dod-cyber-crime-center / sqlite-dissect

Related projects ⓘ

Alternatives and complementary repositories for sqlite-dissect

• jjrboucher / PDF-Processing
  Script to process PDF files
  ☆14Updated last month
• nisargsuthar / Veritas
  A hex viewer for the sleuths!
  ☆16Updated last year
• cclgroupltd / ccl-segb
  Module(s) related to reading SEGB (fka "Biome") data from iOS, mascOS, etc.
  ☆14Updated 6 months ago
• abrignoni / WLEAPP
  WLEAPP is an open source project that aims to parse Windows OS artifacts for the purpose of triage analysis.
  ☆31Updated last year
• Lazza / Fuji
  Graphical interface for the forensic logical acquisition of Mac computers
  ☆64Updated 3 months ago
• JamesHabben / 4n6-app-finder
  Web app built to allow digital forensic professionals to search for the forensic tools that will parse artifacts from various apps.
  ☆18Updated last year
• abrignoni / VLEAPP
  Vehicle Logs Events And Properties Parser
  ☆75Updated 5 months ago
• LincolnLandForensics / HodgePodge
  /ˈhäjˌpäj/ "a confused mixture."
  ☆11Updated this week
• AndrewRathbun / KAPE-EZToolsAncillaryUpdater
  A script that updates KAPE (using Get-KAPEUpdate.ps1) as well as EZ Tools (within .\KAPE\Modules\bin) and the ancillary files that enhanc…
  ☆53Updated last year
• stark4n6 / SQLiteWalker
  Python script to walk a folder or a zip file for SQLite Databases
  ☆35Updated last year
• AndrewRathbun / EventTranscript.db-Research
  A repo for centralizing ongoing research on the new Windows 10/11 DFIR artifact, EventTranscript.db.
  ☆39Updated 2 years ago
• MattETurner / DFIRlogbook
  Logbook for Digital Forensics and Incident Response
  ☆49Updated 4 months ago
• markmckinnon / cLeapp
  Chrome Logs Events and Protobuf Parser
  ☆34Updated last year
• AmgdGocha / DriveFS-Sleuth
  DriveFS Sleuth is a Python tool that automates investigating Google Drive File Stream disk artifacts, the tool has been developed based o…
  ☆74Updated last month
• EricZimmerman / SQLECmd
  ☆47Updated 3 weeks ago
• AbdulRhmanAlfaifi / CryptnetURLCacheParser
  CryptnetURLCacheParser is a tool to parse CryptAPI cache files
  ☆16Updated 3 months ago
• AXYS-Cyber / iCatch
  A utility to process the iOS Cache.sqlite database and create a timelined KML map for use in Google Earth
  ☆17Updated 3 weeks ago
• blackbagtech / sleuthkit-APFS
  A fork of The Sleuthkit with Pooled Storage and APFS support. See https://www.youtube.com/watch?v=k1XPillJ7aw for more info and usage.
  ☆26Updated 5 years ago
• ydkhatri / jarp
  Just Another broken Registry Parser (JARP)
  ☆16Updated 6 months ago
• jschicht / Indx2Csv
  An advanced parser for INDX records
  ☆27Updated 5 years ago
• jjrboucher / MS-Word-Parser
  MS Word (DOCx) Parsing Tool
  ☆18Updated last week
• gajos112 / PowerShell-Timeliner
  ☆13Updated 2 years ago
• Digital-Forensics-Discord-Server / ArtifactParsers
  A repo that aims to centralize a current, running list of relevant parsers/tools for known DFIR artifacts
  ☆51Updated last week
• abrignoni / RLEAPP
  Returns Logs Events And Properties Parser
  ☆99Updated last month
• flamusdiu / xleapp
  xLEAPP - Merging of iLEAPP/RLEAPP/vLEAPP, ALEAPP, cLEAPP
  ☆48Updated this week
• brimorlabs / rdpieces
  The home of the BriMor Labs rdpieces Perl script that tries to rebuild parsed RDP Bitmap Cache images
  ☆78Updated last year
• strozfriedberg / notatin
  A Windows registry file parser written in Rust
  ☆36Updated last year
• alpine-sec / SPECTR3
  Forensic tool for acquisition, triage and analysis of remote block devices via iSCSI protocol.
  ☆38Updated 3 weeks ago
• markmckinnon / Autopsy-NBM-Plugins
  Autopsy NBM Plugins
  ☆16Updated last year