Repository Index

Hunt down social media accounts by username across social networks

• osint
• reconnaissance
• linux
• cli

🔍 A Hex Editor for Reverse Engineers, Programmers and people who value their retinas when working at 3 AM.

• hex-editor
• reverse-engineering
• ips
• dear-imgui

UNIX-like reverse engineering framework and command-line toolset

• radare2
• c
• commandline
• reverse-engineering

MVT (Mobile Verification Toolkit) helps with conducting forensics of mobile devices in order to find signs of a potential compromise.

• forensics
• mobile
• security
• android

This repo hosts Prowler OSS (CLI and Local Server). Prowler is the world’s most widely used open-source cloud security platform that automates security and compliance across any cloud environment for Humans and AI Agents.

• security
• security-tools
• security-audit
• security-hardening

An Information Security Reference That Doesn't Suck; https://rmusser.net/git/admin-2/Infosec_Reference for non-MS Git hosted version.

• infosec
• infosec-reference
• reverse-engineering
• hacking

Volatility 3.0 development

• digital-investigation
• forensics
• incident-response
• malware

Rapidly Search and Hunt through Windows Forensic Artefacts

• attack
• rust
• security
• threat-hunting

Collaborative forensic timeline analysis

• forensics
• dfir
• security
• timeline

Hayabusa (隼) is a sigma-based threat hunting and fast forensics timeline generator for Windows event logs.

• dfir
• threat
• hunting
• windows

The Sleuth Kit® (TSK) is a library and collection of command line digital forensics tools that allow you to investigate volume and file system data. The library can be incorporated into larger digital forensics tools and the command line tools can be directly used to find evidence.

• sleuthkit
• tct
• ntfs
• forensics

Super timeline all the things

• forensics
• parsing
• timeline

TCP/IP packet demultiplexer. Download from:

• digital-forensics
• forensics
• tcp-protocol
• tcpip

📱 Andriller - is software utility with a collection of forensic tools for smartphones. It performs read-only, forensically sound, non-destructive acquisition from Android devices.

• forensics
• python
• android

Browser forensics tool for Google Chrome, other Chromium-based browsers, and Mozilla Firefox

• google-chrome
• hindsight
• chrome
• forensics

UAC is a powerful and extensible incident response tool designed for forensic investigators, security analysts, and IT professionals. It automates the collection of artifacts from a wide range of Unix-like systems, including AIX, ESXi, FreeBSD, Linux, macOS, NetBSD, NetScaler, OpenBSD and Solaris.

• incident-response
• forensics
• computer-forensics
• triage

Process-aware, eBPF-based tcpdump

• ebpf
• ebpf-tc
• tcpdump
• tcpdump-like

Zero Breach — local, read-only scanner that checks a computer for indicators of the AdFection / Candiru ad-delivered spyware campaign. No network, no admin, no dependencies.

• digital-security
• forensics
• incident-response
• ioc

macOS (& ios) Artifact Parsing Tool

• dfir
• forensics
• macos

A standalone SIGMA-based detection tool for EVTX, Auditd and Sysmon for Linux logs

• sigma
• python3
• evtx
• sigma-rules

Collection of Event ID ressources useful for Digital Forensics and Incident Response

• ir
• dfir
• digitalforensics
• forensics

:no_entry: (DEPRECATED) Diffy is a triage tool used during cloud-centric security incidents, to help digital forensics and incident response (DFIR) teams quickly identify suspicious hosts on which to focus their response.

• security
• dfir
• forensics

Volatility plugin for extracts configuration data of known malware

• malware
• volatility
• forensics
• python

A Windows Batch script and a Unix Bash script to comprehensively collect host forensic data during incident response.

• cybersecurity
• incident-response
• sysinternals
• nirsoft