1.mvt-project / mvt
MVT (Mobile Verification Toolkit) helps with conducting forensics of mobile devices in order to find signs of a potential compromise.
+519 stars
from 15,203 · score 6.25
Trending repositories
Ranked by Attention Score: stars gained over the last 30 complete days
13 repositories by Attention Score · Oct 5, 2026 – Nov 3, 2026 (UTC)
2.volatilityfoundation / volatility3
Volatility 3.0 development
- digital-investigation
- forensics
- incident-response
- malware
- memory
- python
- +3 more
+114 stars
from 4,452 · score 4.74
3.google / grr
GRR Rapid Response: remote live forensics for incident response
+24 stars
from 5,087 · score 3.22
4.RyanDFIR / hindsight
Browser forensics tool for Google Chrome, other Chromium-based browsers, and Mozilla Firefox
+23 stars
from 1,529 · score 3.18
5.google / timesketch
Collaborative forensic timeline analysis
+21 stars
from 3,427 · score 3.09
6.JPCERTCC / LogonTracer
Investigate malicious Windows logon by visualizing and analyzing Windows event log
- security
- dfir
- javascript
- visualization
- active-directory
- event-log
- +2 more
+20 stars
from 3,279 · score 3.04
7.log2timeline / plaso
Super timeline all the things
+18 stars
from 2,167 · score 2.94
8.den4uk / andriller
📱 Andriller - is software utility with a collection of forensic tools for smartphones. It performs read-only, forensically sound, non-destructive acquisition from Android devices.
+13 stars
from 1,616 · score 2.64
9.emalderson / ThePhish
ThePhish: an automated phishing email analysis tool
- detection
- malware
- phishing
- cybersecurity
- misp
- +14 more
+11 stars
from 1,371 · score 2.48
10.USArmyResearchLab / Dshell
Dshell is a network forensic analysis framework.
+10 stars
from 5,495 · score 2.40
11.ahmedkhlief / APT-Hunter
APT-Hunter is Threat Hunting tool for windows event logs which made by purple team mindset to provide detect APT movements hidden in the sea of windows event logs to decrease the time to uncover suspicious activity
- threat-hunting
- purpleteam
- python3
- windows-eventlog
- apt-attacks
- incident-response
- +2 more
+6 stars
from 1,426 · score 1.95
12.volatilityfoundation / volatilityArchived
An advanced memory forensics framework
- python
- malware
- volatility-framework
- memory
- ram
+3 stars
from 8,052 · score 1.39
+1 stars
from 2,006 · score 0.69