Foremost is a console program to recover files based on their headers, footers, and internal data structures. c.f., http://foremost.sourceforge.net/
Repository Index
47,133 repositories indexed
97–109 of 109 · Most stars
A short and small memory forensics helper.
- python
- volatility
- memory-forensics
Zero-overhead eBPF process tracer for Linux malware triage and incident response. Traces syscalls, network, and file events per-process without strace overhead.
Based on the Volatility framework, this script will run various plugins as well as create a timeline, or use YARA/ClamAV/VirusTotal to find badness.
Forensic tool for acquisition, triage and analysis of remote block devices via iSCSI protocol.
- acquisition
- cybersecurity
- forensics
- iscsi
Fast incident overview
Parses Java Cache IDX files
PowerSponse is a PowerShell module focused on targeted containment and remediation during incident response.
- powershell
- powershell-modules
- incident-response
- containment
A tool designed for consistent and safe capture of off network web resources.
- network-defense
- security-tools
🕵️♀️ Find, locate, and query files for ops and security experts ⚡️⚡️⚡️
A tool to extract local data storage of an Android application in one click.
- android-extract
- android
- storage
- security-tools
The repository host gives no description.
Advanced eBPF-driven Digital Forensics and Incident Response (DFIR) framework for live Golang malware analysis, threat hunting, and observability.