#

computer-forensics

Here are 61 public repositories matching this topic...

cugu / awesome-forensics

⭐️ A curated list of awesome forensic analysis tools and resources

open-source dfir free digital-forensics computer-forensics forensic-analysis

Updated Sep 5, 2026

srixivas / PcapXray

❄️ PcapXray - A Network Forensics Tool - To visualize a Packet Capture offline as a Network Diagram including device identification, highlight important communication and file extraction

python network-diagram security pcap packets network tor traffic forensics cybersecurity computer-forensics forensic-analysis tor-traffic

Updated May 1, 2026
Python

tclahr / uac

UAC is a powerful and extensible incident response tool designed for forensic investigators, security analysts, and IT professionals. It automates the collection of artifacts from a wide range of Unix-like systems, including AIX, ESXi, FreeBSD, Linux, macOS, NetBSD, NetScaler, OpenBSD and Solaris.

Updated Sep 9, 2026
Shell

xiosec / Computer-forensics

The best tools and resources for forensic analysis.

security analysis scanner hacking forensics digital-forensics computer-forensics forensic-analysis security-tools forensics-tools

Updated Feb 24, 2023

CIRCL / factual-rules-generator

Factual-rules-generator is an open source project which aims to generate YARA rules about installed software from a machine.

dfir yara computer-forensics yara-rules

Updated Jan 18, 2022
Python

op7ic / unix_collector

unix_collector is a Live Response collection script for Incident Response on UNIX-like systems using native binaries. Supports AIX, Android, ESXi, FreeBSD, Linux, macOS, NetBSD, NetScaler, OpenBSD and Solaris systems artifacts.

linux freebsd security unix openbsd script esxi incident-response posix forensics dfir solaris triage computer-forensics blueteam dfir-automation live-response forensics-tools

Updated Jun 18, 2026
Shell

tthtlc / awesome_malware_techniques

This will compile a list of Android, iOS, Linux malware techniques for attacking and detection purposes.

malware antivirus computer-forensics antivirus-evasion firewall-bypass

Updated Nov 29, 2022

jz543fm / kali-dockerized

Kali Linux in Docker + Ubuntu 26.04 in Docker for Bug Bounty, Penetration Testing, Security Research, Computer Forensics and Reverse Engineering. Kali Linux inside with Docker with or without support with systemd, repository also contains Proof of Concept with kind (Kubernetes in Docker) to test Kali Linux with enabled systemd in K8s cluster

docker dockerfile ubuntu docker-compose makefile systemd cybersecurity bug-bounty security-vulnerability kali-linux vulnerability-detection vulnerability-scanners kali computer-forensics security-tools docker-kali-linux buildkit pentesting-tools trivy

Updated Aug 17, 2026
Dockerfile

mbrown1413 / SqliteFind

A Volatility plugin for finding sqlite database rows

sqlite3 computer-forensics volatility-plugins

Updated Jul 14, 2019
Python

TheProGhost / Digital_Forensics_CaseStudy

The forensic analysis write-up / walkthrough for forensic disk image.

infosec computer-forensics forensic-analysis

Updated Jul 23, 2022

cyberknightX / Guymager

Guymager is a free forensic imager for media acquisition. It is based on libewf and libguytools.

computer-forensics

Updated Feb 23, 2022
C++

slackspace-lab / x-tension-c-sharp

An updated C# port of X-Ways X-Tensions API.

forensics digital-forensics computer-forensics x-ways

Updated Mar 12, 2018
C#

thomaslaurenson / LiveDiff

LiveDiff is a portable system-level differencing tool for Microsoft Windows-based operating systems

portable filesystem windows-registry computer-forensics

Updated Jan 9, 2026
C

ivan-sincek / memory-dumper

Dump a process memory and extract data based on regular expressions.

windows security c-plus-plus incident-response reverse-engineering penetration-testing bug-bounty threat-hunting offensive-security ethical-hacking computer-forensics red-team-engagement defensive-security dump-memory windows-penetration-testing

Updated Apr 25, 2023
C++

sydp / goewf

Access Expert Witness Format (ewf/E01/L01) files using Golang

golang dfir digital-forensics computer-forensics evidence

Updated Mar 25, 2019
Go

ivan-sincek / domain-extractor

Extract valid or partially valid domain names and IPs from malicious or invalid URLs.

python url security extractor incident-response domain penetration-testing ip bug-bounty threat-hunting domain-name ethical-hacking computer-forensics threat-intelligence red-team-engagement defensive-security

Updated Jun 19, 2023
Python

bolisettynihith / ActivitiesCacheParser

A python-based tool to extract forensic info from ActivitiesCache.db (Windows Activity Timeline)

dfir computer-forensics windows-timeline

Updated May 3, 2023
Python

ggulgun / Forensic-Docker

Docker images of open source forensic tools

docker-image forensics scalpel computer-forensics foremost forensic bulk-extractor

Updated Nov 9, 2020
Shell

Pruthviraj-S / Computer-Forensics

CFREDS case study for subject code: CTMTCS S2 P2

computer-forensics forensics-investigations

Updated Nov 6, 2022

jz543fm / docker-parrot

Parrot OS (Core/Security) or just Parrot Tools in Docker with the usage of Makefile, Dockerfiles and docker-compose.yaml for Bug Bounty, Penetration Testing, Security Research, Computer Forensics and Reverse Engineering, repository also contains Proof of Concept with kind (K8s in Docker) for ParrotOS with/without systemd in K8s cluster

docker kubernetes dockerfile docker-compose makefile systemd cybersecurity pentesting parrot computer-forensics parrot-os parrotos

Updated Apr 13, 2024
Makefile

Add this topic to your repo

To associate your repository with the computer-forensics topic, visit your repo's landing page and select "manage topics."