Top 5 Rust Forensic Projects

chainsaw

14 2,547 8.3 Rust

Rapidly Search and Hunt through Windows Forensic Artefacts

Project mention: Angle-grinder: Slice and dice logs on the command line | news.ycombinator.com | 2024-04-29

There’s already a DFIR log tool named chainsaw: https://github.com/WithSecureLabs/chainsaw

hayabusa

7 1,938 9.7 Rust

Hayabusa (隼) is a sigma-based threat hunting and fast forensics timeline generator for Windows event logs.

Project mention: Hayabusa: Sigma-based forensics timeline generator for Windows event logs | news.ycombinator.com | 2024-04-24

InfluxDB

www.influxdata.com sponsored

Power Real-Time Data Analytics at Scale. Get real-time insights from all types of time series data with InfluxDB. Ingest, query, and analyze billions of data points in real-time with unbounded cardinality.
sidr

2 71 9.1 Rust

Search Index Database Reporter

Project mention: sidr: Search Index Database Reporter - SIDR ("cider") is a tool designed to parse Windows search artifacts from Windows 10 (and prior) and Windows 11 systems. The tool handles both ESE databases (Windows.edb) and SQLite databases (Windows.db) as input and generates three detailed reports as output. | /r/blueteamsec | 2023-05-01

elegant-bouncer

1 27 7.3 Rust

ELEGANTBOUNCER is a detection tool for file-based mobile exploits.

Project mention: Apple Product Security email to Google about BLASTPASS vulnerability is public | news.ycombinator.com | 2023-12-22

zff-rs

2 19 9.0 Rust

Library to handle the files in zff format (file format to store and handle forensic acquisitions).
WorkOS

workos.com sponsored

The modern identity platform for B2B SaaS. The APIs are flexible and easy-to-use, supporting authentication, user identity, and complex enterprise features like SSO and SCIM provisioning.

NOTE: The open source projects on this list are ordered by number of github stars. The number of mentions indicates repo mentiontions in the last 12 Months or since we started tracking (Dec 2020).