1.sherlock-project / sherlock
Hunt down social media accounts by username across social networks
+13,319 stars
from 82,068 · score 9.50
Trending repositories
Ranked by Attention Score: stars gained over the last 180 complete days
14 repositories by Attention Score · May 7, 2026 – Nov 2, 2026 (UTC)
2.mvt-project / mvt
MVT (Mobile Verification Toolkit) helps with conducting forensics of mobile devices in order to find signs of a potential compromise.
+3,384 stars
from 12,291 · score 8.13
3.prowler-cloud / prowler
This repo hosts Prowler OSS (CLI and Local Server). Prowler is the world’s most widely used open-source cloud security platform that automates security and compliance across any cloud environment for Humans and AI Agents.
+1,506 stars
from 13,644 · score 7.32
4.volatilityfoundation / volatility3
Volatility 3.0 development
+490 stars
from 4,069 · score 6.20
5.google / timesketch
Collaborative forensic timeline analysis
+145 stars
from 3,303 · score 4.98
6.RyanDFIR / hindsight
Browser forensics tool for Google Chrome, other Chromium-based browsers, and Mozilla Firefox
+143 stars
from 1,409 · score 4.97
7.log2timeline / plaso
Super timeline all the things
+131 stars
from 2,054 · score 4.88
8.den4uk / andriller
📱 Andriller - is software utility with a collection of forensic tools for smartphones. It performs read-only, forensically sound, non-destructive acquisition from Android devices.
+84 stars
from 1,545 · score 4.44
9.wagga40 / Zircolite
A standalone SIGMA-based detection tool for EVTX, Auditd and Sysmon for Linux logs
+67 stars
from 804 · score 4.22
10.ydkhatri / mac_apt
macOS (& ios) Artifact Parsing Tool
+66 stars
from 1,032 · score 4.20
11.snovvcrash / usbripArchived
Tracking history of USB events on GNU/Linux
+10 stars
from 1,175 · score 2.40
12.dogoncouch / LogESP
Open Source SIEM (Security Information and Event Management system).
+8 stars
from 218 · score 2.20
13.google / docker-explorerArchived
A tool to help forensicate offline docker acquisitions
+3 stars
from 552 · score 1.39
14.JPCERTCC / MalConfScan
Volatility plugin for extracts configuration data of known malware
+3 stars
from 495 · score 1.39