MVT (Mobile Verification Toolkit) helps with conducting forensics of mobile devices in order to find signs of a potential compromise.

⭐ ⭐ Distributed tcpdump for cloud native environments ⭐ ⭐

Digital Forensics Guide. Learn all about Digital Forensics, Computer Forensics, Mobile device Forensics, Network Forensics, and Database Forensics.

⭐ ⭐ Use ML to classify flows and packets as benign or malicious. ⭐ ⭐

Open Source Security Guide. Learn all about Security Standards (FIPS, CIS, FedRAMP, FISMA, etc.), Frameworks, Threat Models, Encryption, and Benchmarks.

Avilla Forensics 3.0

A standalone SIGMA-based detection tool for EVTX, Auditd and Sysmon for Linux logs

PowerShell Digital Forensics & Incident Response Scripts.

Collection of forensic tools

CLI tools for forensic investigation of Windows artifacts

Graph Visualization for windows event logs

Strumenti di Acquisizione e Analisi di copie Forensi

The best tools and resources for forensic analysis.

Windows Forensics Environment Builder

Cross-platform registry browser for raw Windows registry files

A collection of forensics tools, software, libraries, learning tutorials, frameworks, academic and practical resources in Cybersecurity

Linux Incident Response Reporting

FIT is a Python3 application for forensic acquisition of contents like web pages, emails, social media, etc. directly from the internet.

ExeSpy is a cross-platform PE viewer for EXE and DLL files

yara detection rules for hunting with the threathunting-keywords project