250 Open Source Forensics Software Projects
Free and open source forensics code projects including engines, APIs, generators, and tools.
Infosec_reference 4205 ⭐
An Information Security Reference That Doesn't Suck; https://rmusser.net/git/admin-2/Infosec_Reference for non-MS Git hosted version.
Toniblyx Prowler 4762 ⭐
Prowler is a security tool to perform AWS security best practices assessments, audits, incident response, continuous monitoring, hardening and forensics readiness. It contains more than 200 controls covering CIS, ISO27001, GDPR, HIPAA, SOC2, ENS and other security frameworks.
Sleuthkit 1962 ⭐
The Sleuth Kit® (TSK) is a library and collection of command line digital forensics tools that allow you to investigate volume and file system data. The library can be incorporated into larger digital forensics tools and the command line tools can be directly used to find evidence.
Oletools 1895 ⭐
oletools - python tools to analyze MS OLE2 files (Structured Storage, Compound File Binary Format) and MS Office documents, for malware analysis, forensics and debugging.
Autopsy 1420 ⭐
Autopsy® is a digital forensics platform and graphical interface to The Sleuth Kit® and other digital forensics tools. It can be used by law enforcement, military, and corporate examiners to investigate what happened on a computer. You can even use it to recover photos from your camera's memory card.
Pcapxray 1233 ⭐
:snowflake: PcapXray - A Network Forensics Tool - To visualize a Packet Capture offline as a Network Diagram including device identification, highlight important communication and file extraction
Netflix Skunkworks Diffy 587 ⭐
Diffy is a triage tool used during cloud-centric security incidents, to help digital forensics and incident response (DFIR) teams quickly identify suspicious hosts on which to focus their response.
Operative Framework 548 ⭐
operative framework is a OSINT investigation framework, you can interact with multiple targets, execute multiple modules, create links with target, export rapport to PDF file, add note to target or results, interact with RESTFul API, write your own modules.
Seqbox 499 ⭐
A single file container/archive that can be reconstructed even after total loss of file system structures
Awesome Forensics 498 ⭐
Awesome Forensics Resources. Almost 300 open source forensics tools, and 600 blog posts about forensics.
Swap_digger 413 ⭐
swap_digger is a tool used to automate Linux swap analysis during post-exploitation or forensics. It automates swap extraction and searches for Linux user credentials, web forms credentials, web forms emails, http basic authentication, Wifi SSID and keys, etc.
Ir Rescue 362 ⭐
A Windows Batch script and a Unix Bash script to comprehensively collect host forensic data during incident response.
Tonyphipps Meerkat 318 ⭐
A collection of PowerShell modules designed for artifact gathering and reconnaisance of Windows-based endpoints.
Invtero.net 251 ⭐
inVtero.net: A high speed (Gbps) Forensics, Memory integrity & assurance. Includes offensive & defensive memory capabilities. Find/Extract processes, hypervisors (including nested) in memory dumps using microarchitechture independent Virtual Machiene Introspection techniques
Remote Desktop Caching 190 ⭐
This tool allows one to recover old RDP (mstsc) session information in the form of broken PNG files. These PNG files allows Red Team member to extract juicy information such as LAPS passwords or any sensitive information on the screen. Blue Team member can reconstruct PNG files to see what an attacker did on a compromised host. It is extremely useful for a forensics team to extract timestamps after an attack on a host to collect evidences and perform further analysis.
Whatsdump 241 ⭐
Extract WhatsApp private key from any non-rooted Android device (Android 7+ supported)
Cdir 113 ⭐
CDIR (Cyber Defense Institute Incident Response) Collector - live collection tool based on oss tool/library
Information Security Tasks 133 ⭐
This repository is created only for infosec professionals whom work day to day basis to equip ourself with uptodate skillset, We can daily contribute daily one hour for day to day tasks and work on problem statements daily, Please contribute by providing problem statements and solutions
Bootcode_parser 87 ⭐
A boot record parser that identifies known good signatures for MBR, VBR and IPL.
Artifacts Kit 143 ⭐
Pseudo-malicious usermode memory artifact generator kit designed to easily mimic the footprints left by real malware on an infected Windows OS.
Dfw1n Osint 102 ⭐
Australian Open Source Intelligence Gathering Resources, Australias Largest Open Source Intelligence Repository for Cyber Professionals and Ethical Hackers
Amt Forensics 42 ⭐
Retrieve Intel AMT's Audit Log from a Linux machine without knowing the admin user's password.
Getconsolehistoryandoutput 41 ⭐
An Incident Response tool to extract console command history and screen output buffer
Meat 92 ⭐
This toolkit aims to help forensicators perform different kinds of acquisitions on iOS devices