Browser forensics tool for Google Chrome, other Chromium-based browsers, and Mozilla Firefox
-
Updated
Sep 7, 2026 - Python
#
browser-forensics
Here are 24 public repositories matching this topic...
Point it at disk + memory evidence; get a correlated, ATT&CK-mapped attack timeline. Rust DFIR orchestrator: one command ingests E01/EWF/VMDK/raw + memory dumps, parses NTFS/registry/EVTX/prefetch/LNK/SRUM/browser/Amcache + memory (processes, netstat, injection), correlates into a DuckDB super-timeline, scans threat-intel, and reports.
rust timeline incident-response forensics dfir ntfs digital-forensics sigma yara memory-forensics threat-intelligence mitre-attack evtx browser-forensics velociraptor duckdb windows-forensics disk-forensics linux-forensics attack-flow
-
Updated
Aug 17, 2026 - Rust
Decrypt chrome profile data offline using the Chrome Safe Storage keyring secret.
chrome sqlite cookies chromium dfir infosec pentesting keyring post-exploitation digital-forensics decryption offensive-security red-team password-recovery browser-forensics credential-dumping cybersecurity-tools chrome-password-decrypt
-
Updated
Jul 7, 2026 - Python
Firefox profile decryption tool and master password cracker.
firefox dfir infosec pentesting post-exploitation digital-forensics decryption offensive-security nss password-cracker red-team password-recovery browser-security browser-forensics credential-dumping cybersecurity-tools firefox-password-decryption
-
Updated
Jul 7, 2026 - Python
Chrome SNSS session parser + History forensic extractor for Windows
-
Updated
Apr 27, 2026 - Python
Complete notes, lab writeups, and challenge walkthroughs for the LetsDefend Incident Responder Path. This covers DFIR, memory forensics, Windows Event Log analysis, Active Directory attack hunting, malware triage and more!
log-analysis incident-response active-directory dfir sysmon malware-analysis volatility memory-forensics kerberoasting browser-forensics windows-forensics linux-forensics soc-analyst letsdefend forensic-aquisition
-
Updated
Aug 11, 2026
⚡ Temporal Browser Intelligence & Agent-Owned Workflow Runtime with 350 Certified MCP Tools & Python SDK · Sub-Millisecond DOM Time-Travel, Target Memory & Deterministic Automation.
chrome-extension typescript telegram dom mcp reverse-engineering devtools cursor browser-automation claude browser-forensics ai-agent causal-reasoning time-travel-debugger telegram-mini-app model-context-protocol temporal-intelligence dom-intelligence
-
Updated
Sep 11, 2026 - TypeScript
DFIR tool for offline browser artifacts analysis — Chrome & Firefox
-
Updated
Jul 14, 2026 - Python
Parse Chrome/Firefox/Safari and embedded-Chromium app artifacts — history, cookies, web storage, integrity/tampering, free-page carving, container discovery — into one JSON timeline. Single static Rust binary, no runtime deps.
electron rust cli firefox chrome sqlite leveldb incident-response safari chromium forensics dfir integrity digital-forensics web-storage memory-forensics browser-forensics
-
Updated
Aug 26, 2026 - Rust
A local forensic workstation for web browser artifact analysis
-
Updated
Jul 3, 2026 - Python
BrowserDig (Browser Digital Information Gatherer) is a fast, lightweight, cross-platform browser forensics tool for DFIR, threat hunting, and privacy audits. It extracts and analyze history, cookies, logins, downloads, bookmarks, and more from multiple browsers like Chrome, Edge, Firefox, Brave, Opera, Vivaldi, and Safari.
osint incident-response threat-hunting digital-forensics timeline-analysis browser-forensics dfir-tools
-
Updated
Aug 26, 2025
⚡ Browser Forensic Recorder, Live DOM Intelligence & Universal MCP Server for real-time AI Agent inspection and DOM time-travel.
-
Updated
Sep 1, 2026 - TypeScript
Parse Chrome/Firefox history and cookies into searchable timelines — browser forensics for DFIR and insider investigations.
python chrome incident-response forensics dfir cybersecurity threat-hunting digital-forensics security-tools blue-team browser-forensics offline-security
-
Updated
Sep 2, 2026 - Python
FAEP is an automated tool to extract and parse forensic artifacts from .E01 images automatically, with a clean GUI and minimal manual effort.
python3 dfir digital-forensics forensic-analysis python-automation amcache browser-forensics dfir-automation registry-parser disk-forensics dfir-tools artifacts-parser artifacts-extractor pyewf
-
Updated
Dec 17, 2025 - Perl
A write-up about the CyberDefenders Lab Phishy
powershell mozilla-firefox meterpreter data-exfiltration c2 vba-macros oletools oledump ftk-imager db-browser-for-sqlite smishing browser-forensics maldoc cyberdefenders endpoint-forensics registry-explorer passwordfox phishy
-
Updated
Jun 25, 2026
Chronika is a forensic analysis tool for reading and visualizing different browser histories in a chronological timeline format. Supports Chrome, Firefox, Safari, Brave, Opera, Edge, Vivaldi, Tor Browser, Chromium, LibreWolf and all browsers on Linux and macOS.
firefox chrome opera browser safari chromium forensics edge vivaldi brave historical-data historical forensic-analysis forensic browser-forensic browser-forensics librewolf forensics-tools
-
Updated
Aug 8, 2025 - Python
Tools and documentation for examining what AI platforms do during your sessions using standard browser developer tools (F12/DevTools). Covers Claude, ChatGPT, Gemini, Grok, DeepSeek, and Perplexity.
privacy devtools har server-sent-events bug-bounty ai-safety procmon data-exfiltration amplitude claude segment-io browser-forensics statsig chatgpt system-prompt telemetry-analysis ai-transparency
-
Updated
Mar 14, 2026 - Python
Chromium/Brave/Edge SNSS session-file forensic decoder — panic-free, read-only; validates the SNSS command stream, decodes navigation base::Pickle payloads, replays per-window tab state. No runtime deps.
rust chrome incident-response chromium forensics dfir brave digital-forensics snss browser-forensics session-restore
-
Updated
Aug 25, 2026 - Rust
Cross-platform vibe-coded (probably badly made but w.e) endpoint forensics suite. Dual SHA-256+SHA3-256 hash-chained. ML-DSA-65-signed evidence.
cross-platform forensics compliance post-quantum-cryptography yara opsec threat-intelligence threat-detection browser-forensics chain-of-custody endpoint-detection local-llm firewall-audit
-
Updated
Jun 15, 2026 - Python
Linux browser forensics — collects Chrome/Firefox/Edge history and builds HTML dashboards & JSON timelines. See what happened on your own devices. GTK GUI + PowerShell collector, fully offline.
-
Updated
Aug 18, 2026 - PowerShell
Add this topic to your repo
To associate your repository with the browser-forensics topic, visit your repo's landing page and select "manage topics."