hindsight
Web browser forensics for Google Chrome/Chromium (by obsidianforensics)
Logstash
Logstash - transport and process your logs, events, or other data (by elastic)
Our great sponsors
| hindsight | Logstash | |
|---|---|---|
| 8 | 5 | |
| 1,014 | 13,999 | |
| - | 0.6% | |
| 5.3 | 9.6 | |
| about 1 month ago | 7 days ago | |
| Python | Java | |
| Apache License 2.0 | GNU General Public License v3.0 or later |
The number of mentions indicates the total number of mentions that we've tracked plus the number of user suggested alternatives.
Stars - the number of stars that a project has on GitHub. Growth - month over month growth in stars.
Activity is a relative number indicating how actively a project is being developed. Recent commits have higher weight than older ones.
For example, an activity of 9.0 indicates that a project is amongst the top 10% of the most actively developed projects that we are tracking.
Stars - the number of stars that a project has on GitHub. Growth - month over month growth in stars.
Activity is a relative number indicating how actively a project is being developed. Recent commits have higher weight than older ones.
For example, an activity of 9.0 indicates that a project is amongst the top 10% of the most actively developed projects that we are tracking.
hindsight
Posts with mentions or reviews of hindsight.
We have used some of these posts to build our list of alternatives
and similar projects. The last one was on 2021-01-18.
-
Saving cached telegram messages from Edge
I guess it would work like any Chromium cache so first make a backup of your data %AppData%\Local\Microsoft\Edge\User Data\Default\ and use https://github.com/obsidianforensics/hindsight Telegram is encrypted so I don't know how this is going to be readable.
- Browser Login Data Dates Earlier than Laptop Date
- Lost/Erased Monsters in Vault Recovered - Chrome - GiffyGlyph's Monster Maker
-
QQT Browser History in CS for Detections at LEAST !?!? WIP ;)
Invoke-WebRequest -Uri "https://github.com/obsidianforensics/hindsight/releases/download/v2021.12/hindsight.exe" -OutFile "C:\windows\Temp\ftech_temp\hindsight.exe"
-
Forensic Tools for Browser Data
Try hindsight https://github.com/obsidianforensics/hindsight. If it fails due to the file being damaged try sqlitebrowser https://sqlitebrowser.org/dl/. If all else fails strings it!
- Forensic script ideas?
-
Evidence/ artifact for clearing chrome history?
There is a tool called Hightsight which used to pull this data out. Article about using it here. Although the emphasis is on used to pull this out. I haven't used that technique in years and I suspect it might not work on modern Chrome.
-
Help reading Chrome History file from 2010
Hindsight (https://github.com/obsidianforensics/hindsight) should be able to parse every version of Chrome, including the early ones (2009/2010).
Logstash
Posts with mentions or reviews of Logstash.
We have used some of these posts to build our list of alternatives
and similar projects. The last one was on 2023-01-04.
-
Simple way to centralize my server logs?
There are probably too many to chose from. Logstash, Promtail, Vector, Filebeat, FluentD, Logagent and probably many more
-
Help with parsing log in logstash into uniqe lines
https://github.com/elastic/logstash/issues/1650 See if this works.
-
Looking for open source projects that use data pipelines and big data flows
Is logstash the kind of project you are looking for? https://github.com/elastic/logstash
-
Top Observability tools for DevOps Engineers and SREs
Logstash is completely free and the source code is available freely on GitHub.
-
Disable Console Output in Logstash 7.10
What log level are you set to in logstash.yml? The default log level is "info" which is pretty chatty. I set mine to "error". See https://github.com/elastic/logstash/blob/master/config/logstash.yml#L248.
What are some alternatives?
When comparing hindsight and Logstash you can also consider the following projects:
timesketch - Collaborative forensic timeline analysis
Logback - The reliable, generic, fast and flexible logging framework for Java.
Sending your docker logs - Sending logs from docker containers to Logit.io
Apache Log4j 2 - Apache Log4j 2 is a versatile, feature-rich, efficient logging API and backend for Java.
RELY - RELY (Name composed on project members Romy, Esther, Lucille and Yassir) is a python tool developed to help a Digital Forensics Triage procedure on some Microsoft Windows devices.
nifi - Apache NiFi
chrome_password_grabber - Get unencrypted 'Saved Password' from Google Chrome
graylog - Free and open log management
woanware.github.io
Flume - Mirror of Apache Flume
Logbook - An extensible Java library for HTTP request and response logging
SLF4J - Simple Logging Facade for Java