1.mvt-project / mvt
MVT (Mobile Verification Toolkit) helps with conducting forensics of mobile devices in order to find signs of a potential compromise.
+126 stars
from 15,608 · score 4.84
Trending repositories
Ranked by Attention Score: stars gained over the last 7 complete days
11 repositories by Attention Score · Oct 29, 2026 – Nov 4, 2026 (UTC)
2.Velocidex / velociraptor
Digging Deeper....
- incident-response
- forensics-investigations
- inventory-management
- endpoint-security
- endpoint-protection
- endpoint-discovery
- +1 more
+26 stars
from 4,386 · score 3.30
3.volatilityfoundation / volatility3
Volatility 3.0 development
- digital-investigation
- forensics
- incident-response
- malware
- memory
- python
- +3 more
+21 stars
from 4,547 · score 3.09
4.rabbitstack / fibratus
Security sensor for realtime threat detection and protection
+6 stars
from 2,560 · score 1.95
5.last-byte / PersistenceSniper
Powershell module that can be used by Blue Teams, Incident Responders and System Administrators to hunt persistences implanted in Windows machines. Official Twitter/X account @PersistSniper. Made with ❤️ by @last0x00 and @dottor_morte
- incident-response
- malware-detection
- persistence
- powershell
- powershell-module
- powershell-script
- +3 more
+5 stars
from 2,147 · score 1.79
6.USArmyResearchLab / Dshell
Dshell is a network forensic analysis framework.
+4 stars
from 5,501 · score 1.61
7.simsong / bulk_extractor
This is the development tree. Production downloads are at:
+4 stars
from 1,437 · score 1.61
8.JPCERTCC / LogonTracer
Investigate malicious Windows logon by visualizing and analyzing Windows event log
- security
- dfir
- javascript
- visualization
- active-directory
- event-log
- +2 more
+3 stars
from 3,297 · score 1.39
9.wagga40 / Zircolite
A standalone SIGMA-based detection tool for EVTX, Auditd and Sysmon for Linux logs
- sigma
- python3
- evtx
- sigma-rules
- detection
- auditd
- +9 more
+3 stars
from 870 · score 1.39
10.gamelinux / passivedns
A network sniffer that logs all DNS server replies for use in a passive DNS setup
+1 stars
from 1,736 · score 0.69
+1 stars
from 724 · score 0.69