Forensics

Tools that look for traces of a compromise and preserve evidence

1–82 of 82

ImpactToolCategoryStarsUpdated

Local onlyCyberChefgchq/cyberchefA web app for converting and analyzing data by chaining operations such as Base64 and hex decoding, hashing, and text extraction into a "recipe". Processing happens in your browser.Cryptography and passwords / Forensics36,2032026-10-23 Local onlyWazuhwazuh/wazuhA free security platform (SIEM/XDR) that collects logs, configuration, and vulnerability data from agents on your endpoints and shows it all in one dashboard.Vulnerability scanning / Forensics17,4102026-10-24 Reaches othersWiresharkwireshark/wiresharkA packet analyzer that records network traffic and breaks each packet down by protocol so you can read it.Network / Forensics10,0822026-10-25 Not ratedgoaccessallinurl/goaccessReview coming soon (opens GitHub in a new tab)Forensics / Network21,0772026-10-21 Not ratedmvtmvt-project/mvtReview coming soon (opens GitHub in a new tab)Forensics / Mobile security15,5082026-10-20 Not ratedhackbrowserdatamoond4rk/hackbrowserdataReview coming soon (opens GitHub in a new tab)Forensics / Reconnaissance14,6322026-10-22 Not ratedsysdigdraios/sysdigReview coming soon (opens GitHub in a new tab)Containers and cloud / Forensics8,3062026-04-13 Not ratedvolatilityvolatilityfoundation/volatilityReview coming soon (opens GitHub in a new tab)Forensics8,0532025-05-16 Not ratedpcileechufrisk/pcileechReview coming soon (opens GitHub in a new tab)Forensics / Hardware and wireless7,9592026-10-05 Not ratedusbkillhephaest0s/usbkillReview coming soon (opens GitHub in a new tab)Forensics4,6752024-03-01 Not ratedvolatility3volatilityfoundation/volatility3Review coming soon (opens GitHub in a new tab)Forensics4,5302026-10-12 Not ratedchainsawwithsecureopensource/chainsawReview coming soon (opens GitHub in a new tab)Forensics / Incident response3,6982026-10-14 Not ratedtimesketchgoogle/timesketchReview coming soon (opens GitHub in a new tab)Forensics3,4422026-10-23 Not ratedhayabusayamato-security/hayabusaReview coming soon (opens GitHub in a new tab)Incident response / Forensics3,4142026-10-24 Not ratedautopsysleuthkit/autopsyReview coming soon (opens GitHub in a new tab)Forensics3,4102026-06-20 Not ratedlogontracerjpcertcc/logontracerReview coming soon (opens GitHub in a new tab)Forensics / Exploits and PoCs3,2942026-08-02 Not ratedsherloqguidobartoli/sherloqReview coming soon (opens GitHub in a new tab)Forensics3,2332026-07-16 Not ratedsleuthkitsleuthkit/sleuthkitReview coming soon (opens GitHub in a new tab)Forensics3,1712026-10-20 Not ratedosxauditorjipegit/osxauditorReview coming soon (opens GitHub in a new tab)Forensics3,1302020-07-27 Not ratedipedsepinf-inc/ipedReview coming soon (opens GitHub in a new tab)Forensics3,0642026-10-23 Not ratedtestdiskcgsecurity/testdiskReview coming soon (opens GitHub in a new tab)Forensics2,6432026-10-04 Not ratedevtx-attack-samplessbousseaden/evtx-attack-samplesReview coming soon (opens GitHub in a new tab)Forensics / Incident response2,6402023-01-24 Not ratedandroid-backup-extractornelenkov/android-backup-extractorReview coming soon (opens GitHub in a new tab)Forensics / Mobile security2,6052026-10-20 Not rateddeepblueclisans-blue-team/deepbluecliReview coming soon (opens GitHub in a new tab)Forensics / Incident response2,4422023-10-14 Not ratedcyberchef-recipesmattnotmax/cyberchef-recipesReview coming soon (opens GitHub in a new tab)Learning and practice labs / Forensics2,2242024-06-14 Not ratedplasolog2timeline/plasoReview coming soon (opens GitHub in a new tab)Forensics2,1802026-10-24 Not ratedapfs-fusesgan81/apfs-fuseReview coming soon (opens GitHub in a new tab)Forensics2,1642024-08-13 Not ratedrekallgoogle/rekallReview coming soon (opens GitHub in a new tab)Forensics2,0062020-10-18 Not ratedlogparserlogpai/logparserReview coming soon (opens GitHub in a new tab)Forensics1,9952025-06-10 Not ratedmemlabsstuxnet999/memlabsReview coming soon (opens GitHub in a new tab)Learning and practice labs / Forensics1,9272021-03-08 Not ratedrecoverpypablolec/recoverpyReview coming soon (opens GitHub in a new tab)Forensics1,7932026-08-03 Not ratedsof-elkphilhagen/sof-elkReview coming soon (opens GitHub in a new tab)Forensics / Incident response1,7602026-09-15 Not ratedwhapab16f00t/whapaReview coming soon (opens GitHub in a new tab)Forensics1,6932026-08-02 Not ratedandrillerden4uk/andrillerReview coming soon (opens GitHub in a new tab)Forensics1,6202022-06-27 Not ratedinceptioncarmaa/inceptionReview coming soon (opens GitHub in a new tab)Hardware and wireless / Forensics1,6062025-06-13 Not ratedhindsightryandfir/hindsightReview coming soon (opens GitHub in a new tab)Forensics1,5462026-10-21 Not ratedheapdump_toolwyzxxz/heapdump_toolReview coming soon (opens GitHub in a new tab)Reconnaissance / Forensics1,4582024-05-21 Not ratedpowerforensicsinvoke-ir/powerforensicsReview coming soon (opens GitHub in a new tab)Forensics1,4452023-11-16 Not ratedileappabrignoni/ileappReview coming soon (opens GitHub in a new tab)Forensics / Mobile security1,4072026-10-24 Not ratedwindows-event-forwardingpalantir/windows-event-forwardingReview coming soon (opens GitHub in a new tab)Forensics / Incident response1,3452026-10-02 Not ratedparsedmarcdomainaware/parsedmarcReview coming soon (opens GitHub in a new tab)Forensics1,3082026-10-22 Not ratedartifactsforensicartifacts/artifactsReview coming soon (opens GitHub in a new tab)Forensics1,2842026-10-23 Not ratedwa-crypt-toolseldavoo/wa-crypt-toolsReview coming soon (opens GitHub in a new tab)Forensics1,1962026-10-23 Not ratedusbripsnovvcrash/usbripReview coming soon (opens GitHub in a new tab)Forensics1,1842022-10-03 Not rateddissectfox-it/dissectReview coming soon (opens GitHub in a new tab)Forensics1,1762026-10-22 Not ratedavmlmicrosoft/avmlReview coming soon (opens GitHub in a new tab)Forensics1,1272026-10-23 Not ratedmac_aptydkhatri/mac_aptReview coming soon (opens GitHub in a new tab)Forensics1,0952026-10-18 Not ratedwinpmemvelocidex/winpmemReview coming soon (opens GitHub in a new tab)Forensics1,0662026-10-21 Not ratedksdumperequifox/ksdumperReview coming soon (opens GitHub in a new tab)Forensics1,0612023-11-06 Not ratedaleappabrignoni/aleappReview coming soon (opens GitHub in a new tab)Forensics / Mobile security1,0172026-10-24 Not ratedwhatsapp-media-decryptddz/whatsapp-media-decryptReview coming soon (opens GitHub in a new tab)Forensics1,0072020-10-02 Not ratedikykennbroorg/ikyReview coming soon (opens GitHub in a new tab)Reconnaissance / Forensics9882026-10-10 Not ratedevtxomerbenamram/evtxReview coming soon (opens GitHub in a new tab)Forensics9672026-10-22 Not ratedevent-forwarding-guidancensacyber/event-forwarding-guidanceReview coming soon (opens GitHub in a new tab)Forensics / Incident response8932020-11-17 Not ratedzircolitewagga40/zircoliteReview coming soon (opens GitHub in a new tab)Incident response / Forensics / Defense and hardening8682026-10-20 Not ratedpython-evtxwilliballenthin/python-evtxReview coming soon (opens GitHub in a new tab)Forensics7852026-10-06 Not ratedenablewindowslogsettingsyamato-security/enablewindowslogsettingsReview coming soon (opens GitHub in a new tab)Forensics / Incident response / Defense and hardening7232025-10-03 Not ratedevtx-to-mitre-attackmdecrevoisier/evtx-to-mitre-attackReview coming soon (opens GitHub in a new tab)Forensics / Incident response6442026-05-21 Not ratedmalconfscanjpcertcc/malconfscanReview coming soon (opens GitHub in a new tab)Forensics4982023-12-22 Not ratedsymbolic-executionenzet/symbolic-executionReview coming soon (opens GitHub in a new tab)Forensics / AppSec and DevSecOps4972024-08-24 Not ratedirflow-timeliner3nzsec/irflow-timelineReview coming soon (opens GitHub in a new tab)Forensics / Red teaming and C2 / AppSec and DevSecOps3812026-09-08 Not ratedcommunityvolatilityfoundation/communityReview coming soon (opens GitHub in a new tab)Forensics3782021-04-05 Not ratedevtxericzimmerman/evtxReview coming soon (opens GitHub in a new tab)Forensics3772026-10-23 Not ratedcyberpipedwmetz/cyberpipeReview coming soon (opens GitHub in a new tab)Forensics3482025-12-03 Not ratedprofilesvolatilityfoundation/profilesReview coming soon (opens GitHub in a new tab)Forensics3292022-10-30 Not ratedinvtero.netshanek2/invtero.netReview coming soon (opens GitHub in a new tab)Forensics2962023-09-30 Not ratedorochildo-cert/orochiReview coming soon (opens GitHub in a new tab)Forensics2792026-10-23 Not ratedevolvejameshabben/evolveReview coming soon (opens GitHub in a new tab)Forensics2582017-11-21 Not ratedepagneuljurelou/epagneulReview coming soon (opens GitHub in a new tab)Forensics / Incident response2532025-01-15 Not ratedlibevtxlibyal/libevtxReview coming soon (opens GitHub in a new tab)Forensics2432026-10-09 Not ratedhayabusa-rulesyamato-security/hayabusa-rulesReview coming soon (opens GitHub in a new tab)Incident response / Forensics2292026-10-21 Not ratedmemtriagegleeda/memtriageReview coming soon (opens GitHub in a new tab)Forensics2192020-07-17 Not ratedevtxtractwilliballenthin/evtxtractReview coming soon (opens GitHub in a new tab)Forensics2132025-03-12 Not ratedmeshbarghest-ngo/meshReview coming soon (opens GitHub in a new tab)Forensics2102026-10-22 Not ratedmquiretrailofbits/mquireReview coming soon (opens GitHub in a new tab)Forensics1912026-10-22 Not rateddfir_resources_revil_kaseyacado-security/dfir_resources_revil_kaseyaReview coming soon (opens GitHub in a new tab)Incident response / Forensics1852021-07-06 Not ratedtakajoyamato-security/takajoReview coming soon (opens GitHub in a new tab)Forensics1662026-10-15 Not ratedlimeaidekd8bny/limeaideReview coming soon (opens GitHub in a new tab)Forensics1572020-08-26 Not ratedhollowfindmonnappa22/hollowfindReview coming soon (opens GitHub in a new tab)Malware analysis / Reverse engineering / Forensics1422022-09-29 Not ratedautotimelinerandreafortuna/autotimelinerReview coming soon (opens GitHub in a new tab)Forensics1332026-03-05 Not ratedautovolatilitycarlospolop/autovolatilityReview coming soon (opens GitHub in a new tab)Forensics1202026-10-22 Not ratedcrow-eyeghassan-elsman/crow-eyeReview coming soon (opens GitHub in a new tab)Forensics1152026-10-10