A high-speed forensic timeline engine for Windows forensic artifact CSV output built for DFIR investigators. Quickly consolidate CSV output from processed triage evidence for Eric Zimmerman (EZ Tools) Kape, Axiom, Hayabusa, Chainsaw and Nirsoft into a unified timeline.
Digital forensic analysis tool that provides a user-friendly interface for investigating disk images.
Digital Forensics Essentials (DFE)
Forensic Linux VM for Apple Silicon, ARM64 and x86-64 compatible platforms
Python tool to quickly extract embedded JPEG images from pcap files. Perfect for image extraction, data recovery, and digital forensics with reliable error handling..
PEInsight is a fast and efficient command-line tool for parsing Windows Portable Executable (PE) files, written in C.
Masstin: High-Speed DFIR Tool written in Rust and Graph Visualization in Neo4j for Comprehensive Lateral Movement Analysis
Android RAM Parser
Browser-based Mac Model Finder — A forensic reference tool for identifying Apple computer device models, T2 and Apple Silicon systems, and acquisition workflows. Created by Junaid Abid for demonstration and educational purposes.
SUDARSHAN is a simple, interactive digital forensics framework that helps investigators analyze data, recover evidence, and generate reports — all from one easy-to-use script.
Tools to decrypt files from the apk Vault - Hide Pics, App Lock
Cross-platform Forensic Imaging Tool
Actively removes unwanted files as they're created, plus reorganizes the kept files into a type-based folder structure.
This tool is designed to scan log files for various security events and present the findings in an easy-to-read table format directly in your terminal. It includes features for custom pattern detection and provides recommended remedies for detected issues.
Artifact acquisition and the analysis of REGISTRY hives
A GUI based Hacking Toolkit with multipurpose usecases such as finding hash of text or file, Text to Hex, Hex to Text Conversion Encryption and much more
ProcMon Visualizer
Add a description, image, and links to the digital-forensic-tool topic page so that developers can more easily learn about it.
To associate your repository with the digital-forensic-tool topic, visit your repo's landing page and select "manage topics."