An open source project aimed to replicate the Windows SIFT Machine and tools used during SANS Courses minus any payware software.
☆28Oct 18, 2023Updated 2 years ago
Alternatives and similar repositories for forensicssetup
Users that are interested in forensicssetup are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- Windows Forensics Salt States☆22Jul 29, 2026Updated 2 weeks ago
- FileSigExtractor is a python based tool which extracts the file signatures of all files within a directory and writes the output to a CSV…☆10Jul 15, 2023Updated 3 years ago
- Rolling Timeline for Incident Recorder.☆14Dec 4, 2023Updated 2 years ago
- A conglomeration of resources for any color of the rainbow☆15Feb 12, 2026Updated 6 months ago
- Parser for Sdba memory pool tags☆21Jul 16, 2021Updated 5 years ago
- Managed Kubernetes at scale on DigitalOcean • AdDigitalOcean Kubernetes includes the control plane, bandwidth allowance, container registry, automatic updates, and more for free.
- A collaboration effort by the DFIR community to provide definitions (sometimes multiple) for common forensic terms!☆27Dec 1, 2022Updated 3 years ago
- This tool is meant to parse an NTFS $MFT file.☆15Mar 26, 2024Updated 2 years ago
- Forensic Imaging quickstarts!☆13Aug 2, 2026Updated last week
- ReWrite of AChoir in Go for Cross Platform forensic artifact collection and processing☆42May 18, 2026Updated 2 months ago
- A config file that's curated for DFIR examiners with shortcuts to common Windows artifacts and settings enabled that help make your life …☆43Jan 6, 2025Updated last year
- Forensic cheatsheets for use with cheat☆15Dec 2, 2021Updated 4 years ago
- ☆12Mar 21, 2020Updated 6 years ago
- Vault of Windows Registry forensic artifacts☆32Nov 12, 2025Updated 9 months ago
- http://moaistory.blogspot.com/2016/08/ie10analyzer.html☆20Jul 20, 2024Updated 2 years ago
- Simple, predictable pricing with DigitalOcean hosting • AdAlways know what you'll pay with monthly caps and flat pricing. Enterprise-grade infrastructure trusted by 600k+ customers.
- RegRipper4.0☆107Dec 10, 2025Updated 8 months ago
- Google Filestream Forensic Tool☆22Mar 10, 2022Updated 4 years ago
- Quick ESXi Log Parser☆33Jul 21, 2026Updated 3 weeks ago
- This tool aims at parsing Microsoft Protection logs to provide relevant data to forensic analysts during incident responses.☆22Sep 30, 2022Updated 3 years ago
- PacketSifter is a tool/script that is designed to aid analysts in sifting through a packet capture (pcap) to find noteworthy traffic. Pac…☆93Jun 3, 2021Updated 5 years ago
- Kaseya REvil CNC domains☆12Jun 30, 2026Updated last month
- Volume Shadow Copy Explorer☆15Nov 23, 2025Updated 8 months ago
- These FLARE-VM configuration files are designed to be help setup a purpose-built installation, remove unnecessary packages to help stream…☆16Apr 10, 2024Updated 2 years ago
- ☆23Mar 12, 2025Updated last year
- Deploy to Railway using AI coding agents - Free Credits Offer • AdUse Claude Code, Codex, OpenCode, and more. Autonomous software development now has the infrastructure to match with Railway.
- A curated list of HL7 and DICOM resources, tools, and hard-won field notes for healthcare integration engineers.☆12Jul 29, 2026Updated 2 weeks ago
- A cover story generator for people who Need Quick Covers On Operations☆13May 17, 2020Updated 6 years ago
- A series of python scripts to extract information from SQLite Data Files☆22Nov 15, 2025Updated 9 months ago
- These are some of the commands which I use frequently during Malware Analysis and DFIR.☆24Jan 8, 2024Updated 2 years ago
- ☆69Jan 8, 2026Updated 7 months ago
- A PowerShell incident response script for quick triage☆81Jul 18, 2022Updated 4 years ago
- Python script for carving Bitlocker VMK keys☆26Feb 4, 2026Updated 6 months ago
- A python script to turn Ubuntu Desktop in a one stop security platform. The InfoSec Fortress installs the packages,tools, and resources t…☆53Jan 3, 2022Updated 4 years ago
- ☆19Jun 2, 2020Updated 6 years ago
- Deploy open-source AI quickly and easily - Special Bonus Offer • AdRunpod Hub is built for open source. One-click deployment and autoscaling endpoints without provisioning your own infrastructure.
- Linux BPF plugins for Volatility3☆23Jan 19, 2024Updated 2 years ago
- KQL Queries for Advanced Hunting / Log Analytics☆13Jan 29, 2026Updated 6 months ago
- xLEAPP - Merging of iLEAPP/RLEAPP/vLEAPP, ALEAPP, cLEAPP☆56Updated this week
- Powering Up Incident Response with Power-Response☆63Mar 5, 2020Updated 6 years ago
- Multi-quarantine extractor☆59Mar 3, 2026Updated 5 months ago
- Automating the baseline logging settings found here: https://nullsec.us/windows-baseline-logging/☆20Jan 28, 2025Updated last year
- A GeoIP lookup utility utilizing ipinfo.io services.☆96Nov 30, 2023Updated 2 years ago