UAC is a Live Response collection script for Incident Response that makes use of native binaries and tools to automate the collection of AIX, Android, ESXi, FreeBSD, Linux, macOS, NetBSD, NetScaler, OpenBSD and Solaris systems artifacts.
A curated list of awesome forensic analysis tools and resources
Kali Linux in Docker + Ubuntu 22.04 in Docker for Bug Bounty, Penetration Testing, Security Research, Computer Forensics and Reverse Engineering. Kali Linux inside with Docker with or without support with systemd, repository also contains Proof of Concept with kind (Kubernetes in Docker) to test Kali Linux with enabled systemd in K8s cluster
Parrot OS (Core/Security) or just Parrot Tools in Docker with the usage of Makefile, Dockerfiles and docker-compose.yaml for Bug Bounty, Penetration Testing, Security Research, Computer Forensics and Reverse Engineering, repository also contains Proof of Concept with kind (K8s in Docker) for ParrotOS with/without systemd in K8s cluster
IPED Digital Forensic Tool Ultimate: It is an open source software that can be used to process and analyse digital evidence, often seized at crime scenes by law enforcement or in a corporate investigation by private examiners.
Avilla Forensics 3.0: Avilla Forensics is a comprehensive and feature-rich tool for mobile forensics, offering a wide range of functionalities for both Android and iOS devices. The tool’s integration with various third-party tools enhances its capabilities.
A Python script to extract and analyse EXIF data
unix_collector is a live response collection script for Incident Response on UNIX-like systems using native binaries.
Extract valid or partially valid domain names and IPs from malicious or invalid URLs.
A python-based tool to extract forensic info from ActivitiesCache.db (Windows Activity Timeline)
Dump a process memory and extract data based on regular expressions.
The best tools and resources for forensic analysis.
This repository contains the forensic tools we made.
This will compile a list of Android, iOS, Linux malware techniques for attacking and detection purposes.
CFREDS case study for subject code: CTMTCS S2 P2
Repositório que a apresenta os meus artigos sobre tecnologia - Linux, Cibersegurança, Computação Forense e Gestão de Projectos
Given a range of dates, is capable of extracting various information from a Windows system in said time range
Fork of rdd-copy (https://sourceforge.net/projects/rdd/) developed by NFI (the Netherlands Forensic Institute) and updated to work with new version of libewf.
The forensic analysis write-up / walkthrough for forensic disk image.
The Main Software Repository
Add a description, image, and links to the computer-forensics topic page so that developers can more easily learn about it.
To associate your repository with the computer-forensics topic, visit your repo's landing page and select "manage topics."