digitalsleuth / time_decode

Related projects ⓘ

Alternatives and complementary repositories for time_decode

• tedsmith / NSRL-Stripper
  A simple utility for stripping out either the SHA-1, MD5 or CRC values alone from the NSRL hash database
  ☆14Updated 2 years ago
• aff4 / Standard
  AFF4 Standard Documents
  ☆25Updated 2 years ago
• EricZimmerman / RegistryExplorerBookmarks
  Registry Explorer bookmark definitions
  ☆41Updated last year
• ArsenalRecon / GmailURLDecoder
  Gmail URL Decoder is an Open Source Python tool that can be used against plaintext or arbitrary raw data files in order to find, extract,…
  ☆52Updated 4 years ago
• abrignoni / WLEAPP
  WLEAPP is an open source project that aims to parse Windows OS artifacts for the purpose of triage analysis.
  ☆31Updated 11 months ago
• ydkhatri / jarp
  Just Another broken Registry Parser (JARP)
  ☆16Updated 5 months ago
• cclgroupltd / ccl-segb
  Module(s) related to reading SEGB (fka "Biome") data from iOS, mascOS, etc.
  ☆14Updated 5 months ago
• bring2lite / bring2lite
  ☆29Updated 4 years ago
• blackbagtech / sleuthkit-APFS
  A fork of The Sleuthkit with Pooled Storage and APFS support. See https://www.youtube.com/watch?v=k1XPillJ7aw for more info and usage.
  ☆26Updated 5 years ago
• mac4n6 / FSEventsParser
  Parser fo macOS/iOS FSEvents Logs
  ☆26Updated 6 months ago
• msuhanov / winmem_decompress
  Extract compressed memory pages from page-aligned data
  ☆41Updated 6 years ago
• cellebrite-labs / clbx
  CLBX file format
  ☆19Updated 3 years ago
• msuhanov / regf-samples
  Windows registry samples
  ☆23Updated 5 years ago
• ydkhatri / macOS_FE
  Tools for macOS Forensic Bootable media
  ☆15Updated 4 years ago
• pcbje / pyad1
  Python library for parsing AccessData AD1 images
  ☆29Updated last year
• forensicmatt / PyWindowsThingies
  Windows Thingies in Python for live use.
  ☆24Updated 5 years ago
• stark4n6 / SQLiteWalker
  Python script to walk a folder or a zip file for SQLite Databases
  ☆35Updated last year
• markmckinnon / cLeapp
  Chrome Logs Events and Protobuf Parser
  ☆34Updated last year
• aff4 / pyaff4
  The Python implementation of the AFF4 standard.
  ☆45Updated 6 months ago
• woanware / wmi-parser
  Parses the WMI object database....looking for persistence
  ☆31Updated 4 years ago
• woanware / lookuper
  Looks stuff up (MD5, SHA256, IP, Domains, URL's, strings e.g. mutexes)...
  ☆36Updated 7 years ago
• Recruit-CSIRT / macApfsMounter
  A small tool to easily mount APFS image on macOS for forensics.
  ☆14Updated 4 years ago
• LincolnLandForensics / HodgePodge
  /ˈhäjˌpäj/ "a confused mixture."
  ☆11Updated this week
• halpomeranz / dfis
  Digital Forensic Investigative Scripts
  ☆72Updated 5 months ago
• EricZimmerman / TLEFilePlugins
  Plugins for parsing CSV files in Timeline Explorer. This project allows for anyone to add more supported files (i,e. they get a Line #/ta…
  ☆22Updated this week
• 00010111 / gMetaDataParse
  ☆19Updated last year
• pstirparo / utils
  Different DFIR and CTI utilities
  ☆36Updated 4 years ago
• Velocidex / SQLiteHunter
  Hunt for SQLite files used by various applications
  ☆10Updated this week
• mnrkbys / macosac
  Forensic Artifact Collection Tool for macOS
  ☆98Updated last month