☆29Oct 15, 2025Updated last year
Alternatives and similar repositories for DFIR_Toolbar
Users that are interested in DFIR_Toolbar are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- ☆11Feb 22, 2026Updated 8 months ago
- Script that uses exiftool and c2pa to identify metadata tags that indicate AI generation☆15Dec 27, 2025Updated 10 months ago
- Mount forensic disk images, archives & memory dumps as a filesystem on Linux/macOS/Windows — ext4/NTFS/exFAT/HFS+/APFS/ISO, EWF/VMDK/AFF4…☆10Sep 20, 2026Updated last month
- Vault of Windows Registry forensic artifacts☆33Nov 12, 2025Updated 11 months ago
- A tool for fetching DFIR and other GitHub tools.☆32Sep 17, 2026Updated last month
- Managed Kubernetes at scale on DigitalOcean • AdDigitalOcean Kubernetes includes the control plane, bandwidth allowance, container registry, automatic updates, and more for free.
- Automate forensic traige package collection and evidence parsing with KAPE and Crowdstrike☆15Mar 5, 2022Updated 4 years ago
- Get-MiniTimeline - Triage Collection and Timeline Generation w/ KAPE☆37May 25, 2024Updated 2 years ago
- Valhuntir SIFT platform — MCP servers, gateway, Examiner Portal☆19Oct 24, 2026Updated last week
- ☆19Sep 17, 2026Updated last month
- Azure playbook for automatic evidence collection☆13Jul 3, 2023Updated 3 years ago
- This repo contains the publicly released versions of the open source scalpel3 file carving architecture.☆17Updated this week
- Accelerating the collection, processing, analysis and outputting of digital forensic artefacts.☆33Nov 23, 2025Updated 11 months ago
- Python script for carving Bitlocker VMK keys☆27Feb 4, 2026Updated 8 months ago
- Shattering the 1:10 barrier. A high-velocity alternative to Plaso for the modern IR landscape☆18Jul 6, 2026Updated 3 months ago
- Managed hosting for WordPress and PHP on Cloudways • AdManaged hosting for WordPress, Magento, Laravel, or PHP apps, on multiple cloud providers. Deploy in minutes on Cloudways by DigitalOcean.
- FJTA (Forensic Journal Timeline Analyzer) is a tool that analyzes Linux filesystem (ext4, XFS) journals (not systemd-journald logs), gene…☆114Apr 8, 2026Updated 6 months ago
- MS Word (DOCx) Parsing Tool☆25Oct 24, 2026Updated last week
- Menu for Thor scanner lite☆20Oct 24, 2025Updated last year
- Tools and Binaries to use with KAPE☆13Aug 13, 2019Updated 7 years ago
- A collection of PowerShell scripts designed to transform raw forensic data into formats suitable for analysis☆12Jan 18, 2026Updated 9 months ago
- Orchestration Software for Incident Response☆16Oct 9, 2026Updated 3 weeks ago
- ☆11Apr 20, 2025Updated last year
- ☆14Jul 16, 2026Updated 3 months ago
- Django-WebADB - ADB in browser but more powerful with Django 5, also can do some acquisition task and more☆11May 30, 2025Updated last year
- GPU virtual machines on DigitalOcean Gradient AI • AdGet to production fast with high-performance AMD and NVIDIA GPUs you can spin up in seconds. The definition of operational simplicity.
- StickyParser - Sticky Notes Forensic. A Windows Sticky Notes Praser (snt and plum.sqlite supported). Additional Feature: SQLite Recovery …☆24Jul 18, 2023Updated 3 years ago
- Windows Forensics Salt States☆23Updated this week
- A repo to centralize some of the regular expressions I've found useful over the course of my DFIR career.☆109Mar 12, 2026Updated 7 months ago
- OneDriveExplorer is a command line and GUI based application for reconstructing the folder structure of OneDrive from the <UserCid>.dat a…☆247Sep 15, 2026Updated last month
- Jupyter Notebooks from Python as a Forensic Tool presentation☆11Feb 10, 2023Updated 3 years ago
- A script that updates KAPE (using Get-KAPEUpdate.ps1) as well as EZ Tools (within .\KAPE\Modules\bin) and the ancillary files that enhanc…☆63Oct 23, 2026Updated last week
- Documentation repository☆50Feb 11, 2026Updated 8 months ago
- Open-source memory forensics platform for DFIR, threat hunting, malware analysis, and incident response.☆29Oct 5, 2026Updated 3 weeks ago
- KQLIntel is a browser-based tool that uses LLMs to convert threat intelligence reports into actionable Kusto Query Language (KQL) queries…☆31Aug 4, 2025Updated last year
- End-to-end encrypted email - Proton Mail • AdSpecial offer: 40% Off Yearly / 80% Off First Month. All Proton services are open source and independently audited for security.
- A collection of content for blue team professionals, designed to support both reactive and proactive cybersecurity measures of every aspe…☆35Apr 2, 2026Updated 6 months ago
- A curated list of KAPE-related resources☆193May 1, 2025Updated last year
- ☆10Nov 3, 2025Updated 11 months ago
- DLEAPP — Desktop Logs Events And Protobuf Parser. A LEAPP for triaging desktop-application artifacts (Electron/Chromium).☆31Updated this week
- Digital forensics for Google Drive—done right. Identify, preserve, and document cloud evidence with hash verification, timeline reconstru…☆32Sep 30, 2026Updated last month
- Automated pipeline for generating forensic timelines from Magnet Response collections.☆15Nov 6, 2025Updated 11 months ago
- Carve file metadata from NTFS index ($I30) attributes☆76May 25, 2026Updated 5 months ago