sleuthkit

There are 0 repository under sleuthkit topic.

• sleuthkit / sleuthkit

  The Sleuth Kit® (TSK) is a library and collection of command line digital forensics tools that allow you to investigate volume and file system data. The library can be incorporated into larger digital forensics tools and the command line tools can be directly used to find evidence.

  sleuthkittctntfsforensicsincident-response
  Language:C++ 2919

• sumeshi / ntfsfind

  An efficient tool for search files, directories, and alternate data streams directly from NTFS image files.

  ntfsrawsleuthkitmfte01pythonforensicsvhdvhdxvmdkdfir
  Language:Python 27

• sumeshi / ntfsdump

  An efficient tool for extracting files, directories, and alternate data streams directly from NTFS image files.

  rawe01ntfssleuthkitpythonforensicsvmdkvhdvhdxdfir
  Language:Python 22

• shujianyang / btrForensics

  Forensic Analysis Tool for Btrfs File System.

  btrfssleuthkitforensic-analysis
  Language:C++ 21

• wv8672 / digital-forensics-labs

  A series of Linux and Windows based Forensics labs. Tools used include: FTK, EnCase, Sleuthkit, Autopsy, Volatility, etc.

  forensicsanalysisftksleuthkitencase-forensicvolatility
  13

• nov3mb3r / dfir

  Collection of popular DFIR tools in a lightweight and fast docker image

  dockerforensicsvolatilitysleuthkitmemory-analysisregistry-analysisdisk-analysis
  Language:Dockerfile 12

• isciurus / sleuthkit

  A fork of The Sleuthkit with XFS filesystem support. See PR https://github.com/sleuthkit/sleuthkit/pull/1476 for more info.

  xfsforensicssleuthkitincident-response
  Language:C 11

• nannib / NBTEMPOW

  NBTempoW V. 2.1 is a forensic tool for making timelines from block devices image files (raw, ewf,physicaldrive, etc.). It uses TSK (The Sleuthkit) and it has been developed with Lazarus V. 1.6.2 ( Delphi compatible cross-platform IDE for Rapid Application Development). It runs only in Windows. If the device image file is splitted, you can select just the first chunk.

  forensicsforensic-analysistimelinethesleuthkittsklazaruswindows
  Language:Pascal 8

• Sim4n6 / Slack_handler

  Python tool to extract File slacks from disk images.

  digital-forensicsextractsleuthkitdisk-images
  Language:Python 5

• franckferman / DataDetective

  🕵️‍♂️ Unlock the story hidden in data - Your digital investigation partner. TheSleuthKit (TSK) Python Wrapper.

  forensicforensicspythonpython3forensic-softwarepython-securitythesleuthkitdfirdfir-automationdisk-forensicspython-wrappersleuthkittskwrapperimage-forensicimage-forensicsanalysisewfregripperdisk-image
  Language:Python 4

• tanner-g / iKnowdeDiscovery

  Forensic Inode Analysis

  forensics-investigationsinodesleuthkit
  Language:Python 4

• Deepak710 / python-sleuthkit-recover

  Linux command line thumbstick file recovery script using SleuthKit

  pythonpython3python-3sleuthkitlinux
  Language:Python 3

• HyperHamster / sleuthkit-recoverdir

  A Bash script that utilizes The Sleuth Kit to recover directories in their entirety

  bash-scriptsleuthkitdata-recoverycommand-linecommand-line-tool
  Language:Shell 3

• turulomio / recovermypartition

  Recover normal and deleted files from a partition

  recover-filessleuthkit
  Language:Python 3

• CERT-EDF / fossil

  A post-mortem analysis tool for raw disk/partition images

  cli-appdfirdfir-automationpost-mortemsleuthkit
  Language:Python 1

• erfanghorbanee / DigitalForensics-UNIGE

  Solutions to some assignments of the Digital Forensics course that I took during my master's degree at UNIGE (University of Genova).

  filesystemforensicstestdisksleuthkit
  1

• labcif / autopsy-packager

  Automatic Github Workflows packager for autopsy

  autopsypackagerpackagingsleuthkitforensicsgithub-workflowsautomationarchlinuxdebiandebian-packages
  Language:Shell 1

• sumeshi / sleuthkit-mactime.py

  A Python reimplementation of mactime.pl from The Sleuth Kit®.

  dfirforensicsmactimemftpythonpython3sleuthkit
  Language:Perl 1

• tgmars / flshell

  An interactive shell for The Sleuth Kit's fls tool.

  tsksleuthkitinteractiveshellicatistatforensicsdisk-imagedfir
  Language:Go 1

• usrtem / Digital-Forensics-Labwork

  A collection of digital forensics lab reports covering Linux artifact recovery, shell history analysis, bash script forensics, and incident reconstruction using tools like SleuthKit, Auditd, and command-line utilities.

  auditdbash-artifactscrondigital-forensicse3forensic-analysisftk-imagerincident-responselinux-forensicsmactimemobile-forensicsshell-historysleuthkitsteganalysistimeline-analysis
  1
• TSKConnector

  sequence-sh / TSKConnector

  This repository is a mirror of https://gitlab.com/sequence/connectors/tsk

  automationorchestrationedrmediscoveryforensicssequencetsksleuthkitautopsy
  Language:C#