forensics-investigations

There are 16 repositories under forensics-investigations topic.

velociraptor
Velocidex / velociraptor
Digging Deeper....
incident-response forensics-investigations inventory-management endpoint-security endpoint-protection endpoint-discovery digital-forensics
Language:Go 2701
Digital-Forensics-Guide
mikeroyal / Digital-Forensics-Guide
Digital Forensics Guide. Learn all about Digital Forensics, Computer Forensics, Mobile device Forensics, Network Forensics, and Database Forensics.
digitalforensics digitalforensicreadiness forensics security forensics-tools digital-forensics threat-intelligence intrusion-detection mitre-attack detection-engineering network-security offensive-security cyber-security port-scanning siem alerting forensic-analysis forensics-investigations osint dfir
Language:Python 1373
ForensicsTools
mesquidar / ForensicsTools
A list of free and open forensics analysis tools and other resources
forensics digital-forensics computer-fore forensic-analysis forensics-investigations forensic-tools tools free open-source awesome-list metada metadata image-analysis timeline network windows macos linux
906
Johnng007 / Live-Forensicator
Powershell Script to aid Incidence Response and Live Forensics | Bash Script for MacOS Live Forensics and Incidence Response
bash eventlog-analysis eventlogs forensicator forensics forensics-investigations incident-response live-forensic log4j macos powershell ransomeware
Language:JavaScript 491
CScorza / OSINT-FORENSICS-MOBILE
Tools OSINT MOBILE
forensics forensics-data forensics-investigations messenger osint osint-resources osint-tool rete smartphone smartphone-app smartphone-interaction social-network-analysis
475
redaelli / imago-forensics
Imago is a python tool that extract digital evidences from images.
forensics-investigations dfir image-analysis python incident-response
Language:Python 238
Viralmaniar / Remote-Desktop-Caching-
This tool allows one to recover old RDP (mstsc) session information in the form of broken PNG files. These PNG files allows Red Team member to extract juicy information such as LAPS passwords or any sensitive information on the screen. Blue Team member can reconstruct PNG files to see what an attacker did on a compromised host. It is extremely useful for a forensics team to extract timestamps after an attack on a host to collect evidences and perform further analysis.
blueteam redteam hacking internal-pentest penetration-testing redteaming forensics forensics-investigations forensic-analysis infrastructure-monitoring blue-team hacking-tools hacking-attack-tools purpleteam
Language:Python 210
windows-forensic-artifacts
Psmths / windows-forensic-artifacts
Handbook of windows forensic artifacts across multiple Windows version with interpretation tips and some examples. Work in progress!
forensics artifacts dfir windows windows-11 analysis reference digital-forensics forensic-analysis forensicartifacts forensics-investigations
204
CScorza / Analisi-Digital-Forense
Strumenti di Acquisizione e Analisi di copie Forensi
best-practices difr digital forensic-analysis forensics forensics-investigations forensics-tools linux macos tools windows
137
hashlookup / hashlookup-forensic-analyser
Analyse a forensic target (such as a directory) to find and report files found and not found from CIRCL hashlookup public service - https://circl.lu/services/hashlookup/
bloom-filter dfir dfir-automation forensic-analysis forensics-investigations hashlookup nsrl nsrllookup
Language:Python 116
digitalsleuth / WIN-FOR
Windows Forensics Environment Builder
forensics forensics-investigations forensics-tools windows
Language:C# 95
resurrecting-open-source-projects / dcfldd
Enhanced version of dd for forensics and security
forensics forensic-analysis forensics-investigations recovering-data recovery-image wipe
Language:C 89
PacktPublishing / Digital-Forensics-with-Kali-Linux
Digital Forensics with Kali Linux, published by Packt
kali-linux kali-scripts digital-forensics forensics mobile-security hacking brute-force-attacks investigation forensics-investigations penetration-testing pentesting pentest-tool
87
nshadov / screensaver-mouse-jiggler
Hardware arduino based mouse emulator, preventing screen saver locking (eg. during forensic investigation)
security forensics forensics-investigations screensaver-mouse-jiggler screensaver arduino-device
Language:C++ 81
Judge-Jury-and-Executable
AdamWhiteHat / Judge-Jury-and-Executable
A file system forensics analysis scanner and threat hunting tool. Scans file systems at the MFT and OS level and stores data in SQL, SQLite or CSV. Threats and data can be probed harnessing the power and syntax of SQL.
security threat-hunting antivirus scanner query-language csharp forensics-level-scanning forensics mft threat-monitor forensic-analysis forensics-investigations yara yara-scanner yara-rules
Language:C# 78
x4nth055 / ethical-hacking-tools-python
Python programs & tools built in the Ethical Hacking with Python EBook
email-extractor ethical-hacking ethical-hacking-tools forensics-investigations information-gathering malware-development password-cracker network-security packet-manipulation scapy
Language:Python 70
bitranox / fingerprint
Monitoring Registry and File Changes in Windows
python3 windows-10 windows-7 windows registry registry-hacks registry-data registry-scripts hacking-tool hacking-tools hacking-code hacking hackingtool hackingtools forensics forensic forensics-investigations forensic-analysis forensic-examinations procmon
Language:Python 64
MrMugiwara / FTK-imager-OSX
FTK Imager a Forensics Tools For MAC OS X
forensics-investigations macosx digital-forensics ftk-imager
61
paulveillard / cybersecurity-forensics
A collection of forensics tools, software, libraries, learning tutorials, frameworks, academic and practical resources in Cybersecurity
digital-forensics forensic-analysis forensics-tools forensics forensics-investigations forensics-101 cybersecurity free open-source open-discovery open-data
57
alephdata / ingest-file
Ingestors extract the contents of mixed unstructured documents into structured (followthemoney) data.
documents excel forensics forensics-investigations metadata-extraction ocr email-forensics document-extraction
Language:Python 52
zweilosec / PowerShell-Administration-Tools
Powershell scripts for automating common system administration, blue team, and digital forensics tasks
powershell-scripts powershell powershell-adminscripts system-administration automation forensics-investigations forensics offensive-security red-team redteam
Language:PowerShell 52
emrekybs / MrHandler
Linux Incident Response Reporting
cyber-security forensics-investigations forensics-tools incident-management incident-response incident-response-tooling linux python
Language:HTML 51
drivebadger / drivebadger
Open source platform for covert data exfiltration operations, supporting all device types: computers, servers, mobile phones, tablets, pen drives and photo cameras.
evidence exfiltrate exfiltration exfiltrator forensics forensics-investigations kali-linux law-enforcement linux luks-encryption police police-officers raspberry-pi raspberrypi raspbian rsync security systemd usb usb-drive
Language:Shell 44
nipunjaswal / networkforensics
Hands-On Network Forensics by Nipun Jaswal
forensics forensics-investigations network-forensics pcap-analyzer malware-analysis
Language:Python 37
matkowski-voy / Palmprint-Recognition-in-the-Wild
palmprint-recognition in-the-wild biometrics forensics biometric-identification palmprint-roi uncontrolled-environment uncooperative-environment forensics-investigations forensic-analysis palm palmprint biometric-analysis palmprintid
Language:MATLAB 32
KeL3vRa / TelegramExporter
Telegram Exporter is a forensic tool to extract all chats of a given Telegram account.
telegram forensics forensics-investigations python pyrogram chat chat-log export log
Language:Python 29
r3k4t / phone-number-info
Phone-number-info is a Phone Number Information Gathering Tool.
python forensics-investigations forensic-analysis security-research security-testing software-engineering network-engineering software-development
Language:Python 25
INTERPOL-Innovation-Centre / HardwareWallets_DF_List
List of Hardware Wallets for Digital Forensics
bitcoin wallets forensics-investigations
22
CybernetiX-S3C.github.io
CybernetiX-S3C / CybernetiX-S3C.github.io
This is the OFFICIAL CybernetiX S3C website.
speedtest information-gathering information-security forensics-investigations ethical-hacking ethical-artificial-intelligence artificial-intelligence ip ip-gathe sk-wps-cracker sk-wc extract wifi card infosec infosploit ip-lookup geolocation
Language:HTML 21
iandday / o365AuditParser
Microsoft Office365 Protection Center Audit Log Parser
python3 forensics-investigations dfir
Language:Python 21
steffenfritz / FileTrove
FileTrove indexes files and creates metadata from them.
digipres digital-preservation forensics forensics-investigations
Language:Go 21
nipunjaswal / Wireless-forensics-framework
Wireless Forensics Framework In Python
wireless-forensics python portable forensics-investigations
Language:Python 20
AvillaDaniel / Signal-Forensics
Signal database acquisition and decryption.
android forensics forensics-investigations forensics-signal forensics-tools signal signal-forensics signal-processing
18
r3k4t / onionnux
Onionnux is a onionsite(DEEPNET/DARKNET) tool.It can help to idenitfy onionsite is active or onionsite server name.
socks5-proxy python-requests python-pyfiglet security-audit onion-routing website-vulnerability security-research software-engineering bugbounty forensics-investigations security-analysis
Language:Python 17
AlecRandazzo / Packrat
Live system forensic collector
edr-toolsets dfir forensics forensics-investigations incident-response-tooling incident-response
Language:Go 16
Shubhamkhapra / Email_header_analysis_forensic
This tool help to find email header hop list . Also help to SpF and DKIM signature verification. You can check all mail is legitimate or not
email forensics-investigations email-forensics spf-record dkim-signature hops analysis email-sender email-verification flask-application python heroku
Language:HTML 14

forensics-investigations

Velocidex / velociraptor

mikeroyal / Digital-Forensics-Guide

mesquidar / ForensicsTools

Johnng007 / Live-Forensicator

CScorza / OSINT-FORENSICS-MOBILE

redaelli / imago-forensics

Viralmaniar / Remote-Desktop-Caching-

Psmths / windows-forensic-artifacts

CScorza / Analisi-Digital-Forense

hashlookup / hashlookup-forensic-analyser

digitalsleuth / WIN-FOR

resurrecting-open-source-projects / dcfldd

PacktPublishing / Digital-Forensics-with-Kali-Linux

nshadov / screensaver-mouse-jiggler

AdamWhiteHat / Judge-Jury-and-Executable

x4nth055 / ethical-hacking-tools-python

bitranox / fingerprint

MrMugiwara / FTK-imager-OSX

paulveillard / cybersecurity-forensics

alephdata / ingest-file

zweilosec / PowerShell-Administration-Tools

emrekybs / MrHandler

drivebadger / drivebadger

nipunjaswal / networkforensics

matkowski-voy / Palmprint-Recognition-in-the-Wild

KeL3vRa / TelegramExporter

r3k4t / phone-number-info

INTERPOL-Innovation-Centre / HardwareWallets_DF_List

CybernetiX-S3C / CybernetiX-S3C.github.io

iandday / o365AuditParser

steffenfritz / FileTrove

nipunjaswal / Wireless-forensics-framework

AvillaDaniel / Signal-Forensics

r3k4t / onionnux

AlecRandazzo / Packrat

Shubhamkhapra / Email_header_analysis_forensic