dfxml-working-group / dfxml_python
Digital Forensics XML packages in Python
☆15Updated 7 months ago
Alternatives and similar repositories for dfxml_python:
Users that are interested in dfxml_python are comparing it to the libraries listed below
- Accelerating the collection, processing, analysis and outputting of digital forensic artefacts.☆32Updated last month
- macOS Artifact Intelligence Tool☆13Updated 5 years ago
- A sample VHDX file with multiple verbose examples of forensic and anti-forensics artifacts. Meant to be basic and can be expanded upon. P…☆25Updated 2 years ago
- A DFVFS Backed Forensic Viewer☆40Updated 4 years ago
- WLEAPP is an open source project that aims to parse Windows OS artifacts for the purpose of triage analysis.☆31Updated last year
- It is based on bulk_extractor (https://github.com/simsong/bulk_extractor) and add scanners for record carving☆40Updated 4 years ago
- Information about the open-source-dfir slack community☆28Updated last year
- ☆19Updated last year
- Converting data from services like Censys and Shodan to a common data model☆49Updated 4 months ago
- Repository of tools, YARA rules, and code-snippets from Stairwell's research team.☆22Updated 11 months ago
- Collection of scripts used to analyse malware or emails☆19Updated 4 years ago
- Can you pay the ransom in your country?☆13Updated last year
- TAPIR is a multi-user, client/server, incident response framework☆44Updated 2 years ago
- Public tools, scripts or code snippets that can help when working with our products☆46Updated last week
- Tools used by CSIRT and especially in the scope of CNW☆16Updated 4 months ago
- Practical Information Sharing between Law Enforcement and CSIRT communities using MISP☆31Updated last year
- Logbook for Digital Forensics and Incident Response☆50Updated 6 months ago
- A happy place for detection engineers, purple teamers and threat hunters focusing on macOS.☆21Updated 2 years ago
- Digital Forensics Artifacts Knowledge Base☆76Updated 8 months ago
- A script to assist in processing forensic RAM captures for malware triage☆27Updated 3 years ago
- A tool to use novel locations to extract metadata from Office documents.☆61Updated last year
- CryptnetURLCacheParser is a tool to parse CryptAPI cache files☆16Updated 5 months ago
- Git for me to put all my forensics stuff☆21Updated 2 weeks ago
- A web scraper to create MISP events and reports☆14Updated last year
- A quick reference guide for python script development in DFIR☆16Updated 10 months ago
- Penguin OS Forensic (or Flight) Recorder☆38Updated last month
- The Python implementation of the AFF4 standard.☆45Updated 9 months ago
- A collaboration effort by the DFIR community to provide definitions (sometimes multiple) for common forensic terms!☆26Updated 2 years ago
- Scripts to integrate DFIR-IRIS, MISP and TimeSketch☆33Updated 2 years ago
- Python based CLI for MalwareBazaar☆36Updated 2 months ago