Forensic extractor for Claude Code and Claude Cowork local state — macOS/Windows captures
☆27Jun 16, 2026Updated 4 months ago
Alternatives and similar repositories for claude-forensics
Users that are interested in claude-forensics are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- Shattering the 1:10 barrier. A high-velocity alternative to Plaso for the modern IR landscape☆18Jul 6, 2026Updated 4 months ago
- Disk Image Mounting Script☆14Jul 21, 2026Updated 3 months ago
- A comprehensive PowerShell toolkit for RDP forensics analysis, tracking connection attempts, authentication, sessions, and logoffs across…☆19Oct 7, 2026Updated last month
- Jupyter Univere is a search engine for all infosec jupyter notebooks☆38Mar 24, 2025Updated last year
- CTI resources for Claude, maintained by Feedly☆38Oct 21, 2026Updated 3 weeks ago
- Deploy on Railway without the complexity - Free Credits Offer • AdConnect your repo and Railway handles the rest with instant previews. Quickly provision container image services, databases, and storage volumes.
- Rust-based Fast Forensics Tool for Windows☆15Aug 9, 2026Updated 3 months ago
- Triage automation tool☆25Oct 24, 2026Updated 2 weeks ago
- NEATLABS™ Packet Capture Analyzer is a single-file, enterprise-grade network forensics tool that performs deep packet inspection, behavio…☆11Feb 20, 2026Updated 8 months ago
- The most comprehensive NTFS USN Journal parser: full path reconstruction (CyberCX Rewind), TriForce correlation (MFT + LogFile + UsnJrnl)…☆33Jul 28, 2026Updated 3 months ago
- Autonomous DFIR agent — SANS SIFT Workstation MCP server for incident response☆69Oct 30, 2026Updated last week
- Convert PromptIntel & MoltThreats feeds into Nova Framework detection rules☆15Updated this week
- Tools for Incident Response and Malware Analysis☆11Feb 9, 2025Updated last year
- A simple python script to generate nested folders based on user input. The script will also name and place a template report document and…☆12May 6, 2026Updated 6 months ago
- ☆16Jun 16, 2026Updated 4 months ago
- AI Agents on DigitalOcean Gradient AI Platform • AdBuild production-ready AI agents using customizable tools or access multiple LLMs through a single endpoint. Create custom knowledge bases or connect external data.
- IDARay is an IDA Pro plugin that matches the database against multiple YARA files which themselves may contain multiple rules.☆19Nov 16, 2018Updated 7 years ago
- A curated collection of DFIR skills and workflows for InfoSec practitioners.☆325May 14, 2026Updated 5 months ago
- A lightweight tool to view, search and analyze registry hives☆21Oct 28, 2026Updated 2 weeks ago
- Valhuntir SIFT platform — MCP servers, gateway, Examiner Portal☆21Updated this week
- This tool parses Windows EVTX logs to extract login and logout sessions from a security.evtx file. It uses a Tkinter GUI to let you selec…☆32Feb 22, 2025Updated last year
- LLM-assisted adversary procedure extraction pipeline for threat-informed defense cycle.☆23Sep 20, 2026Updated last month
- Reusable /goal blueprints for security engineers using Codex, Claude Code, and agentic coding tools.☆13Nov 2, 2026Updated last week
- Resources to learn more about Chinese-language cybercrime actors.☆16Oct 14, 2026Updated 3 weeks ago
- Agentic DFIR☆103Updated this week
- Managed hosting for WordPress and PHP on Cloudways • AdManaged hosting for WordPress, Magento, Laravel, or PHP apps, on multiple cloud providers. Deploy in minutes on Cloudways by DigitalOcean.
- An open framework for classifying, detecting, and preventing insider threat behaviors.☆41Updated this week
- Hybrid Forensic Artifact Parser — Windows Registry + macOS artifacts☆20Jun 3, 2026Updated 5 months ago
- Slides, papers, etc☆35Mar 26, 2024Updated 2 years ago
- ☆28Updated this week
- Moved to openrelik/openrelik (deploy/)☆17Updated this week
- Capture. Detonate. Collect☆14Sep 20, 2024Updated 2 years ago
- Generate realistic synthetic security logs for cybersecurity threat hunting training and research☆299Updated this week
- ☆24Sep 7, 2026Updated 2 months ago
- Volume Shadow Copy Explorer☆18Nov 23, 2025Updated 11 months ago
- Deploy to Railway using AI coding agents - Free Credits Offer • AdUse Claude Code, Codex, OpenCode, and more. Autonomous software development now has the infrastructure to match with Railway.
- ☆25Mar 12, 2025Updated last year
- The SOLVE-IT knowledge base for digital forensics☆93Updated this week
- 🍯 Public honeypot datasets containing HTTP and TLS fingerprint data ☆45Oct 26, 2026Updated 2 weeks ago
- skill-veil is an open source static analysis and policy tool for the agent extension supply chain.☆28Nov 2, 2026Updated last week
- AIFT is a GUI, CLI, REST API, and MCP tool that helps DFIR analysts get oriented quickly. Point it at disk images, VM images, forensic ar…☆53Jun 13, 2026Updated 4 months ago
- Tempolocus is a time-series activity patterns and approximate location inference☆23Oct 26, 2026Updated 2 weeks ago
- Browse Windows Recycle Bin from E01 forensic images with Explorer-style interface. Parse $I/$R artifacts, view deleted files in original …☆18Dec 16, 2025Updated 10 months ago
Are these results useful?