest sniffer wireshark
Language:Go 10543
mvt-project / mvt
MVT (Mobile Verification Toolkit) helps with conducting forensics of mobile devices in order to find signs of a potential compromise.
android forensics forensics-tools ios mobile security
Language:Python 9788
prowler
prowler-cloud / prowler
Prowler is an Open Source Security tool for AWS, Azure, GCP and Kubernetes to do security assessments, audits, incident response, compliance, continuous monitoring, hardening and forensics readiness. Includes CIS, NIST 800, NIST CSF, CISA, FedRAMP, PCI-DSS, GDPR, HIPAA, FFIEC, SOC2, GXP, Well-Architected Security, ENS and more
aws azure cis-benchmark cloud compliance devsecops forensics gcp gdpr hardening iam multi-cloud python security security-audit security-hardening security-tools well-architected
Language:Python 9533
rmusser01 / Infosec_Reference
An Information Security Reference That Doesn't Suck; https://rmusser.net/git/admin-2/Infosec_Reference for non-MS Git hosted version.
infosec infosec-reference reverse-engineering hacking pentesting penetration-testing references linux privilege-escalation information-security blueteam red-team windows osx forensics hacking-simulator privilege-escalation-exploits hacktoberfest hacktoberfest2021
Language:CSS 5358
Hack-with-Github / Free-Security-eBooks
Free Security and Hacking eBooks
security hacking penetration-testing hacking-ebooks forensics hackers-handbook cloud-security kali-linux cyber-security ebooks
4139
toolswatch / blackhat-arsenal-tools
Official Black Hat Arsenal Security Tools Repository
arsenal blackhat forensics hacking hacking-tool ics-scada security-scanner security-tools webapp
3720
jekil / awesome-hacking
Awesome hacking is an awesome collection of hacking tools.
hacking hacking-tools curated-list penetration-testing forensics malware security security-tools
Language:Python 2823
decalage2 / oletools
oletools - python tools to analyze MS OLE2 files (Structured Storage, Compound File Binary Format) and MS Office documents, for malware analysis, forensics and debugging.
python python-library olefile malware-analysis ms-office-documents compound rtf forensics ole-files security parser pyparsing vba macros
Language:Python 2744
WithSecureLabs / chainsaw
Rapidly Search and Hunt through Windows Forensic Artefacts
attack rust security threat-hunting blueteam chainsaw detection dfir forensics logs sigma windows countercept
Language:Rust 2542
timesketch
google / timesketch
Collaborative forensic timeline analysis
forensics dfir security timeline analysis
Language:Python 2488
sleuthkit / sleuthkit
The Sleuth Kit® (TSK) is a library and collection of command line digital forensics tools that allow you to investigate volume and file system data. The library can be incorporated into larger digital forensics tools and the command line tools can be directly used to find evidence.
sleuthkit tct ntfs forensics incident-response
Language:C 2472
sleuthkit / autopsy
Autopsy® is a digital forensics platform and graphical interface to The Sleuth Kit® and other digital forensics tools. It can be used by law enforcement, military, and corporate examiners to investigate what happened on a computer. You can even use it to recover photos from your camera's memory card.
forensics java
Language:Java 2236
volatilityfoundation / volatility3
Volatility 3.0 development
digital-investigation forensics incident-response malware memory python ram volatility volatility-framework
Language:Python 2206
dreddsa5dies / goHackTools
Hacker tools on Go (Golang)
go golang hack tools bruteforce scanner forensics beginner security hackers pentesters
Language:Go 2081
Yamato-Security / hayabusa
Hayabusa (隼) is a sigma-based threat hunting and fast forensics timeline generator for Windows event logs.
dfir threat hunting windows event logs rust sigma detection attack forensics incident response hayabusa yamato security cybersecurity incident-response security-automation threat-hunting
Language:Rust 1927
Srinivas11789 / PcapXray
:snowflake: PcapXray - A Network Forensics Tool - To visualize a Packet Capture offline as a Network Diagram including device identification, highlight important communication and file extraction
forensics pcap network python computer-forensics tor-traffic forensic-analysis cybersecurity network-diagram tor traffic packets security
Language:Python 1643
simsong / tcpflow
TCP/IP packet demultiplexer. Download from:
digital-forensics forensics tcp-protocol tcpip
Language:C++ 1642
log2timeline / plaso
Super timeline all the things
forensics parsing timeline
Language:Python 1618
MemLabs
stuxnet999 / MemLabs
Educational, CTF-styled labs for individuals interested in Memory Forensics
forensics dfir memory-forensics windows ctf ctf-challenges digital-forensics security cybersecurity
Language:Shell 1549
danieldurnea / FBI-tools
🕵️ OSINT Tools for gathering information and actions forensics 🕵️
forensics osint cybersecurity hacking security-automation security-tools infosec awesome-list incident-response penetration-testing reconnaissance security awesome pentesting bug-bounty
1492
frankwxu / digital-forensics-lab
Free hands-on digital forensics labs for students and faculty
cybersecurity digital education forensics free cyber cybercrime cybersecurity-education investigation hands-on
Language:Roff 1377
Digital-Forensics-Guide
mikeroyal / Digital-Forensics-Guide
Digital Forensics Guide. Learn all about Digital Forensics, Computer Forensics, Mobile device Forensics, Network Forensics, and Database Forensics.
digitalforensics digitalforensicreadiness forensics security forensics-tools digital-forensics threat-intelligence intrusion-detection mitre-attack detection-engineering network-security offensive-security cyber-security port-scanning siem alerting forensic-analysis forensics-investigations osint dfir
Language:Python 1337
andriller
den4uk / andriller
📱 Andriller - is software utility with a collection of forensic tools for smartphones. It performs read-only, forensically sound, non-destructive acquisition from Android devices.
forensics python android
Language:Python 1252
RecoverPy
PabloLec / RecoverPy
Interactively find and recover deleted or :point_right: overwritten :point_left: files from your terminal
python3 tui data recovery cybersecurity python cli console terminal linux search-interface macos pentesting search files tool hacking textual forensics data-recovery
Language:Python 1169
usbrip
snovvcrash / usbrip
Tracking history of USB events on GNU/Linux
security forensics usb-events usb-history usb-devices
Language:Python 1147
cecio / USBvalve
Expose USB activity on the fly
badusb forensics malware usb usb-hid
Language:C 1055
hindsight
obsidianforensics / hindsight
Web browser forensics for Google Chrome/Chromium
google-chrome hindsight chrome forensics dfir
Language:Python 1015
hackdroid
thehackingsage / hackdroid
Security Apps for Android
android apk apps cryptography dos forensics hacking-tool hid-attacks mitm networking penetration-testing pentesting privacy security sniffing terminal wireless
878
ForensicsTools
mesquidar / ForensicsTools
A list of free and open forensics analysis tools and other resources
forensics digital-forensics computer-fore forensic-analysis forensics-investigations forensic-tools tools free open-source awesome-list metada metadata image-analysis timeline network windows macos linux
877
ion-storm / sysmon-config
Advanced Sysmon ATT&CK configuration focusing on Detecting the Most Techniques per Data source in MITRE ATT&CK, Provide Visibility into Forensic Artifact Events for UEBA, Detect Exploitation events with wide CVE Coverage, and Risk Scoring of CVE, UEBA, Forensic, and MITRE ATT&CK Events.
sysmon threatintel threat-hunting netsec sysinternals logging graylog graylog-plugin dfir threat-intelligence threat-sharing threat-analysis mitre-attack digitalforensics forensic-analysis forensicartifacts forensics siem sigma-rules humio
Language:PowerShell 749
ydkhatri / mac_apt
macOS (& ios) Artifact Parsing Tool
dfir forensics macos
Language:Python 716
google / turbinia
Automation and Scaling of Digital Forensics Tools
forensics dfir security security-automation cloud
Language:Python 711
Yamato-Security / WELA
WELA (Windows Event Log Analyzer): The Swiss Army knife for Windows Event Logs! ゑ羅（ウェラ）
dfir log analysis forensics incident response sigma windows event logs threat hunting timeline
Language:PowerShell 676
williballenthin / python-evtx
Pure Python parser for Windows Event Log files (.evtx)
event-log evtx forensics
Language:Python 675

forensics

WerWolv / ImHex

radareorg / radare2

kubeshark / kubeshark

mvt-project / mvt

prowler-cloud / prowler

rmusser01 / Infosec_Reference

Hack-with-Github / Free-Security-eBooks

toolswatch / blackhat-arsenal-tools

jekil / awesome-hacking

decalage2 / oletools

WithSecureLabs / chainsaw

google / timesketch

sleuthkit / sleuthkit

sleuthkit / autopsy

volatilityfoundation / volatility3

dreddsa5dies / goHackTools

Yamato-Security / hayabusa

Srinivas11789 / PcapXray

simsong / tcpflow

log2timeline / plaso

stuxnet999 / MemLabs

danieldurnea / FBI-tools

frankwxu / digital-forensics-lab

mikeroyal / Digital-Forensics-Guide

den4uk / andriller

PabloLec / RecoverPy

snovvcrash / usbrip

cecio / USBvalve

obsidianforensics / hindsight

thehackingsage / hackdroid

mesquidar / ForensicsTools

ion-storm / sysmon-config

ydkhatri / mac_apt

google / turbinia

Yamato-Security / WELA

williballenthin / python-evtx