Alternatives and similar repositories for DriveFS-Sleuth

Users that are interested in DriveFS-Sleuth are comparing it to the libraries listed below

• stuxnet999 / EventTranscriptParser
  Python based tool to extract forensic info from EventTranscript.db (Windows Diagnostic Data)
  ☆69Updated last year
• dfir-scripts / siftgrab
  ☆68Updated 3 weeks ago
• stark4n6 / SQLiteWalker
  Python script to walk a folder or a zip file for SQLite Databases
  ☆38Updated last year
• khyrenz / parseusbs
  Parses USB connection artifacts from offline Registry hives
  ☆101Updated 2 months ago
• EZToolsManuals / EZToolsManuals
  A repo hosting the Markua content for the EZ Tools manuals hosted on Leanpub
  ☆79Updated 2 weeks ago
• lxndrblz / forensicsim
  A forensic open-source parser module for Autopsy that allows extracting the messages, comments, posts, contacts, calendar entries and rea…
  ☆98Updated 2 weeks ago
• digitalsleuth / WIN-FOR
  Windows Forensics Environment Builder
  ☆156Updated last month
• CyberCX-DFIR / usnjrnl_rewind
  USN Journal full path builder
  ☆61Updated 11 months ago
• stark4n6 / Arc2Lite
  A simple script to read the contents of a zip/tar/folder and extract metadata
  ☆22Updated 4 months ago
• AndrewRathbun / KAPE-EZToolsAncillaryUpdater
  A script that updates KAPE (using Get-KAPEUpdate.ps1) as well as EZ Tools (within .\KAPE\Modules\bin) and the ancillary files that enhanc…
  ☆57Updated 2 months ago
• Ruler-Project / ruler-project
  Remote access and Antivirus Logging Database
  ☆42Updated last year
• fox-it / acquire
  acquire is a tool to quickly gather forensic artifacts from disk images or a live system into a lightweight container.
  ☆109Updated last week
• keydet89 / Events-Ripper
  Project based on RegRipper, to extract add'l value/pivot points from TLN events file
  ☆86Updated 6 months ago
• AndrewRathbun / DFIRRegex
  A repo to centralize some of the regular expressions I've found useful over the course of my DFIR career.
  ☆98Updated 2 years ago
• cocopollo / HunterM
  macOS Artifacts
  ☆31Updated 5 months ago
• AndrewRathbun / Awesome-KAPE
  A curated list of KAPE-related resources
  ☆172Updated 3 months ago
• docker-forensics-toolkit / toolkit
  A toolkit for the post-mortem examination of Docker containers from forensic HDD copies
  ☆105Updated last year
• kev365 / ToolFetcher
  A tool for fetching DFIR and other GitHub tools.
  ☆24Updated 3 weeks ago
• northloopforensics / Bitlocker_Key_Finder
  Search datasets for Bitlocker recovery files and triage live systems for Bitlocker keys.
  ☆44Updated 7 months ago
• ForensicArtifacts / artifacts-kb
  Digital Forensics Artifacts Knowledge Base
  ☆86Updated last year
• mnrkbys / ma2tl
  macOS forensic timeline generator using the analysis result DBs of mac_apt
  ☆94Updated last year
• alpine-sec / SPECTR3
  Forensic tool for acquisition, triage and analysis of remote block devices via iSCSI protocol.
  ☆42Updated 10 months ago
• EricZimmerman / SQLECmd
  ☆52Updated last month
• SOLVE-IT-DF / solve-it
  The SOLVE-IT knowledge base for digital forensics
  ☆40Updated last week
• blueteam0ps / AllthingsTimesketch
  This repository contains helper scripts and custom configs to get the best out of Google's Timesketch project.
  ☆113Updated last year
• mnrkbys / fjta
  FJTA (Forensic Journal Timeline Analyzer) is a tool that analyzes Linux filesystem (ext4, XFS) journals (not systemd-journald logs), gene…
  ☆80Updated last week
• openrelik / openrelik-deploy
  Tools and scripts to deploy and manage OpenRelik instances
  ☆14Updated 2 months ago
• csababarta / memory-baseliner
  Memory Baseliner is a script that can compare two windows memory images or perform frequency of occurrence / data stacking analysis on mu…
  ☆54Updated 2 years ago
• markmckinnon / cLeapp
  Chrome Logs Events and Protobuf Parser
  ☆39Updated 2 years ago
• nisargsuthar / Veritas
  A hex viewer for the sleuths!
  ☆20Updated 4 months ago