179 Open source projects that are alternatives of or similar to pyaff4

A list of free and open forensics analysis tools and other resources

TCP/IP packet demultiplexer. Download from:

Educational, CTF-styled labs for individuals interested in Memory Forensics

Carve file metadata from NTFS index ($I30) attributes

An AFF4 C++ implementation.

Enhanced version of dd for forensics and security

Recover files from damaged BTRFS filesystems

A collection of tools for forensic analysis

No description or website provided.

Rootkit Detector for UNIX

Tools for inspecting disk images

Awesome list of digital forensic tools

A curated list of awesome forensic analysis tools and resources

Everything related to Linux Forensics

A file system forensics analysis scanner and threat hunting tool. Scans file systems at the MFT and OS level and stores data in SQL, SQLite or CSV. Threats and data can be probed harnessing the power and syntax of SQL.

Minimalistic DNS logging tool

PowerShell module for Office 365 and Azure log collection

LIFARS Networking Security GNU/Linux distro

[WIP] Anti-Forensics ToolKit to clear post-intrusion sensible logfiles 🔥 (For Research Only)

Android process memory dump tool without ndk.

Code for the DIMVA 2018 paper: "MemScrimper: Time- and Space-Efficient Storage of Malware Sandbox Memory Dumps"

Tools to browse disk images and file system metadata in a web service

Hayabusa (隼) is a sigma-based threat hunting and fast forensics timeline generator for Windows event logs.

Provides various Windows Server Active Directory (AD) security-focused reports.

VFRAME: Visual Forensics and Metadata Extraction

This toolkit aims to help forensicators perform different kinds of acquisitions on iOS devices

#ThreatHunting #DFIR #Malware #Detection Mind Maps

Trace ScriptBlock execution for powershell v2

Scripts to process macOS forensic artifacts

SQBrite is a data recovery tool for SQLite databases

This is a GUI (for Windows 64 bit) for a procedure to virtualize your EWF(E01), DD (raw), AFF disk image file without converting it, directly with VirtualBox, forensically proof.

ThePhish: an automated phishing email analysis tool

WELA (Windows Event Log Analyzer): The Swiss Army knife for Windows Event Logs! ゑ羅（ウェラ）

The entire walkthrough of all my resolved TryHackMe rooms

Analyze and help extract older "hidden" versions of a pdf from the current pdf.

Information Security Library

Sandfly Security Agentless Compromise and Intrusion Detection System For Linux

U-Net for fingerprint denoising

Examine, create and interact with remote objects in other .NET processes.

Python based tool to extract forensic info from EventTranscript.db (Windows Diagnostic Data)

Tool to sort large collections of files according to common typologies

Python 3 Script to parse out iTunes backups

Forensics triage tool relying on Volatility and Foremost

Robot Hacking Manual (RHM). From robotics to cybersecurity. Papers, notes and writeups from a journey into robot cybersecurity.

An Incident Response tool to extract console command history and screen output buffer

Ingestors extract the contents of mixed unstructured documents into structured (followthemoney) data.

Forensic Analysis Tool for Btrfs File System.

📝 urlRecon - Info Gathering or Recon tool for Urls -> Retrieves * Whois information of the domain * DNS Details of the domain * Server Fingerprint * IP geolocation of the server

The Red Rabbit project is just what a hacker needs for everyday automation. Red Rabbit unlike most frameworks out there does not automate other peoples tools like the aircrack suite or the wifite framework, it rather has its own code and is raw source with over 270+ options. This framework might just be your everyday key to your workflow

My solutions to the 2020 NSA Codebreaker Challenge

RdpCacheStitcher is a tool that supports forensic analysts in reconstructing useful images out of RDP cache bitmaps.

Paragon APFS SDK Free

UAC is a Live Response collection script for Incident Response that makes use of native binaries and tools to automate the collection of AIX, Android, ESXi, FreeBSD, Linux, macOS, NetBSD, NetScaler, OpenBSD and Solaris systems artifacts.

Recover files using lists of blocks hashes, bypassing the File System entirely

System Management RAM analysis tool

MemProcFS-Analyzer - Automated Forensic Analysis of Windows Memory Dumps for DFIR

The scalable, auditable and high-performance tamper-evident log project

No description or website provided.

CoRA Docs

No description or website provided.