theflakes/Linux_Forensic_Harvester external links

---

GitHub - View repository

GitHub.dev - Open in online code editor

Star history - Growth chart over time

deps.dev - Dependencies and security vulnerabilities

Gitingest - Export source code for LLM usage

Repomix - Export source code for LLM usage

uithub - Export source code for LLM usage

Close

theflakes/Linux_Forensic_Harvester

Readme badge preview -

If you own this repo, copy the snippet below and add it to your README.md

---

Copy

[![RelatedRepos](https://img.shields.io/badge/related-repos-yellow)](https://relatedrepos.com/gh/theflakes/Linux_Forensic_Harvester)

Close

theflakes / Linux_Forensic_HarvesterView on GitHubMore

• External links
• Readme badge

Harvest Linux forensic data for operational triage of an event.

☆51Nov 30, 2025Updated 3 months ago

Alternatives and similar repositories for Linux_Forensic_Harvester

Users that are interested in Linux_Forensic_Harvester are comparing it to the libraries listed below

• theflakes / reg_hunter

  View on GitHub
  Blueteam operational triage registry hunting/forensic tool.
  ☆149Sep 2, 2025Updated 6 months ago
• jnbdz / forensic-imaging-quickstarts

  View on GitHub
  Forensic Imaging quickstarts!
  ☆13Aug 12, 2022Updated 3 years ago
• ydkhatri / jarp

  View on GitHub
  Just Another broken Registry Parser (JARP)
  ☆16May 23, 2024Updated last year
• zerber0s / mac_int

  View on GitHub
  macOS Artifact Intelligence Tool
  ☆13Apr 30, 2019Updated 6 years ago
• bgrundy / cheatsheets-forensic

  View on GitHub
  Forensic cheatsheets for use with cheat
  ☆15Dec 2, 2021Updated 4 years ago
• mnrkbys / ma2tl

  View on GitHub
  macOS forensic timeline generator using the analysis result DBs of mac_apt
  ☆93Sep 7, 2023Updated 2 years ago
• f-block / volatility-plugins

  View on GitHub
  ☆24Apr 22, 2025Updated 11 months ago
• forensicxlab / volatility3_plugins

  View on GitHub
  ☆25Jul 23, 2024Updated last year
• EricZimmerman / TLEFilePlugins

  View on GitHub
  Plugins for parsing CSV files in Timeline Explorer. This project allows for anyone to add more supported files (i,e. they get a Line #/ta…
  ☆30May 5, 2025Updated 10 months ago
• west-wind / Spring4Shell-Detection

  View on GitHub
  Lazy SPL to detect Spring4Shell exploitation
  ☆12Jul 8, 2022Updated 3 years ago
• CyberCX-DFIR / usnjrnl_rewind

  View on GitHub
  USN Journal full path builder
  ☆67Sep 16, 2024Updated last year
• AamerShah / s3n

  View on GitHub
  Search-Scan-Save-Notify
  ☆11May 12, 2025Updated 10 months ago
• LincolnLandForensics / HodgePodge

  View on GitHub
  /ˈhäjˌpäj/ "a confused mixture."
  ☆13Mar 5, 2026Updated 2 weeks ago
• kacos2000 / Win10LiveInfo

  View on GitHub
  Windows 10 Live Information viewer
  ☆38Jan 27, 2022Updated 4 years ago
• theflakes / fmd

  View on GitHub
  Windows file metadata / forensic tool.
  ☆18Oct 12, 2025Updated 5 months ago
• ArsenalRecon / SdbaParser

  View on GitHub
  Parser for Sdba memory pool tags
  ☆21Jul 16, 2021Updated 4 years ago
• mac4n6 / FSEventsParser

  View on GitHub
  Parser fo macOS/iOS FSEvents Logs
  ☆43May 6, 2024Updated last year
• memprocfshunt / MemProcFSHunter

  View on GitHub
  A powershell parser for https://github.com/ufrisk/MemProcFS
  ☆45May 12, 2021Updated 4 years ago
• csababarta / memory-baseliner

  View on GitHub
  Memory Baseliner is a script that can compare two windows memory images or perform frequency of occurrence / data stacking analysis on mu…
  ☆56Jul 2, 2023Updated 2 years ago
• nicoleibrahim / DSStoreParser

  View on GitHub
  macOS .DS_Store Parser
  ☆78Aug 17, 2021Updated 4 years ago
• volatilityfoundation / community3

  View on GitHub
  Volatility3 plugins developed and maintained by the community
  ☆63Mar 19, 2023Updated 3 years ago
• ydkhatri / UnifiedLogReader

  View on GitHub
  A parser for Unified logging tracev3 files
  ☆97Jul 25, 2025Updated 7 months ago
• OMENScan / AChoirX

  View on GitHub
  ReWrite of AChoir in Go for Cross Platform forensic artifact collection and processing
  ☆41Feb 28, 2026Updated 3 weeks ago
• sumeshi / ntfsfind

  View on GitHub
  An efficient tool for search files, directories, and alternate data streams directly from NTFS image files.
  ☆28Mar 12, 2026Updated last week
• strozfriedberg / sidr

  View on GitHub
  Search Index Database Reporter
  ☆131Oct 28, 2025Updated 4 months ago
• whichbuffer / Antidebug

  View on GitHub
  Defeating Anti-Debugging Techniques for Malware Analysis
  ☆12Oct 1, 2022Updated 3 years ago
• kacos2000 / Evtx_Log_Browser

  View on GitHub
  Evtx Log (xml) Browser
  ☆56Mar 12, 2023Updated 3 years ago
• net-protect / google-fs-recover

  View on GitHub
  Google Filestream Forensic Tool
  ☆22Mar 10, 2022Updated 4 years ago
• amir9339 / volatility-docker

  View on GitHub
  A suite of Volatility 3 plugins for memory forensics of Docker containers
  ☆18Jan 10, 2024Updated 2 years ago
• Beercow / walitean

  View on GitHub
  ☆11Aug 3, 2018Updated 7 years ago
• JPCERTCC / Windows-Symbol-Tables

  View on GitHub
  Windows symbol tables for Volatility 3
  ☆93Jul 11, 2024Updated last year
• CrowdStrike / SuperMem

  View on GitHub
  A python script developed to process Windows memory images based on triage type.
  ☆266Nov 25, 2023Updated 2 years ago
• 00010111 / gMetaDataParse

  View on GitHub
  ☆24Mar 12, 2025Updated last year
• sandflysecurity / sandfly-file-decloak

  View on GitHub
  Decloak Linux stealth rootkits hiding data with this simple memory mapped IO investigation tool.
  ☆29Sep 29, 2025Updated 5 months ago
• mnrkbys / macosac

  View on GitHub
  Forensic Artifact Collection Tool for macOS
  ☆119Jul 28, 2025Updated 7 months ago
• embee-research / CyberChef

  View on GitHub
  ☆16Mar 22, 2023Updated 3 years ago
• giuseppetotaro / asla

  View on GitHub
  Bash script for performing the logical acquisition of Apple Silicon Mac
  ☆17Jun 21, 2024Updated last year
• ydkhatri / macOS_FE

  View on GitHub
  Tools for macOS Forensic Bootable media
  ☆16May 20, 2020Updated 5 years ago
• ruppde / yara_rules

  View on GitHub
  Yara rules
  ☆22Mar 27, 2023Updated 2 years ago