Alternatives and similar repositories for timeliner

Users that are interested in timeliner are comparing it to the libraries listed below

• airbus-cert / regrippy

  View on GitHub
  A modern Python-3-based alternative to RegRipper
  ☆204Mar 31, 2025Updated 10 months ago
• airbus-cert / cacdec

  View on GitHub
  The hidden mstsc recorder player
  ☆27Mar 9, 2020Updated 5 years ago
• EricZimmerman / USBDevices

  View on GitHub
  Get USB Devices from Registry hives
  ☆22Nov 15, 2021Updated 4 years ago
• eLoopWoo / chrome-url-dumper

  View on GitHub
  research chrome stored databases - dumping all urls
  ☆42Nov 11, 2017Updated 8 years ago
• Silv3rHorn / ArtifactExtractor

  View on GitHub
  Extract common Windows artifacts from source images and VSCs
  ☆64May 10, 2021Updated 4 years ago
• airbus-cert / PSTrace

  View on GitHub
  Trace ScriptBlock execution for powershell v2
  ☆40Jan 14, 2020Updated 6 years ago
• forensicmatt / PancakeViewer

  View on GitHub
  A DFVFS Backed Forensic Viewer
  ☆42Apr 13, 2020Updated 5 years ago
• grayfold3d / POSH-Triage

  View on GitHub
  Tools for parsing Forensic images
  ☆41Dec 14, 2018Updated 7 years ago
• AlfredoAbarca / ARTSP

  View on GitHub
  Atomic Red Team Simple Parser
  ☆13Sep 21, 2018Updated 7 years ago
• airbus-cert / etl-parser

  View on GitHub
  Event Trace Log file parser in pure Python
  ☆151Nov 27, 2020Updated 5 years ago
• EricZimmerman / bstrings

  View on GitHub
  A better strings utility!
  ☆150Feb 8, 2026Updated last week
• cado-security / AWS_EKS_Cluster_Forensics

  View on GitHub
  AWS EKS Cluster Forensics
  ☆23Aug 16, 2021Updated 4 years ago
• msuhanov / regf-samples

  View on GitHub
  Windows registry samples
  ☆24Nov 18, 2018Updated 7 years ago
• certgovaz / MAK

  View on GitHub
  Malware-Analysis-Kit
  ☆14Aug 3, 2015Updated 10 years ago
• mutedmouse / ta-volatility

  View on GitHub
  Technical add-on to ingest json formatted volatility memory analysis plugin outputs
  ☆13May 21, 2018Updated 7 years ago
• ralphje / imagemounter

  View on GitHub
  Command line utility and Python package to ease the (un)mounting of forensic disk images
  ☆126Feb 9, 2023Updated 3 years ago
• Velocidex / evtx-data

  View on GitHub
  Publicly shareable windows event log message data
  ☆28Nov 29, 2019Updated 6 years ago
• PoorBillionaire / USN-Journal-Parser

  View on GitHub
  Python script to parse the NTFS USN Journal
  ☆115Jul 15, 2022Updated 3 years ago
• forensiclunch / ETLParser

  View on GitHub
  Binary commandline executable to parse ETL files
  ☆69Jun 7, 2018Updated 7 years ago
• notx11 / urlScan2Hive

  View on GitHub
  Triage automation for suspect URLs
  ☆13Jul 23, 2019Updated 6 years ago
• log2timeline / dftimewolf

  View on GitHub
  A framework for orchestrating forensic collection, processing and data export
  ☆341Jan 28, 2026Updated 2 weeks ago
• OpenCTI-Platform / docs

  View on GitHub
  OpenCTI Documentation Space
  ☆26Dec 18, 2025Updated last month
• moaistory / IE10Analyzer

  View on GitHub
  http://moaistory.blogspot.com/2016/08/ie10analyzer.html
  ☆19Jul 20, 2024Updated last year
• samolds / wavsteg

  View on GitHub
  Steganographic coder for WAV files
  ☆13Dec 14, 2017Updated 8 years ago
• jfarley248 / MEAT

  View on GitHub
  This toolkit aims to help forensicators perform different kinds of acquisitions on iOS devices
  ☆157May 21, 2020Updated 5 years ago
• CompassSecurity / Readinizer

  View on GitHub
  Microsoft GPO Readiness Lateral Movement Detection Tool
  ☆16Dec 8, 2022Updated 3 years ago
• jschicht / MftCarver

  View on GitHub
  Carve $MFT records from a chunk of data (for instance a memory dump)
  ☆16Aug 21, 2016Updated 9 years ago
• CIRCL / forensic-tools

  View on GitHub
  CIRCL system forensic tools or a jumble of tools to support forensic
  ☆41Jan 20, 2023Updated 3 years ago
• Big5-sec / SourceFu

  View on GitHub
  hopefully a source-to-source deobfuscator, aiming at deobfuscating common scripts languages such as Powershell, VBA and Javascript. Curre…
  ☆40Aug 17, 2019Updated 6 years ago
• Velocidex / go-prefetch

  View on GitHub
  A golang implementation of a prefetch parser.
  ☆20Oct 27, 2025Updated 3 months ago
• KasperFridolin / mysql_forensics

  View on GitHub
  Scripts and Modules for forensical analyses of mysql database systems
  ☆22Sep 19, 2014Updated 11 years ago
• The-DFIR-Report / cyberchef-recipes

  View on GitHub
  ☆21May 8, 2022Updated 3 years ago
• nettitude / logparser

  View on GitHub
  SQL scripts for querying event logs
  ☆21Jul 12, 2017Updated 8 years ago
• swisscom / splunk-addon-powershell

  View on GitHub
  Splunk Add-on for PowerShell provides field extraction for PowerShell event logs.
  ☆17Feb 1, 2021Updated 5 years ago
• mandiant / Volatility-Plugins

  View on GitHub
  ☆82Jul 5, 2016Updated 9 years ago
• tesorion / TCERT-Cumulonimbus-UAL_Extractor

  View on GitHub
  Cumulonimbus-UAL_Extractor is a PowerShell based tool created by the Tesorion CERT team to help gather the Unified Audit Logging out of a…
  ☆21Oct 25, 2023Updated 2 years ago
• OllieJC / tbat

  View on GitHub
  Threat Box Assessment Tool
  ☆19Aug 15, 2021Updated 4 years ago
• google / turbinia

  View on GitHub
  Automation and Scaling of Digital Forensics Tools
  ☆782Jan 15, 2026Updated 3 weeks ago
• gleeda / misc-scripts

  View on GitHub
  misc scripts
  ☆35Oct 23, 2018Updated 7 years ago