A library to access and parse Windows XML Event Log (EVTX) format, useful for digital forensics and incident response.
#digital-forensics tools
87 results · page 3
A library to access the Expert Witness Compression Format (EWF) for digital forensics and incident response.
A library and set of tools for accessing and analyzing storage media devices and partitions for forensic analysis and investigation.
A library and tools to access and manipulate VMware Virtual Disk (VMDK) files.
Python tool for remotely or locally dumping RAM of a Linux client for digital forensics analysis.
Dump the contents of the location database files on iOS and macOS with output options like KML and CSV.
A collection of Mac OS X and iOS forensics resources with a focus on artifact collection and collaboration.
mac_apt is a versatile DFIR tool for processing Mac and iOS images, offering extensive artifact extraction capabilities and cross-platform support.
Magnet ACQUIRE offers robust data extraction capabilities for digital forensics investigations, supporting a wide range of devices.
A comprehensive Linux log analysis tool that streamlines the investigation of security incidents by extracting and organizing critical details from supported log files.
A tool for parsing and extracting information from the Master File Table of NTFS file systems.
A forensic research tool for gathering forensic traces on Android and iOS devices, supporting the use of public indicators of compromise.
Blazingly fast Yara queries for malware analysts with an analyst-friendly web GUI.
A tool to remove malicious artifacts from Microsoft Office documents, preventing malware infections and data breaches.
Digital investigation tool for extracting forensic data from computers and managing investigations.
A Python-based engine for automatic creation of timelines in digital forensic analysis
PowerForensics is a PowerShell digital forensics framework for hard drive forensic analysis.
A practical guide to enhancing digital investigations with cutting-edge memory forensics techniques, covering fundamental concepts, tools, and techniques for memory forensics.
Open source Python library for NTFS analysis
A cybersecurity tool for collecting and analyzing forensic artifacts on live systems.
Automated tool for parsing Windows registry hives and extracting valuable information for forensic analysis.
Tool for analyzing Windows Recycle Bin INFO2 file
Real-time capture the flag (CTF) scoring engine for computer wargames with a fun game-like environment for learning cybersecurity skills.
A free, open source collection of tools for forensic artifact and image analysis.
Load more tools
Showing 72 of 87