⭐️ A curated list of awesome forensic analysis tools and resources
-
Updated
Oct 2, 2025
#
forensic-analysis
Here are 279 public repositories matching this topic...
Digital Forensics Guide. Learn all about Digital Forensics, Computer Forensics, Mobile device Forensics, Network Forensics, and Database Forensics.
security osint alerting forensics dfir intrusion-detection siem digital-forensics offensive-security cyber-security network-security port-scanning forensic-analysis threat-intelligence mitre-attack forensics-investigations detection-engineering digitalforensics forensics-tools digitalforensicreadiness
-
Updated
Jan 4, 2024 - Python
❄️ PcapXray - A Network Forensics Tool - To visualize a Packet Capture offline as a Network Diagram including device identification, highlight important communication and file extraction
python network-diagram security pcap packets network tor traffic forensics cybersecurity computer-forensics forensic-analysis tor-traffic
-
Updated
Mar 28, 2022 - Python
A list of free and open forensics analysis tools and other resources
windows macos linux open-source metadata tools timeline network forensics free awesome-list image-analysis digital-forensics forensic-analysis metada forensics-investigations computer-fore forensic-tools
-
Updated
Apr 20, 2025
APT-Hunter is Threat Hunting tool for windows event logs which made by purple team mindset to provide detect APT movements hidden in the sea of windows event logs to decrease the time to uncover suspicious activity
incident-response python3 threat-hunting windows-eventlog forensic-analysis purpleteam windows-event-logs apt-attacks
-
Updated
Nov 7, 2024 - Python
Penetration Testing For - Web | Mobile | API | Thick Client | Source Code Review | DevSecOps | Wireless | Network Pentesting, etc...
application-security infrastucture source-code appsec network-security forensic-analysis iot-security-testing docker-security wifi-hacking thick-client active-directory-security mobile-pentesting api-pentesting
-
Updated
Aug 30, 2025
Beagle is an incident response and digital forensics tool which transforms security logs and data into graphs.
-
Updated
Dec 13, 2022 - Python
Collaborative Incident Response platform
python incident-response digital-forensics forensic-analysis forensic csirt-tooling digital-forensics-incident-response forensic-tools
-
Updated
Oct 8, 2025 - Python
WhatsApp Parser Toolset v1.59
-
Updated
Jul 15, 2025 - Python
Tools and packages that are used for countering forensic activities, including encryption, steganography, and anything that modify attributes. This all includes tools to work with anything in general that makes changes to a system for the purposes of hiding information.
security awesome cybersecurity awesome-list antiforensics forensic-analysis anti-forensics anti-forensic
-
Updated
Nov 27, 2023 - HTML
Avilla Forensics FREE
android ios instagram mobile telegram adb adb-commands forensics whatsapp signal devices digital-forensics apktool forensic-analysis downgrade whatsapp-parser downgrade-attack extrator mobile-forensics forensics-tools
-
Updated
Aug 28, 2025 - C#
Advanced Sysmon ATT&CK configuration focusing on Detecting the Most Techniques per Data source in MITRE ATT&CK, Provide Visibility into Forensic Artifact Events for UEBA, Detect Exploitation events with wide CVE Coverage, and Risk Scoring of CVE, UEBA, Forensic, and MITRE ATT&CK Events.
graylog logging forensics dfir sysmon threat-hunting siem threat-sharing threatintel netsec sysinternals graylog-plugin forensic-analysis threat-analysis threat-intelligence humio mitre-attack sigma-rules forensicartifacts digitalforensics
-
Updated
Nov 5, 2023 - PowerShell
WinDBG Anti-RootKit Extension
windows c-plus-plus visual-studio malware driver kernel-mode crash-dump windbg malware-analysis windbg-extension malware-research forensic-analysis debugging-tool memory-forensics anomaly-detection anti-rootkit wdbgark user-mode sww swwwolf
-
Updated
Jul 29, 2020 - C++
Awesome list of digital forensic tools
metadata awesome forensics awesome-list digital-forensics forensic-analysis investigative-journalism
-
Updated
Nov 16, 2020
Handbook of windows forensic artifacts across multiple Windows version with interpretation tips and some examples. Work in progress!
windows analysis reference forensics dfir artifacts digital-forensics forensic-analysis forensics-investigations windows-11 forensicartifacts
-
Updated
Aug 13, 2024
CLI tools for forensic investigation of Windows artifacts
rust cli forensics dfir rust-lang digital-forensics forensic-analysis digital-forensics-incident-response forensics-tools
-
Updated
Jul 21, 2025 - Rust
A collection of tools for forensic analysis
python metadata firefox chrome facebook parse cookie skype exif forensics facebook-messenger whatsapp exif-data-extraction digital-forensics html-table metadata-extraction forensic-analysis exif-metadata extract-metadata exif-extractor
-
Updated
Sep 12, 2019 - Python
Forensic toolkit for iOS sysdiagnose feature
-
Updated
Oct 13, 2025 - Python
A high-speed forensic timeline engine for Windows forensic artifact CSV output built for DFIR investigators. Quickly consolidate CSV output from processed triage evidence for Eric Zimmerman (EZ Tools) Kape, Axiom, Hayabusa, Chainsaw and Nirsoft into a unified timeline.
yaml nirsoft forensic-analysis chainsaw timelines axiom forensics-investigations digital-forensics-incident-response forensics-tools ez-tools hayabusa forensic-timeline digital-forensic-tool
-
Updated
Sep 3, 2025 - C#
This tool allows one to recover old RDP (mstsc) session information in the form of broken PNG files. These PNG files allows Red Team member to extract juicy information such as LAPS passwords or any sensitive information on the screen. Blue Team member can reconstruct PNG files to see what an attacker did on a compromised host. It is extremely u…
hacking forensics penetration-testing infrastructure-monitoring forensic-analysis blueteam hacking-attack-tools internal-pentest redteaming blue-team redteam hacking-tools purpleteam forensics-investigations
-
Updated
Aug 4, 2018 - Python
Improve this page
Add a description, image, and links to the forensic-analysis topic page so that developers can more easily learn about it.
Add this topic to your repo
To associate your repository with the forensic-analysis topic, visit your repo's landing page and select "manage topics."