File system forensics
☆18Sep 13, 2026Updated last week
Alternatives and similar repositories for FileSystemForensics
Users that are interested in FileSystemForensics are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- Open source Python library for NTFS analysis☆86Dec 22, 2017Updated 8 years ago
- Command line utility and Python package to ease the (un)mounting of forensic disk images☆127Feb 9, 2023Updated 3 years ago
- A DFVFS Backed Forensic Viewer☆42Apr 13, 2020Updated 6 years ago
- Palantir is a Lua scriptable, portable, tiny reverse shell, using a human readable protocol written in C and Lua.☆17Mar 19, 2018Updated 8 years ago
- linux c++, fox-toolkit, multi-threaded forensic gui tool☆49Jul 19, 2024Updated 2 years ago
- Deploy to Railway using AI coding agents - Free Credits Offer • AdUse Claude Code, Codex, OpenCode, and more. Autonomous software development now has the infrastructure to match with Railway.
- Plugins for parsing CSV files in Timeline Explorer. This project allows for anyone to add more supported files (i,e. they get a Line #/ta…☆35Jun 5, 2026Updated 3 months ago
- a GUI Interface for DFIR Open Source Tools☆10Jun 16, 2015Updated 11 years ago
- Python script to parse the NTFS USN Journal☆119Jul 15, 2022Updated 4 years ago
- A reimplementation of the EtherApe style display for OS X. Note that this is not a fork of EtherApe. Written in a kinder, gentler, age …☆26Dec 3, 2018Updated 7 years ago
- Python client library for the ClamAV antivirus.☆15Mar 5, 2026Updated 6 months ago
- Aspose.Email for Python via .NET Examples: https://products.aspose.com/email/python-net☆10Oct 9, 2025Updated 11 months ago
- Automatic, fast parsing of browser artifacts☆17Jan 4, 2025Updated last year
- A simple pam account module to process HBAC rules stored on an IPA server☆10May 14, 2018Updated 8 years ago
- DFIR Presentations☆16Apr 24, 2026Updated 4 months ago
- GPU virtual machines on DigitalOcean Gradient AI • AdGet to production fast with high-performance AMD and NVIDIA GPUs you can spin up in seconds. The definition of operational simplicity.
- Fork this repo! Do a Pull Request! As many times as you want! Learn the ins and outs of how to contribute to GitHub! Make your mistakes h…☆15Jun 21, 2024Updated 2 years ago
- A repo that aims to centralize a current, running list of relevant parsers/tools for known DFIR artifacts☆83Oct 20, 2025Updated 10 months ago
- This is to edit a training forensic image file (raw/dd) and zero out all the unnecessary files.☆11Jun 21, 2025Updated last year
- Parser for systemd journal files.☆18Jun 8, 2026Updated 3 months ago
- Visualize your chrome browsing history using google takeout data.☆18Nov 26, 2024Updated last year
- A curated list of digital forensic tools.☆21Dec 2, 2019Updated 6 years ago
- This tool is meant to parse an NTFS $MFT file.☆15Mar 26, 2024Updated 2 years ago
- Convert Eml to Pst Outlook - Aspose Email☆17Sep 16, 2025Updated last year
- Environment setup and automation fun with the Nexus9000v☆10Feb 15, 2019Updated 7 years ago
- Deploy to Railway using AI coding agents - Free Credits Offer • AdUse Claude Code, Codex, OpenCode, and more. Autonomous software development now has the infrastructure to match with Railway.
- ☆18Mar 26, 2025Updated last year
- 📚 A collection of tools and libraries to parse filesystems, archives and other data types☆22Oct 20, 2024Updated last year
- A Golang Registry parser☆20Feb 3, 2025Updated last year
- Based on ITUS 1.51 SP1☆11Jul 8, 2018Updated 8 years ago
- A repository of output using KAPE (!EZParser Module) for various publicly available forensic images!☆17Aug 31, 2024Updated 2 years ago
- Go implementation of an Extensible Storage Engine parser☆32Aug 12, 2026Updated last month
- Libewf is a library to access the Expert Witness Compression Format (EWF)☆317Updated this week
- Resources for DFIR. And more.☆12Jul 3, 2024Updated 2 years ago
- Is a portable forensic tool for analyzing Windows logs, pre-organized according to the methodology outlined in this job: https://cybersec…☆15Jul 19, 2025Updated last year
- Deploy on Railway without the complexity - Free Credits Offer • AdConnect your repo and Railway handles the rest with instant previews. Quickly provision container image services, databases, and storage volumes.
- Simple Ansible playbook and role for setting a software channel and upgrading RouterOS on mikrotik devices☆13Aug 1, 2022Updated 4 years ago
- ☆10Aug 1, 2020Updated 6 years ago
- Russian phone number parsing☆15Nov 22, 2019Updated 6 years ago
- A Windows Dev PC BoxStarter repository☆13Dec 13, 2018Updated 7 years ago
- Solutions for OCTEON and Arm Server SoCs as Data accelerator offload☆15Updated this week
- Web app built to allow digital forensic professionals to search for the forensic tools that will parse artifacts from various apps.☆22Updated this week
- A quick reference guide for python script development in DFIR☆18Mar 20, 2024Updated 2 years ago