forensic-analysis · GitHub Topics

cugu / awesome-forensics

⭐️ A curated list of awesome forensic analysis tools and resources

computer-forensics digital-forensics forensic-analysis dfir Open Source 免费

4.18 k

2 天前

mikeroyal / Digital-Forensics-Guide

Digital Forensics Guide. Learn all about Digital Forensics, Computer Forensics, Mobile device Forensics, Network Forensics, and Database Forensics.

Python 1.76 k

1 年前

Srinivas11789 / PcapXray

❄️ PcapXray - A Network Forensics Tool - To visualize a Packet Capture offline as a Network Diagram including device identification, highlight important communication and file extraction

forensics pcap Network Python computer-forensics forensic-analysis Cybersecurity network-diagram tor traffic packets 安全

Python 1.71 k

3 年前

ahmedkhlief / APT-Hunter

APT-Hunter is Threat Hunting tool for windows event logs which made by purple team mindset to provide detect APT movements hidden in the sea of windows event logs to decrease the time to uncover suspi...

翻译 - APT-Hunter是Windows事件日志的威胁搜寻工具，紫色团队的心态使该工具能够检测Windows事件日志中隐藏的APT移动，以减少发现可疑活动的时间

threat-hunting purpleteam Python windows-eventlog apt-attacks incident-response forensic-analysis windows-event-logs

Python 1.3 k

4 个月前

yampelo / beagle

Beagle is an incident response and digital forensics tool which transforms security logs and data into graphs.

翻译 - Beagle是事件响应和数字取证工具，可将安全日志和数据转换为图形。

安全 digital-forensics incident-response graph dfir forensic-analysis threat-hunting

Python 1.29 k

2 年前

mesquidar / ForensicsTools

#Awesome#A list of free and open forensics analysis tools and other resources

forensics digital-forensics forensic-analysis forensics-investigations 工具免费 Open Source Awesome Lists metadata image-analysis timeline Network Windows macOS Linux

1.2 k

4 个月前

B16f00t / whapa

WhatsApp Parser Toolset v1.59

翻译 - WhatsApp解析器工具集v1.14

forensic-analysis whatsapp-parser whatsapp-encryption

Python 1.18 k

2 个月前

dfir-iris / iris-web

Collaborative Incident Response platform

翻译 - 事件响应协作平台

forensic incident-response Python digital-forensics digital-forensics-incident-response forensic-analysis

Python 1.15 k

8 小时前

shadawck / awesome-anti-forensic

#Awesome#Tools and packages that are used for countering forensic activities, including encryption, steganography, and anything that modify attributes. This all includes tools to work with anything in general ...

Awesome Lists anti-forensic anti-forensics Cybersecurity forensic-analysis 安全 antiforensics

HTML 834

1 年前

AvillaDaniel / AvillaForensics

#安卓#Avilla Forensics 3.0

移动 forensics WhatsApp Telegram signal adb Android iOS apktool forensics-tools forensic-analysis devices Instagram digital-forensics whatsapp-parser

C# 798

6 天前

swwwolf / wdbgark

WinDBG Anti-RootKit Extension

kernel-mode C++Malware malware-analysis malware-research forensic-analysis windbg windbg-extension anti-rootkit Windows Visual Studio driver memory-forensics anomaly-detection user-mode debugging-tool

C++ 629

5 年前

ivbeg / awesome-forensicstools

#Awesome#Awesome list of digital forensic tools

Awesome Lists forensics forensic-analysis digital-forensics metadata investigative-journalism

503

4 年前

m14r41 / PentestingEverything

application-security active-directory-security appsec docker-security forensic-analysis infrastucture iot-security-testing network-security source-code thick-client wifi-hacking

JavaScript 418

8 天前

Psmths / windows-forensic-artifacts

Handbook of windows forensic artifacts across multiple Windows version with interpretation tips and some examples. Work in progress!

forensics artifacts dfir Windows analysis reference digital-forensics forensic-analysis forensics-investigations

329

7 个月前

dfir-dd / dfir-toolkit

CLI tools for forensic investigation of Windows artifacts

命令行界面 dfir digital-forensics digital-forensics-incident-response forensic-analysis forensics forensics-tools Rust

Rust 326

4 个月前

MK-Ware / Forensic-Tools

A collection of tools for forensic analysis

forensic-analysis Python cookie Parsing metadata forensics exif-metadata exif WhatsApp Firefox Chrome skype Facebook facebook-messenger digital-forensics

Python 278

6 年前

JohnLaTwC / PyPowerShellXray

Python script to decode common encoded PowerShell scripts

PowerShell Shell dfir 安全 forensics forensic-analysis incident-response

Python 216

7 年前

Viralmaniar / Remote-Desktop-Caching-

This tool allows one to recover old RDP (mstsc) session information in the form of broken PNG files. These PNG files allows Red Team member to extract juicy information such as LAPS passwords or any s...

blueteam redteam Hacking internal-pentest penetration-testing redteaming forensics forensics-investigations forensic-analysis infrastructure-monitoring blue-team hacking-tools purpleteam

Python 213

7 年前