Popular repositories Loading
-
usnjrnl-forensic
usnjrnl-forensic Public archiveThe most comprehensive NTFS USN Journal parser: full path reconstruction (CyberCX Rewind), TriForce correlation (MFT + LogFile + UsnJrnl), ghost record recovery, anti-forensics detection, timestomp…
Rust 31
Repositories
- peira Public
A knowledge system that refuses to promote a claim you have not examined — with gates drawn from Socratic elenchus, 金剛經, Nyāya, Madhyamaka and the causal ladder.
- safe-decode Public
Panic-free, allocating byte-to-value transforms with no format knowledge: ROT13, the UTF-16 decoder family with its NUL policy named in each function, and hex rendering.
- jsonguard Public
Secure output sanitization and input inspection for JSON/JSONL, CSV, and TSV — guards against formula injection, bidi-override, control-character, and encoding attacks.
- forensic-carve Public
Fleet carving contract + single-pass sweep engine: signature detection over unallocated/memory regions dispatched to per-format carvers.
- mbr-partition-forensic Public
Forensic MBR analyzer: graded anomaly findings (structural, gap/slack carving, wipe & bootkit detection, CHS/LBA & GPT/VBR cross-checks) on a pure read-only MBR parser — Rust crates mbr-partition-forensic + mbr-partition-core
- gpt-partition-forensic Public
GUID Partition Table (GPT) analyzer for Rust — parses the table and grades it: CRC32 integrity, primary/backup divergence, partition overlaps, and protective/hybrid-MBR anomalies as severity-ranked findings
- wire-desktop-forensic Public
Wire desktop forensic parser — recover conversations/records from IndexedDB; encrypted values surfaced not fabricated. Panic-free by lint.
- whatsapp-desktop-forensic Public
WhatsApp Desktop forensic parser — recover chats/messages/contacts/media from IndexedDB (V8). Encrypted bodies fail loud, never fabricated. Panic-free by lint.
- apm-partition-forensic Public
Read-only Apple Partition Map (APM) reader + forensic anomaly auditor — overlaps, out-of-bounds, residual entries, hidden gaps as graded findings. Pure Rust, no unsafe.
- userassist-forensic Public
UserAssist forensic analyzer — decodes Windows GUI execution evidence (NTUSER.DAT) and flags masquerade/staging anomalies. Rust: userassist-core reader + userassist-forensic analyzer/CLI.
People
This organization has no public members. You must be a member to see who’s a part of this organization.
Top languages
Loading…
Most used topics
Loading…