iOSForensic is a Python tool for forensic analysis on iOS devices, extracting files, logs, SQLite3 databases, and .plist files into XML.
#forensic-analysis tools
63 results · page 2
A set of scripts for collecting forensic data from Windows and Unix systems respecting the order of volatility.
Automated collection tool for incident response triage in Windows systems.
A library to access the Extensible Storage Engine (ESE) Database File (EDB) format used in various Windows applications.
A library to access and parse Windows XML Event Log (EVTX) format, useful for digital forensics and incident response.
A library to access the Expert Witness Compression Format (EWF) for digital forensics and incident response.
A library and set of tools for accessing and analyzing storage media devices and partitions for forensic analysis and investigation.
LiME is a Linux Memory Extractor tool for acquiring volatile memory from Linux and Linux-based devices, including Android, with features like full memory captures and minimal process footpr…
An Android-based self-defense application against forensic imaging tools like Cellebrite UFED.
Magnet ACQUIRE offers robust data extraction capabilities for digital forensics investigations, supporting a wide range of devices.
A static analysis framework for extracting key characteristics from various file formats
Multi-modal content analysis platform utilizing machine learning for detecting AI-generated or manipulated media, featuring forensic analysis tools and automated reporting.
Tool used for dumping memory from Android devices with root access requirement and forensic soundness considerations.
A tool for parsing and extracting information from the Master File Table of NTFS file systems.
MFT and USN parser for direct extraction in filesystem timeline format with YARA rule support.
Custom built application for asynchronous forensic data presentation on an Elasticsearch backend, with upcoming features like Docker-based installation and new UI rewrite in React.
A suite of console tools for working with timestamps in Windows with 100-nanosecond precision.
An image with commonly used tools for creating a pentest environment easily and quickly, with detailed instructions for launching in a VPS.
OpenRASP directly integrates its protection engine into the application server by instrumentation, providing context-aware protection and detailed stack trace logging.
Orochi is a collaborative forensic memory dump analysis framework.
High-performance remote packet capture and collection tool used for forensic analysis in cloud workloads.
Collects and organizes Linux OS data for detailed analysis and incident response.
A Python-based engine for automatic creation of timelines in digital forensic analysis
PowerForensics is a PowerShell digital forensics framework for hard drive forensic analysis.
Load more tools
Showing 48 of 63