Follow the trail of breadcrumbs left behind by any user on a computer or mounted disk image.
☆31Aug 28, 2025Updated last year
Alternatives and similar repositories for TrailBytes
Users that are interested in TrailBytes are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- A collection of content for blue team professionals, designed to support both reactive and proactive cybersecurity measures of every aspe…☆35Apr 2, 2026Updated 6 months ago
- Menu for Thor scanner lite☆20Oct 24, 2025Updated last year
- Automated pipeline for generating forensic timelines from Magnet Response collections.☆15Nov 6, 2025Updated 11 months ago
- Helping Incident Responders hunt for potential persistence mechanisms on UNIX-based systems.☆16Oct 28, 2023Updated 3 years ago
- Browse Windows Prefetch versions: 17,23,26,30v1/2,31 & some of SuperFetch .7db/.db's☆67Dec 18, 2024Updated last year
- GPUs on demand by Runpod - Special Offer Available • AdRun AI, ML, and HPC workloads on powerful cloud GPUs—without limits or wasted spend. Deploy GPUs in under a minute and pay by the second.
- Generate Caddy redirector configs from Cobalt Strike or Sliver C2 profiles.☆25Jul 11, 2026Updated 3 months ago
- A powerful macOS triage collection tool designed for forensic analysis. It gathers critical system artifacts such as FSEvents, Spotlight,…☆50Oct 24, 2025Updated last year
- Azure playbook for automatic evidence collection☆13Jul 3, 2023Updated 3 years ago
- A secure repository of tools, guides, and cheat sheets for Cyber Crime Investigators, DFIR professionals, OSINT analysts, and Threat Hunt…☆11Aug 15, 2025Updated last year
- BlueSploit is a DFIR framework with the main purpose being to quickly capture artifacts for later review.☆33Jan 1, 2020Updated 6 years ago
- Quick ESXi Log Parser☆33Jul 21, 2026Updated 3 months ago
- The most comprehensive NTFS USN Journal parser: full path reconstruction (CyberCX Rewind), TriForce correlation (MFT + LogFile + UsnJrnl)…☆33Jul 28, 2026Updated 3 months ago
- Scripts to for ready-to-use Velociraptor instance deployment in Azure☆14Jun 27, 2023Updated 3 years ago
- The Eventlog Compendium is the go-to resource for understanding Windows Event Logs.☆58Apr 22, 2025Updated last year
- Virtual machines for every use case on DigitalOcean • AdGet dependable uptime with 99.99% SLA, simple security tools, and predictable monthly pricing with DigitalOcean's virtual machines, called Droplets.
- A utility to process the iOS Cache.sqlite database and create a timelined KML map for use in Google Earth☆29Dec 3, 2024Updated last year
- Automatic, fast parsing of browser artifacts☆17Jan 4, 2025Updated last year
- The EPSS Calculator is a user-friendly web application that calculates the EPSS (Exploit Prediction Scoring System) score based on a prov…☆18Nov 11, 2024Updated last year
- Automate forensic traige package collection and evidence parsing with KAPE and Crowdstrike☆15Mar 5, 2022Updated 4 years ago
- Script related in Active Directory Attacks Domain☆24Aug 19, 2023Updated 3 years ago
- Microsoft Office365 Protection Center Audit Log Parser☆27Jul 17, 2023Updated 3 years ago
- Parses USB connection artifacts from offline Registry hives☆109Feb 8, 2026Updated 8 months ago
- A simple python script to generate nested folders based on user input. The script will also name and place a template report document and…☆12May 6, 2026Updated 5 months ago
- Just Another broken Registry Parser (JARP)☆16May 23, 2024Updated 2 years ago
- Deploy to Railway using AI coding agents - Free Credits Offer • AdUse Claude Code, Codex, OpenCode, and more. Autonomous software development now has the infrastructure to match with Railway.
- Fork this repo! Do a Pull Request! As many times as you want! Learn the ins and outs of how to contribute to GitHub! Make your mistakes h…☆15Jun 21, 2024Updated 2 years ago
- Your Open-Source SOC Assistant☆12Apr 5, 2023Updated 3 years ago
- A practitioner wellbeing framework for cybersecurity operations. Four injuries, four zones, and what to do about them.☆28Sep 18, 2026Updated last month
- A tool for fetching DFIR and other GitHub tools.☆32Sep 17, 2026Updated last month
- Forensic cheatsheets for use with cheat☆16Dec 2, 2021Updated 4 years ago
- PowerShell scripts for running Magnet RESPONSE forensic collection tool in large enterprises.☆36Jan 9, 2025Updated last year
- Contains compiled binaries of Volatility☆37Oct 19, 2026Updated last week
- Generates Malicious Macro and Execute Powershell or Shellcode via MSBuild Application Whitelisting Bypass.☆12Aug 6, 2019Updated 7 years ago
- Linux BPF plugins for Volatility3☆23Jan 19, 2024Updated 2 years ago
- Deploy on Railway without the complexity - Free Credits Offer • AdConnect your repo and Railway handles the rest with instant previews. Quickly provision container image services, databases, and storage volumes.
- Volatility3 Linux profiles☆83Oct 10, 2026Updated 3 weeks ago
- Velociraptor Server hosted in Azure App Service☆59Jun 4, 2025Updated last year
- This tool parses Windows EVTX logs to extract login and logout sessions from a security.evtx file. It uses a Tkinter GUI to let you selec…☆32Feb 22, 2025Updated last year
- Comprehensive Active Directory Enumeration tool using Netexec☆19Aug 8, 2026Updated 2 months ago
- Multi-threaded C2 framework built in Flask with keylogger - from the Offensive C# Course by Naga Sai Nikhil☆20Aug 26, 2022Updated 4 years ago
- macOS Artifacts☆33Mar 2, 2025Updated last year
- TTPMapper is an AI-driven threat intelligence parser that converts unstructured reports whether from web URLs or PDF files into structure…☆58Jun 21, 2025Updated last year