evidence-collection

Open-source Telegram chat exporter, deleted & edited message logger, and OSINT forensics archiver. Save chat history, capture deleted messages, compare edit versions, and export signed HTML/JSON/CSV evidence.

A GRC Compliance tool for SaaS products to manage the entire lifecycle of security audits.

Collect compliance evidence (FedRAMP 20x, NIST 800-53) from AWS, Azure, GCP, Okta, Wiz and more, and send it to Paramify.

Endpoint evidence for SOC 2, ISO 27001, HIPAA & GDPR. Collect locally on Windows, macOS & Linux. Self-host or sync to a centralized dashboard. Free tier.

Prove your compliance posture with automated evidence and clear visualization. Open-source, OSCAL-native evidence collection from 30+ platforms with self-hosted/air-gapped deployment support.

Zero-dependency Python CLI for targeted file collection - digital forensics, incident response, and selective backups. Cross-platform, with SHA-256 manifests, chain-of-custody logging, and checkpoint/resume for failing media.

EU AI Act compliance: scan, attest, document — from your IDE. Scanner catches code-verifiable violations, AI collects evidence for hybrid obligations, Human Gates capture pure attestations. Source-available (BSL 1.1), MCP-native, audit trail included.

Automated evidence collection, control gap analysis, and evidence-grounded questionnaire drafting for SOC 2 and ISO 27001

Python scripts for pre-audit cloud security evidence collection across AWS, GCP, and Azure. SOC 2 and ISO 27001 control mappings. Read-only, open-source

Cross-platform scammer investigation toolkit. Collect evidence from scam websites and gaming platforms (Steam, PSN, Xbox, Discord), generate court-ready PDF reports, and file with FTC/FBI IC3/platform authorities.

ExamGurad is a portable Windows cyber-forensic tool that collects USB device history, event logs, and system activity evidence for academic integrity investigations.

This repository automates the collection and management of evidence from various tools and sources, committing the data for transparency and traceability. It's designed to gather evidence that tools like Vanta and others aren't built to collect.

Open-source SOC 2 evidence puller for AWS. Pulls CloudTrail, IAM, GuardDuty, Security Hub, Config into a dated CSV bundle. Part of the AuditReady toolkit (vanta alternative, drata alternative).

Offline-capable difficult-device STIG scanner and evidence handoff companion for STIG Manager (ONTAP, FreeBSD, and Cisco IOS-XE pilot).

Tamper-evident evidence collection pipeline with append-only SQLite storage, hash-chain integrity, and one-shot audit CLI execution.

Tamper-evident evidence auto-capture for Claude Code pentest/red-team engagements — hash-chained log of every Bash + MCP call, real screenshots, one-command report.

Enterprise Digital Forensics Platform | 35+ Modules | AI-Powered | Web Dashboard | REST API | Docker

Key Evidence Engine for ISMS management and mapping of real data to framework controls and clauses

Structured evidence ledger that turns pentest and DFIR artifacts into organized, timestamped case files.

Open-source evidence collection engine for ISO 27001:2022 compliance. Connects to Microsoft 365 via Graph API, automatically collects audit evidence, evaluates compliance, and generates reports.