log2timeline / dfdatetime

Related projects: ⓘ

• cudeso / misp-training-environment
  Setting up a training environment for MISP
  ☆11Updated last year
• CyCat-project / cycat-taxonomy
  CyCAT.org taxonomies
  ☆14Updated 3 years ago
• ydkhatri / Appx-Analysis
  Scripts and tools created for appx analysis talk (Magnet summit 2019)
  ☆13Updated 6 months ago
• Invoke-IR / PowerForensicsPortable
  ☆29Updated 4 years ago
• Velocidex / SQLiteHunter
  Hunt for SQLite files used by various applications
  ☆10Updated last month
• kevthehermit / yaraMail
  Yara Scanner For IMAP Feeds and saved Streams
  ☆27Updated 4 years ago
• forensicmatt / PyWindowsThingies
  Windows Thingies in Python for live use.
  ☆24Updated 5 years ago
• woanware / reg-entropy-scanner
  Scans through registry hives outputting entropy values for key/values, dumps binary contents to files...we are looking for those "fileles…
  ☆10Updated 5 years ago
• forensicmatt / PancakeViewer
  A DFVFS Backed Forensic Viewer
  ☆38Updated 4 years ago
• ArsenalRecon / GmailURLDecoder
  Gmail URL Decoder is an Open Source Python tool that can be used against plaintext or arbitrary raw data files in order to find, extract,…
  ☆52Updated 4 years ago
• CIRCL / forensic-tools
  CIRCL system forensic tools or a jumble of tools to support forensic
  ☆42Updated last year
• tokesr / usb_investigator
  ☆9Updated 5 years ago
• rj-chap / NFWorkshop
  Network Forensics Workshop Files
  ☆17Updated 9 years ago
• jaegeral / osint_to_timesketch
  Virustotal Data to Timesketch
  ☆17Updated 5 years ago
• obsidianforensics / scripts
  Small scripts and POCs related to digital forensics
  ☆16Updated last year
• appliedsec / forensicscanner
  Forensic Scanner
  ☆40Updated 11 years ago
• ArsenalRecon / SdbaParser
  Parser for Sdba memory pool tags
  ☆17Updated 3 years ago
• jaegeral / awesome-cyber-civil-society-actors
  A curated lust of awesome cyber civil society actors, project etc.
  ☆10Updated 4 years ago
• D4-project / analyzer-d4-passivedns
  A Passive DNS backend and collector
  ☆31Updated 2 years ago
• PwCUK-CTO / OperationCloudHopper
  Indicators of compromise relating to our report on APT10's targeting of global MSPs
  ☆10Updated 6 years ago
• lucanag / emotet
  ☆10Updated 3 years ago
• ch33r10 / Stalkerware
  ☆24Updated last year
• cocaman / analysis_scripts
  Collection of scripts used to analyse malware or emails
  ☆19Updated 3 years ago
• SekoiaLab / FastIR_Server
  The FastIR Server is a Web server to schedule FastIR Collector forensics collect thanks to the FastIR Agent
  ☆12Updated 7 years ago
• randomaccess3 / 4n6_stuff
  Git for me to put all my forensics stuff
  ☆21Updated 3 weeks ago
• Silv3rHorn / autoripy
  Attempt to replicate the functions of auto_rip by Corey Harrell in Python.
  ☆13Updated last month
• dfirlabs / ntfs-specimens
  NTFS file system specimens
  ☆13Updated last year
• serrastusbear / NewDomainSearch
  Script to pull newly-registered domains and check for similarity against a provided word list.
  ☆13Updated 4 years ago
• AlecRandazzo / Packrat
  Live system forensic collector
  ☆16Updated 2 years ago
• MITRECND / crits_services
  CRITs Services Collection
  ☆15Updated 7 years ago