1.mvt-project / mvt
MVT (Mobile Verification Toolkit) helps with conducting forensics of mobile devices in order to find signs of a potential compromise.
+128 stars
from 15,631 · score 4.86
Trending repositories
Ranked by Attention Score: stars gained over the last 7 complete days
12 repositories by Attention Score · Oct 30, 2026 – Nov 5, 2026 (UTC)
2.Velocidex / velociraptor
Digging Deeper....
- incident-response
- forensics-investigations
- inventory-management
- endpoint-security
- endpoint-protection
- endpoint-discovery
- +1 more
+27 stars
from 4,391 · score 3.33
3.volatilityfoundation / volatility3
Volatility 3.0 development
- digital-investigation
- forensics
- incident-response
- malware
- memory
- python
- +3 more
+22 stars
from 4,549 · score 3.14
4.USArmyResearchLab / Dshell
Dshell is a network forensic analysis framework.
+6 stars
from 5,502 · score 1.95
5.rabbitstack / fibratus
Security sensor for realtime threat detection and protection
+6 stars
from 2,561 · score 1.95
6.simsong / bulk_extractor
This is the development tree. Production downloads are at:
+5 stars
from 1,437 · score 1.79
7.last-byte / PersistenceSniper
Powershell module that can be used by Blue Teams, Incident Responders and System Administrators to hunt persistences implanted in Windows machines. Official Twitter/X account @PersistSniper. Made with ❤️ by @last0x00 and @dottor_morte
- incident-response
- malware-detection
- persistence
- powershell
- powershell-module
- powershell-script
- +3 more
+4 stars
from 2,148 · score 1.61
8.wagga40 / Zircolite
A standalone SIGMA-based detection tool for EVTX, Auditd and Sysmon for Linux logs
- sigma
- python3
- evtx
- sigma-rules
- detection
- auditd
- +9 more
+3 stars
from 870 · score 1.39
9.JPCERTCC / LogonTracer
Investigate malicious Windows logon by visualizing and analyzing Windows event log
- security
- dfir
- javascript
- visualization
- active-directory
- event-log
- +2 more
+2 stars
from 3,298 · score 1.10
10.jipegit / OSXAuditor
OS X Auditor is a free Mac OS X computer forensics tool
+1 stars
from 3,127 · score 0.69
11.gamelinux / passivedns
A network sniffer that logs all DNS server replies for use in a passive DNS setup
+1 stars
from 1,736 · score 0.69
+1 stars
from 724 · score 0.69