1.interplains / zero-breach
Zero Breach — local, read-only scanner that checks a computer for indicators of the AdFection / Candiru ad-delivered spyware campaign. No network, no admin, no dependencies.
Ranked by Attention Score: stars gained over the last 7 complete days
14 repositories by Attention Score · Oct 27, 2026 – Nov 2, 2026 (UTC)
Zero Breach — local, read-only scanner that checks a computer for indicators of the AdFection / Candiru ad-delivered spyware campaign. No network, no admin, no dependencies.
Hunt down social media accounts by username across social networks
MVT (Mobile Verification Toolkit) helps with conducting forensics of mobile devices in order to find signs of a potential compromise.
This repo hosts Prowler OSS (CLI and Local Server). Prowler is the world’s most widely used open-source cloud security platform that automates security and compliance across any cloud environment for Humans and AI Agents.
Volatility 3.0 development
📱 Andriller - is software utility with a collection of forensic tools for smartphones. It performs read-only, forensically sound, non-destructive acquisition from Android devices.
Collaborative forensic timeline analysis
Super timeline all the things
Browser forensics tool for Google Chrome, other Chromium-based browsers, and Mozilla Firefox
macOS (& ios) Artifact Parsing Tool
Open Source SIEM (Security Information and Event Management system).
Tracking history of USB events on GNU/Linux
A standalone SIGMA-based detection tool for EVTX, Auditd and Sysmon for Linux logs
CLI utility and Python module for analyzing log files and other data.