A tool to view and remove Windows JumpLists
UAL Timeline Generator — User Access Logging Timeliner
Practical labs, case studies, and investigation notes for CHFI v11 — covering digital forensics, malware forensics, incident response, evidence collection, and analysis tools.
A comprehensive Model Context Protocol (MCP) server for Android device forensic data acquisition using Android Debug Bridge (ADB).
Ferramenta pericial desenvolvida para agilizar a triagem inicial e análise de evidências digitais, além de permitir a Aquisição Forense (Bit-a-bit) de unidades lógicas e físicas. Um "canivete suíço" offline e portátil que faz o trabalho pesado de extração de dados de forma rápida, segura e em lote.
Open-source ReFS forensics (Resilient File System v3.4-v3.14): file listing, super-timeline, USN + MLog journals, deleted-file recovery, snapshots plus a byte-level on-disk reference.
A professional security research study on Linux system resilience and kernel-level protection mechanisms. Analysis of boot process integrity, direct syscall implementation, anti-debugging, and sandbox evasion. An in-depth exploration of OS durability under adversarial stress.
From Shadows to Sun: A high-resolution forensics suite for absolute coordinate determination, from triage to testimony.
Forensics Tooling. Current status is that the repo contains tooling to parse SMBv1 and SMBv2 traffic.
Research project on cloud VM workload forensics and chain-of-custody detection
Open-source cross-platform Mobile Digital Forensics & Post-Acquisition Artifact Analysis Toolkit for Android and iOS (SQLite, Plist, WhatsApp crypt14/15 AES-GCM Decryptor, Telegram, Signal, Super-Timeline & IoC Threat Scanner
A Docker-based Python tool for analyzing PCAP network traffic files. Extracts insights, detects anomalies, and generates detailed reports from packet captures.
To associate your repository with the forensics-analysis topic, visit your repo's landing page and select "manage topics."