Repository Index

Hunt down social media accounts by username across social networks

• osint
• reconnaissance
• linux
• cli

MVT (Mobile Verification Toolkit) helps with conducting forensics of mobile devices in order to find signs of a potential compromise.

• forensics
• mobile
• security
• android

This repo hosts Prowler OSS (CLI and Local Server). Prowler is the world’s most widely used open-source cloud security platform that automates security and compliance across any cloud environment for Humans and AI Agents.

• security
• security-tools
• security-audit
• security-hardening

GRR Rapid Response: remote live forensics for incident response

Volatility 3.0 development

• digital-investigation
• forensics
• incident-response
• malware

Collaborative forensic timeline analysis

• forensics
• dfir
• security
• timeline

Super timeline all the things

• forensics
• parsing
• timeline

📱 Andriller - is software utility with a collection of forensic tools for smartphones. It performs read-only, forensically sound, non-destructive acquisition from Android devices.

• forensics
• python
• android

Browser forensics tool for Google Chrome, other Chromium-based browsers, and Mozilla Firefox

• google-chrome
• hindsight
• chrome
• forensics

ThePhish: an automated phishing email analysis tool

• email
• detection
• malware
• phishing

Digital Forensics artifact repository

Dissect is a digital forensics & incident response framework and toolset that allows you to quickly access and analyse forensic artefacts from various disk and file formats, developed by Fox-IT (part of NCC Group).

• dfir
• dissect
• python

Zero Breach — local, read-only scanner that checks a computer for indicators of the AdFection / Candiru ad-delivered spyware campaign. No network, no admin, no dependencies.

• digital-security
• forensics
• incident-response
• ioc

macOS (& ios) Artifact Parsing Tool

• dfir
• forensics
• macos

A standalone SIGMA-based detection tool for EVTX, Auditd and Sysmon for Linux logs

• sigma
• python3
• evtx
• sigma-rules

:no_entry: (DEPRECATED) Diffy is a triage tool used during cloud-centric security incidents, to help digital forensics and incident response (DFIR) teams quickly identify suspicious hosts on which to focus their response.

• security
• dfir
• forensics

Simplifying encrypted traffic analysis for researchers by making protocol decryption effortless.

• frida
• ssl
• security
• hooking

DFIRTrack - The Incident Response Tracking Application

• incident-response
• digital-forensics
• dfir
• incident-response-tooling

Volatility plugin for extracts configuration data of known malware

• malware
• volatility
• forensics
• python

Open Source SIEM (Security Information and Event Management system).

• siem
• risk-management
• risk-assessment
• vulnerability-management

CLI utility and Python module for analyzing log files and other data.

• log-analysis
• log-parser
• cli
• security

Digital Forensics Artifacts Knowledge Base

A short and small memory forensics helper.

• python
• volatility
• memory-forensics

MCP server that channels JVM forensics into structured leak verdicts — for Claude Code.