Interactive visual reference of 118 Digital Forensics & Incident Response (DFIR) tools organized into 9 categories. Includes a high-resolution printable poster.
☆40Jul 13, 2026Updated this week
Alternatives and similar repositories for periodic-table-of-dfir
Users that are interested in periodic-table-of-dfir are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- DevSecOps for the AI-era CI/CD pipeline. Catches the bugs your AI coding assistant introduces — before they reach production.☆20Updated this week
- Assorted Python☆15Sep 6, 2024Updated last year
- Dissectify — macOS Forensic Analysis Toolkit. Collection health validation, 61 artifact parsers, XLSX export, and Velociraptor collector …☆50Jun 1, 2026Updated last month
- macos-collector - Automated Collection of macOS Forensic Artifacts for DFIR☆46Apr 13, 2026Updated 3 months ago
- Just a bunch of SQLite queries that are useful for manually parsing iOS databases or embedding in scripts☆14Jun 13, 2026Updated last month
- Deploy on Railway without the complexity - Free Credits Offer • AdConnect your repo and Railway handles the rest with instant previews. Quickly provision container image services, databases, and storage volumes.
- ☆24Jun 20, 2025Updated last year
- Forensic analysis of already-acquired WhatsApp Android databases - browse every chat exactly like the WhatsApp home screen, plus 30 foren…☆51May 9, 2026Updated 2 months ago
- A script to convert a Cellebrite UFDR to the original file structure.☆79Mar 21, 2022Updated 4 years ago
- Is a portable forensic tool for analyzing Windows logs, pre-organized according to the methodology outlined in this job: https://cybersec…☆16Jul 19, 2025Updated 11 months ago
- ☆24Updated this week
- GitHub landing page repo☆12May 14, 2026Updated 2 months ago
- CryptnetURLCacheParser is a tool to parse CryptAPI cache files☆22Aug 3, 2024Updated last year
- A curated list of iOS Forensics References, organized by folder with specific references (links to blog post, research paper, articles, a…☆233Dec 1, 2023Updated 2 years ago
- ☆79May 8, 2026Updated 2 months ago
- Deploy on Railway without the complexity - Free Credits Offer • AdConnect your repo and Railway handles the rest with instant previews. Quickly provision container image services, databases, and storage volumes.
- A repository for CTF writeups☆10Oct 8, 2016Updated 9 years ago
- Hosted Reverse Shell generator with a ton of functionality. -- (Great for CTFs)☆18Jul 19, 2024Updated last year
- Windows file metadata / forensic tool.☆20May 31, 2026Updated last month
- Learning Python for Forensics, Second Edition, Published by Packt☆11Apr 5, 2019Updated 7 years ago
- Collection of danish base wordlists for cracking danish passwords (Hashcat, John the Ripper etc.)☆30Jan 11, 2023Updated 3 years ago
- ☆16Nov 13, 2024Updated last year
- Slides and videos from talks given at cons☆29Jun 22, 2026Updated 3 weeks ago
- Command line $MFT record decoder☆12May 20, 2017Updated 9 years ago
- SIEM Visibility assessment☆15May 22, 2023Updated 3 years ago
- Deploy on Railway without the complexity - Free Credits Offer • AdConnect your repo and Railway handles the rest with instant previews. Quickly provision container image services, databases, and storage volumes.
- This will be the repo for the BTHb.☆33Jul 1, 2026Updated 2 weeks ago
- Menu for Thor scanner lite☆20Oct 24, 2025Updated 8 months ago
- all published scripts devloped by ahmed khlief☆20Apr 3, 2020Updated 6 years ago
- List of resources about CyberSecurity such as CTF, DFIR, Offsec, etc☆12Jun 4, 2026Updated last month
- ☆13May 27, 2020Updated 6 years ago
- Automated Cloud Misconfiguration Testing☆26Jun 20, 2025Updated last year
- Random tips and tricks RE: ransomware☆14Aug 17, 2021Updated 4 years ago
- Agent Development Kit (ADK)☆22Sep 24, 2025Updated 9 months ago
- ☆15Aug 13, 2019Updated 6 years ago
- GPUs on demand by Runpod - Special Offer Available • AdRun AI, ML, and HPC workloads on powerful cloud GPUs—without limits or wasted spend. Deploy GPUs in under a minute and pay by the second.
- The CRATOS proxy API integrates with your MISP instance and allows to extract indicators that can be consumed by security components such…☆13Jun 28, 2026Updated 2 weeks ago
- PowerShell-based Windows Server Security Audit Engine by Cyb3rint3l Labs. Measures alignment with the NIS2 directive and maps findings to…☆47Feb 1, 2026Updated 5 months ago
- ☆22Oct 3, 2019Updated 6 years ago
- Automated n8n workflow for ransomware threat monitoring using ransomware.live API and Claude AI — companion to the SANS Ransomware Intell…☆22Apr 15, 2026Updated 3 months ago
- In-memory BOF implementation of Silent Process Exit LSASS dump via RtlReportSilentProcessExit☆19Apr 14, 2026Updated 3 months ago
- Basic raw packet sniffer in Python - Cybrary☆12Nov 21, 2017Updated 8 years ago
- A PowerShell-based script to analyze network logs from CSV files and detect potential beaconing behavior. Supports VirusTotal integration…☆17May 11, 2025Updated last year