Top 5 Go Forensic Projects

kubeshark

16 10,541 9.5 Go

The API traffic analyzer for Kubernetes providing real-time K8s protocol-level visibility, capturing and monitoring all traffic and payloads going in, out and across containers, pods, nodes and clusters. Inspired by Wireshark, purposely built for Kubernetes

Project mention: Show HN: Alaz: Open-Source, Self-Hosted, eBPF-Based K8s Monitoring | news.ycombinator.com | 2023-09-06

The one similar product I had come across is Kubeshark (https://github.com/kubeshark/kubeshark). But admittedly the eBPF way seems more performant theoretically (given you can afford to have a modern-enough kernel). I'm really excited to see how this project develops out.
The eBPF-mode of innovation is pretty exciting, truly a fresh lens to building software. I'm also following Akita Software - the company building an eBPF paradigm of monitoring.

xpid

2 215 0.0 Go

Linux Process Discovery. C Library, Go bindings, Runtime.
WorkOS

workos.com sponsored

The modern identity platform for B2B SaaS. The APIs are flexible and easy-to-use, supporting authentication, user identity, and complex enterprise features like SSO and SCIM provisioning.
joincap

0 202 0.0 Go

Merge multiple pcap files together, gracefully.
btrfscue

2 58 2.2 Go

Recover files from damaged BTRFS filesystems

Project mention: Rescuing a partition with parent transid verify failed error | /r/btrfs | 2023-05-14

So, the furthest i was able to get to with btrfscue is getting the metadata file. The tool doesn't see any files recoverable. I checked the content of this file using the "strings" command I and was able to see some familar filenames. However, i came across this github issue https://github.com/cblichmann/btrfscue/issues/12 and someone in here claims that metadata file is useful for "an external program".

IntegrityGuard

1 4 3.9 Go

A very secure tool for monitoring integrity of important files

Project mention: A tool for detecting evil maid attacks in pure Go | /r/privacy | 2023-10-21

InfluxDB

www.influxdata.com sponsored

Power Real-Time Data Analytics at Scale. Get real-time insights from all types of time series data with InfluxDB. Ingest, query, and analyze billions of data points in real-time with unbounded cardinality.

NOTE: The open source projects on this list are ordered by number of github stars. The number of mentions indicates repo mentiontions in the last 12 Months or since we started tracking (Dec 2020).