RELY vs hindsight

RELY

RELY (Name composed on project members Romy, Esther, Lucille and Yassir) is a python tool developed to help a Digital Forensics Triage procedure on some Microsoft Windows devices. (by yassirlaaouissi)

Source Code

Suggest alternative

Edit details

hindsight

Web browser forensics for Google Chrome/Chromium (by obsidianforensics)

google-chrome hindsight Chrome Forensics Dfir

Source Code

dfir.blog

Suggest alternative

Edit details

Our great sponsors

WorkOS - The modern identity platform for B2B SaaS

InfluxDB - Power Real-Time Data Analytics at Scale

SaaSHub - Software Alternatives and Reviews

Our great sponsors

RELY		hindsight
	Project
1	Mentions	8
2	Stars	1,014
-	Growth	-
0.0	Activity	5.3
almost 3 years ago	Latest Commit	about 1 month ago
Python	Language	Python
-	License	Apache License 2.0

The number of mentions indicates the total number of mentions that we've tracked plus the number of user suggested alternatives.
Stars - the number of stars that a project has on GitHub. Growth - month over month growth in stars.
Activity is a relative number indicating how actively a project is being developed. Recent commits have higher weight than older ones.
For example, an activity of 9.0 indicates that a project is amongst the top 10% of the most actively developed projects that we are tracking.

RELY

Posts with mentions or reviews of RELY. We have used some of these posts to build our list of alternatives and similar projects. The last one was on 2021-04-05.

Made a nice OSCP enum tool
2 projects | /r/oscp | 5 Apr 2021

Thanks for the tip, I've already made a small triage tool for windows forensics as part of a school project https://github.com/yassirlaaouissi/RELY

hindsight

Posts with mentions or reviews of hindsight. We have used some of these posts to build our list of alternatives and similar projects. The last one was on 2021-01-18.

Saving cached telegram messages from Edge
1 project | /r/DataHoarder | 29 Apr 2023

I guess it would work like any Chromium cache so first make a backup of your data %AppData%\Local\Microsoft\Edge\User Data\Default\ and use https://github.com/obsidianforensics/hindsight Telegram is encrypted so I don't know how this is going to be readable.
Browser Login Data Dates Earlier than Laptop Date
1 project | /r/computerforensics | 17 Nov 2022
Lost/Erased Monsters in Vault Recovered - Chrome - GiffyGlyph's Monster Maker
1 project | /r/MonsterMaker5e | 23 Sep 2022
QQT Browser History in CS for Detections at LEAST !?!? WIP ;)
1 project | /r/crowdstrike | 29 Jul 2022

Invoke-WebRequest -Uri "https://github.com/obsidianforensics/hindsight/releases/download/v2021.12/hindsight.exe" -OutFile "C:\windows\Temp\ftech_temp\hindsight.exe"
Forensic Tools for Browser Data
1 project | /r/computerforensics | 28 Jun 2022

Try hindsight https://github.com/obsidianforensics/hindsight. If it fails due to the file being damaged try sqlitebrowser https://sqlitebrowser.org/dl/. If all else fails strings it!
Forensic script ideas?
1 project | /r/computerforensics | 21 Jan 2022
Evidence/ artifact for clearing chrome history?
1 project | /r/computerforensics | 11 May 2021

There is a tool called Hightsight which used to pull this data out. Article about using it here. Although the emphasis is on used to pull this out. I haven't used that technique in years and I suspect it might not work on modern Chrome.
Help reading Chrome History file from 2010
2 projects | /r/computerforensics | 18 Jan 2021

Hindsight (https://github.com/obsidianforensics/hindsight) should be able to parse every version of Chrome, including the early ones (2009/2010).

What are some alternatives?

When comparing RELY and hindsight you can also consider the following projects:

RecuperaBit - A tool for forensic file system reconstruction.

timesketch - Collaborative forensic timeline analysis

kobackupdec - Huawei backup decryptor

Sending your docker logs - Sending logs from docker containers to Logit.io

beagle - Beagle is an incident response and digital forensics tool which transforms security logs and data into graphs.

Logstash - Logstash - transport and process your logs, events, or other data

APT-Hunter - APT-Hunter is Threat Hunting tool for windows event logs which made by purple team mindset to provide detect APT movements hidden in the sea of windows event logs to decrease the time to uncover suspicious activity

chrome_password_grabber - Get unencrypted 'Saved Password' from Google Chrome

TheHiveDocs - Documentation of TheHive

woanware.github.io

INDXRipper - Carve file metadata from NTFS index ($I30) attributes

hashlookup-forensic-analyser - Analyse a forensic target (such as a directory) to find and report files found and not found from CIRCL hashlookup public service - https://circl.lu/services/hashlookup/