DriveFS Sleuth is a Python tool that automates investigating Google Drive File Stream disk artifacts, the tool has been developed based on research that has been performed by mounting different scenarios and noting down the changes in the Google Drive File Stream disk artifacts.
☆87Oct 8, 2026Updated 3 weeks ago
Alternatives and similar repositories for DriveFS-Sleuth
Users that are interested in DriveFS-Sleuth are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- Google Filestream Forensic Tool☆22Mar 10, 2022Updated 4 years ago
- ☆24Mar 12, 2025Updated last year
- mister-skinnylegs is an open plugin framework for parsing website/webapp artifacts in browser data. It currently provides a command line …☆21Jul 20, 2026Updated 3 months ago
- Python web app for previewing data in a Chrome Profile Folder☆28Jul 1, 2024Updated 2 years ago
- A hex viewer for the sleuths!☆19Nov 7, 2025Updated 11 months ago
- Deploy to Railway using AI coding agents - Free Credits Offer • AdUse Claude Code, Codex, OpenCode, and more. Autonomous software development now has the infrastructure to match with Railway.
- A repository of output using KAPE (!EZParser Module) for various publicly available forensic images!☆18Aug 31, 2024Updated 2 years ago
- Parses RecentFileCacheParser.bcf files☆32Oct 23, 2026Updated last week
- ☆61Oct 23, 2026Updated last week
- Automatic, fast parsing of browser artifacts☆17Jan 4, 2025Updated last year
- A sample VHDX file with multiple verbose examples of forensic and anti-forensics artifacts. Meant to be basic and can be expanded upon. P…☆27Jan 2, 2023Updated 3 years ago
- PowerShell scripts to aid investigators when utilizing O365 and Magnet Axiom.☆13Aug 26, 2024Updated 2 years ago
- Fork this repo! Do a Pull Request! As many times as you want! Learn the ins and outs of how to contribute to GitHub! Make your mistakes h…☆15Jun 21, 2024Updated 2 years ago
- Windows.EDB Browser☆64Mar 6, 2023Updated 3 years ago
- Search datasets for Bitlocker recovery files and triage live systems for Bitlocker keys.☆60Jan 26, 2025Updated last year
- 1-Click AI Models by DigitalOcean Gradient • AdDeploy popular AI models on DigitalOcean Gradient GPU virtual machines with just a single click. Zero configuration with optimized deployments.
- OneDriveExplorer is a command line and GUI based application for reconstructing the folder structure of OneDrive from the <UserCid>.dat a…☆246Sep 15, 2026Updated last month
- Forensic cheatsheets for use with cheat☆16Dec 2, 2021Updated 4 years ago
- Automated pipeline for generating forensic timelines from Magnet Response collections.☆15Nov 6, 2025Updated 11 months ago
- Windows Event Log "Microsoft-Windows-Partition%4Diagnostic.evtx" parser and devices' VSNs extractor.☆20Nov 28, 2023Updated 2 years ago
- USN Journal full path builder☆71Apr 16, 2026Updated 6 months ago
- Secure AI-enabled digital forensics toolkit built with Model Context Protocol☆29Jun 10, 2025Updated last year
- http://moaistory.blogspot.com/2018/10/winsearchdbanalyzer.html☆134Jul 20, 2024Updated 2 years ago
- Windows 10 (v1803+) ActivitiesCache.db parsers (SQLite, PowerShell, .EXE)☆199Feb 16, 2023Updated 3 years ago
- A tool for fetching DFIR and other GitHub tools.☆32Sep 17, 2026Updated last month
- Managed Database hosting by DigitalOcean • AdPostgreSQL, MySQL, MongoDB, Kafka, Valkey, and OpenSearch available. Automatically scale up storage and focus on building your apps.
- Stand-alone parser for User Access Logging from Server 2012 and newer systems☆79Jan 9, 2024Updated 2 years ago
- MS Word (DOCx) Parsing Tool☆25Updated this week
- This is to edit a training forensic image file (raw/dd) and zero out all the unnecessary files.☆11Jun 21, 2025Updated last year
- Carve $MFT records from a chunk of data (for instance a memory dump)☆16Aug 21, 2016Updated 10 years ago
- A repo for centralizing ongoing research on the new Windows 10/11 DFIR artifact, EventTranscript.db.☆43Jul 18, 2022Updated 4 years ago
- Forensic tool for extracting and analyzing Google DriveFS cached files and metadata.☆23May 9, 2025Updated last year
- Parse Microsoft shim databases☆33Oct 22, 2026Updated last week
- Automate forensic traige package collection and evidence parsing with KAPE and Crowdstrike☆15Mar 5, 2022Updated 4 years ago
- Search Index Database Reporter☆145Oct 28, 2025Updated last year
- Managed Kubernetes at scale on DigitalOcean • AdDigitalOcean Kubernetes includes the control plane, bandwidth allowance, container registry, automatic updates, and more for free.
- DFIQ is a collection of investigative questions and the approaches for answering them☆316Mar 10, 2026Updated 7 months ago
- Win 10/11 related research☆203Dec 19, 2023Updated 2 years ago
- StickyParser - Sticky Notes Forensic. A Windows Sticky Notes Praser (snt and plum.sqlite supported). Additional Feature: SQLite Recovery …☆24Jul 18, 2023Updated 3 years ago
- Convert a variety of log formats to CSV while enriching detected IPs with Geolocation, ASN, DNS, WhoIs, Shodan InternetDB and Threat Indi…☆114Jun 16, 2026Updated 4 months ago
- Parses KAPE module files and downloads binaries referenced by BinaryURL☆18Oct 2, 2019Updated 7 years ago
- Extension blocks as found in ShellBags and other places in the Registry☆26Oct 24, 2026Updated last week
- Forensic Artifact Collection Tool for macOS☆121Jul 28, 2025Updated last year