forensic-analysis

Open-source projects categorized as forensic-analysis
Edit details
Language: + Python + JavaScript + PowerShell + HTML + C# + C++ + Go
Topics: digital-forensics Forensics Dfir forensics-investigations incident-response
The modern identity platform for B2B SaaS
The APIs are flexible and easy-to-use, supporting authentication, user identity, and complex enterprise features like SSO and SCIM provisioning.
workos.com
Sponsored

Top 16 forensic-analysis Open-Source Projects

  • awesome-forensics

    A curated list of awesome forensic analysis tools and resources

    • Project mention: A fun new feature we are working on in systemd: userspace-only reboot | news.ycombinator.com | 2023-07-06

    https://github.com/cugu/awesome-forensics#acquisition : Memory forensics acquisition tools: POFR: PenguinOS Flight Recorder, LIME

  • Digital-Forensics-Guide

    Digital Forensics Guide. Learn all about Digital Forensics, Computer Forensics, Mobile device Forensics, Network Forensics, and Database Forensics.

    • Project mention: Most used DFIR tools | /r/cybersecurity | 2023-12-10

    If you're looking to learn on your own, try mikeroyal's digital forensics guide on Github. There's a lot of recommended resources there that'll speed you up. https://github.com/mikeroyal/Digital-Forensics-Guide

  • InfluxDB

    Power Real-Time Data Analytics at Scale. Get real-time insights from all types of time series data with InfluxDB. Ingest, query, and analyze billions of data points in real-time with unbounded cardinality.

    InfluxDB logo

  • beagle

    Beagle is an incident response and digital forensics tool which transforms security logs and data into graphs. (by yampelo)

  • APT-Hunter

    APT-Hunter is Threat Hunting tool for windows event logs which made by purple team mindset to provide detect APT movements hidden in the sea of windows event logs to decrease the time to uncover suspicious activity

    • Project mention: APT-Hunter: APT-Hunter is Threat Hunting tool for Windows event logs which made by purple team mindset to provide detect APT movements hidden in the sea of windows event logs to decrease the time to uncover suspicious activity | /r/blueteamsec | 2023-05-07

  • whapa

    WhatsApp Parser Toolset v1.59

    • Project mention: How to save WhatsApp chats with more than 130k messages? (more information below) | /r/DataHoarder | 2023-09-24

    I searched a lot on this subreddit and found two github solutions: B16f00t/whapa: WhatsApp Parser Toolset v1.59 (github.com) and ElDavoo/wa-crypt-tools: Decrypts WhatsApp .crypt12, .crypt14 and .crypt15 files. (github.com)

  • iris-web

    Collaborative Incident Response platform

  • ForensicsTools

    A list of free and open forensics analysis tools and other resources

  • WorkOS

    The modern identity platform for B2B SaaS. The APIs are flexible and easy-to-use, supporting authentication, user identity, and complex enterprise features like SSO and SCIM provisioning.

    WorkOS logo

  • sysmon-config

    Advanced Sysmon ATT&CK configuration focusing on Detecting the Most Techniques per Data source in MITRE ATT&CK, Provide Visibility into Forensic Artifact Events for UEBA, Detect Exploitation events with wide CVE Coverage, and Risk Scoring of CVE, UEBA, Forensic, and MITRE ATT&CK Events. (by ion-storm)

  • awesome-anti-forensic

    Tools and packages that are used for countering forensic activities, including encryption, steganography, and anything that modify attributes. This all includes tools to work with anything in general that makes changes to a system for the purposes of hiding information.

  • AvillaForensics

    Avilla Forensics 3.0

  • hashlookup-forensic-analyser

    Analyse a forensic target (such as a directory) to find and report files found and not found from CIRCL hashlookup public service - https://circl.lu/services/hashlookup/

  • entropy

    CLI program to calculate file entropy (by merces)

    • Project mention: entropy VS ent - a user suggested alternative | libhunt.com/r/merces/entropy | 2023-06-27

  • btrfscue

    Recover files from damaged BTRFS filesystems

    • Project mention: Rescuing a partition with parent transid verify failed error | /r/btrfs | 2023-05-14

    So, the furthest i was able to get to with btrfscue is getting the metadata file. The tool doesn't see any files recoverable. I checked the content of this file using the "strings" command I and was able to see some familar filenames. However, i came across this github issue https://github.com/cblichmann/btrfscue/issues/12 and someone in here claims that metadata file is useful for "an external program".

  • forensicsim

    A forensic open-source parser module for Autopsy that allows extracting the messages, comments, posts, contacts, calendar entries and reactions from a Microsoft Teams IndexedDB LevelDB database.

  • btrfs-recon

    Python app to parse btrfs disk images, record to postgres, and write fixes back to disk

  • RELY

    RELY (Name composed on project members Romy, Esther, Lucille and Yassir) is a python tool developed to help a Digital Forensics Triage procedure on some Microsoft Windows devices.

  • SaaSHub

    SaaSHub - Software Alternatives and Reviews. SaaSHub helps you find the best software and product alternatives

    SaaSHub logo
NOTE: The open source projects on this list are ordered by number of github stars. The number of mentions indicates repo mentiontions in the last 12 Months or since we started tracking (Dec 2020).

forensic-analysis related posts

Index

What are some of the best open-source forensic-analysis projects? This list will help you:

Project Stars
1 awesome-forensics 3,577
2 Digital-Forensics-Guide 1,335
3 beagle 1,250
4 APT-Hunter 1,144
5 whapa 1,060
6 iris-web 934
7 ForensicsTools 878
8 sysmon-config 749
9 awesome-anti-forensic 658
10 AvillaForensics 603
11 hashlookup-forensic-analyser 116
12 entropy 62
13 btrfscue 58
14 forensicsim 57
15 btrfs-recon 8
16 RELY 2

Sponsored
SaaSHub - Software Alternatives and Reviews
SaaSHub helps you find the best software and product alternatives
www.saashub.com