MacOS forensic acquisition made simple
-
Updated
Apr 13, 2025 - Python
MacOS forensic acquisition made simple
A repo that aims to centralize a current, running list of relevant parsers/tools for known DFIR artifacts
A tool for fetching DFIR and other GitHub tools.
Vault of Windows Registry forensic artifacts
Cryptocurrency Triage Tool - Identify multiple cryptocurrency addresses and transactions from various wallet applications!
Casting light on shadow cloud deployments. Detect exposure of resources deployed in AWS.
Outil de triage automatisé de différents types de collectes d'artefacts.
Yerel ağlarda anomaly detection, saldırı tespiti ve adli bilişim analizi yapan tek Pythontkinter tabanlı açık kaynak araç. Özelleştirilebilir imza veritabanıyla Türkiye odaklı tehditleri yakalar!
A deployment and testing platform for Velociraptor's client artifacts
Convert Kape Files to DFIR-ORC configurations
OpenRelik ertools worker
A forensic command-line tool for deep analyzing PDF files
bfcpf stands for "Brute Force CPF" and it is a CLI tool that breaks a partial CPF, finding all valid ones within the pattern given by the user.
Linux Forensic Collector, Quick & Thorough.
A collection of open-source tools and scripts for data recovery using Python, Bash, and more. It includes examples for recovering lost files, disk analysis, and automating recovery processes.
OpenSource DFIR Tool through Digging Deeper ....
Wuodan is a command-line tool designed for efficiently searching through files and directories for strings or regular expressions
FAEP is an automated tool to extract and parse forensic artifacts from .E01 images automatically, with a clean GUI and minimal manual effort.
Add a description, image, and links to the dfir-tools topic page so that developers can more easily learn about it.
To associate your repository with the dfir-tools topic, visit your repo's landing page and select "manage topics."