Top 23 Python Forensic Projects

• mvt

  91 9,820 8.7 Python

  MVT (Mobile Verification Toolkit) helps with conducting forensics of mobile devices in order to find signs of a potential compromise.

  

Project mention: Exploiting the iPhone 4 | news.ycombinator.com | 2023-10-02

Amnesty International released Mobile Verification Toolkit to check your phone for malware, by checking encrypted backups on your computer. https://github.com/mvt-project/mvt

• prowler

  25 9,611 9.8 Python

  Prowler is an Open Source Security tool for AWS, Azure, GCP and Kubernetes to do security assessments, audits, incident response, compliance, continuous monitoring, hardening and forensics readiness. Includes CIS, NIST 800, NIST CSF, CISA, FedRAMP, PCI-DSS, GDPR, HIPAA, FFIEC, SOC2, GXP, Well-Architected Security, ENS and more

  

Project mention: Cloud Security and Resilience: DevSecOps Tools and Practices | dev.to | 2024-05-01

1. Prowler: https://github.com/prowler-cloud/prowler Prowler provides security best practices assessments, audits, incident response readiness, and continuous monitoring for AWS environments.

• InfluxDB

  www.influxdata.com featured

  Power Real-Time Data Analytics at Scale. Get real-time insights from all types of time series data with InfluxDB. Ingest, query, and analyze billions of data points in real-time with unbounded cardinality.

  

• oletools

  5 2,751 5.5 Python

  oletools - python tools to analyze MS OLE2 files (Structured Storage, Compound File Binary Format) and MS Office documents, for malware analysis, forensics and debugging.

• timesketch

  2 2,496 9.0 Python

  Collaborative forensic timeline analysis

  

• volatility3

  7 2,228 9.4 Python

  Volatility 3.0 development

  

• plaso

  3 1,624 9.0 Python

  Super timeline all the things

  

• Digital-Forensics-Guide

  6 1,357 6.4 Python

  Digital Forensics Guide. Learn all about Digital Forensics, Computer Forensics, Mobile device Forensics, Network Forensics, and Database Forensics.

Project mention: Most used DFIR tools | /r/cybersecurity | 2023-12-10

If you're looking to learn on your own, try mikeroyal's digital forensics guide on Github. There's a lot of recommended resources there that'll speed you up. https://github.com/mikeroyal/Digital-Forensics-Guide

• SaaSHub

  www.saashub.com featured

  SaaSHub - Software Alternatives and Reviews. SaaSHub helps you find the best software and product alternatives

  

• andriller

  3 1,246 1.8 Python

  📱 Andriller - is software utility with a collection of forensic tools for smartphones. It performs read-only, forensically sound, non-destructive acquisition from Android devices.

• RecoverPy

  22 1,172 9.3 Python

  Interactively find and recover deleted or :point_right: overwritten :point_left: files from your terminal

Project mention: RecoverPy 2.1.3: A Linux tool to recover deleted or overwritten files | /r/opensource | 2023-10-23

• hindsight

  8 1,021 6.1 Python

  Web browser forensics for Google Chrome/Chromium

• mac_apt

  2 718 7.3 Python

  macOS (& ios) Artifact Parsing Tool

Project mention: My productivity app is a never-ending .txt file | news.ycombinator.com | 2024-02-19

• turbinia

  1 714 9.0 Python

  Automation and Scaling of Digital Forensics Tools

  

Project mention: Log2Timeline -> Timesketch | /r/computerforensics | 2023-05-16

You want Turbinia and DFTimewolf. Literally the tools built by the DF team at Google (the same team that makes L2T) purpose-built to do exactly what you're asking.

• python-evtx

  2 670 1.6 Python

  Pure Python parser for Windows Event Log files (.evtx)

• Zircolite

  4 599 7.5 Python

  A standalone SIGMA-based detection tool for EVTX, Auditd and Sysmon for Linux logs

• docker-explorer

  2 516 3.8 Python

  A tool to help forensicate offline docker acquisitions

  

• RecuperaBit

  5 504 5.0 Python

  A tool for forensic file system reconstruction.

Project mention: RecuperaBit: A tool for forensic file system reconstruction | news.ycombinator.com | 2024-02-07

• MalConfScan

  1 468 3.3 Python

  Volatility plugin for extracts configuration data of known malware

  

• WhatsApp-Key-Database-Extractor

  8 430 3.7 Python

  The most advanced and complete solution for extracting WhatsApp key/DB from package directory (/data/data/com.whatsapp) without root access.

• WhatsDump

  2 263 0.0 Python

  Extract WhatsApp private key from any non-rooted Android device (Android 7+ supported)

• varc

  5 232 3.5 Python

  Volatile Artifact Collector collects a snapshot of volatile data from a system. It tells you what is happening on a system, and is of particular use when investigating a security incident.

  

• MR

  2 147 10.0 Python

  Mobile Revelator

• netspionage

  2 141 0.0 Python

  Network Forensics CLI utility that performs Network Scanning, OSINT, and Attack Detection

• autotimeliner

  1 119 1.8 Python

  Automagically extract forensic timeline from volatile memory dump

• SaaSHub

  www.saashub.com featured

  SaaSHub - Software Alternatives and Reviews. SaaSHub helps you find the best software and product alternatives

  

Python Forensics related posts

• RecuperaBit: A tool for forensic file system reconstruction

  1 project | news.ycombinator.com | 7 Feb 2024

• Most used DFIR tools

  1 project | /r/cybersecurity | 10 Dec 2023

• As recommended, I ask it here : how can I find out if my phone is being tapped, and what should I do if it is?

  1 project | /r/opsec | 11 Jul 2023

• How do I download this on iPhone

  1 project | /r/iphonehelp | 27 Jun 2023

• I dont know if i downloaded malware

  1 project | /r/techsupport | 27 Jun 2023

• iOS 16.5.1 TriangleDB spyware

  1 project | /r/opsec | 26 Jun 2023

• Can anyone hack my phone via sending a WhatsApp Photo? How to know it?

  1 project | /r/Hacking_Tutorials | 10 Jun 2023
• A note from our sponsor - InfluxDB
  www.influxdata.com | 10 May 2024

  Get real-time insights from all types of time series data with InfluxDB. Ingest, query, and analyze billions of data points in real-time with unbounded cardinality. Learn more →

Index

Sponsored

SaaSHub - Software Alternatives and Reviews

SaaSHub helps you find the best software and product alternatives

www.saashub.com

Do not miss the trending Python projects with our weekly report!