Ranked by Attention Score: stars gained over the last 30 complete days
14 repositories by Attention Score · Oct 6, 2026 – Nov 4, 2026 (UTC)
Decrypt and export passwords, cookies, history and more from 20 browsers on Windows, macOS and Linux. For authorized security research, incident response and DFIR.
Zero-overhead eBPF process tracer for Linux malware triage and incident response. Traces syscalls, network, and file events per-process without strace overhead.
📱 Andriller - is software utility with a collection of forensic tools for smartphones. It performs read-only, forensically sound, non-destructive acquisition from Android devices.
macOS (& ios) Artifact Parsing Tool
$MFT directory tree reconstruction & FILE record info
We took PersistenceSniper, merged it with Python, and misspelled it on purpose. Meet PyrsistenceSniper.
Open Source SIEM (Security Information and Event Management system).
PowerForensics provides an all in one platform for live disk forensic analysis
The Volatility Collaborative GUI
🧭 The artifactcollector is a customizable agent to collect forensic artifacts on any Windows, macOS or Linux system
Invoke-LiveResponse
Tool used for dumping memory from Android devices