D3Ext
Follow
Forensics
This is the development tree. Production downloads are at:
DFF (Digital Forensics Framework) is a Forensics Framework coming with command line and graphical interfaces. DFF can be used to investigate hard drives and volatile memory and create reports about…
Forensics acquisition framework designed to be extensible and secure
GRR Rapid Response: remote live forensics for incident response
Distributed & real time digital forensics at the speed of the cloud
The Sleuth Kit® (TSK) is a library and collection of command line digital forensics tools that allow you to investigate volume and file system data. The library can be incorporated into larger digi…
Github mirror of official Kismet repository
Mobile Security Framework (MobSF) is an automated, all-in-one mobile application (Android/iOS/Windows) pen-testing, malware analysis and security assessment framework capable of performing static a…
📱 Andriller - is software utility with a collection of forensic tools for smartphones. It performs read-only, forensically sound, non-destructive acquisition from Android devices.
Tool to find metadata and hidden information in the documents.
Extracts passwords from a KeePass 2.x database, directly from memory.
LiME (formerly DMD) is a Loadable Kernel Module (LKM), which allows the acquisition of volatile memory from Linux and Linux-based devices, such as those powered by Android. The tool supports acquir…
Arsenal Image Mounter mounts the contents of disk images as complete disks in Microsoft Windows.
Jupyter Notebooks for the Blue Team
Public malware techniques used in the wild: Virtual Machine, Emulation, Debuggers, Sandbox detection.
Noriben - Portable, Simple, Malware Analysis Sandbox
The best tools and resources for forensic analysis.
Moneta is a live usermode memory analysis tool for Windows with the capability to detect malware IOCs