Skip to content
Closed
Changes from 2 commits
Commits
File filter

Filter by extension

Filter by extension

Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
11 changes: 11 additions & 0 deletions README.md
Original file line number Diff line number Diff line change
Expand Up @@ -143,6 +143,7 @@ Curated list of awesome **free** (mostly open source) forensic analysis tools an
- :package: [Rekall](https://github.com/google/rekall) - Memory Forensic Framework
- :package: [volatility](https://github.com/volatilityfoundation/volatility) - The memory forensic framework
- [VolUtility](https://github.com/kevthehermit/VolUtility) - Web App for Volatility framework
- [Ram Parser](https://www.ramparser.com/en) - Volatility-style memory forensics, entirely in your browser.
Comment thread
florianamette marked this conversation as resolved.
Outdated
Comment thread
florianamette marked this conversation as resolved.
Outdated
Comment thread
cugu marked this conversation as resolved.
Outdated
Comment thread
cugu marked this conversation as resolved.
Outdated

### Network Forensics

Expand Down Expand Up @@ -174,6 +175,12 @@ Curated list of awesome **free** (mostly open source) forensic analysis tools an
- :zzz: [NTFS USN Journal parser](https://github.com/PoorBillionaire/USN-Journal-Parser)
Comment thread
florianamette marked this conversation as resolved.
- [RecuperaBit](https://github.com/Lazza/RecuperaBit) - Reconstruct and recover NTFS data
- :zzz: [python-ntfs](https://github.com/williballenthin/python-ntfs) - NTFS analysis
- [MFT Parser](https://www.mftparser.com/en) - NTFS $MFT parser in the browser
- [USN Journal Parser (browser)](https://www.usnparser.com/en) - Windows NTFS USN Journal ($UsnJrnl:$J) files parser in the browser
- [LNK Parser](https://www.lnkparser.com/en) - Windows .lnk shortcut parser in the browser
- [Jump List Parser](https://www.jumplistparser.com/en) - AutomaticDestinations and CustomDestinations jump list artifacts parser in the browser
Comment thread
cugu marked this conversation as resolved.
- [Recycle Bin $I Parser](https://www.recyclebinparser.com/en) - Recycle Bin $I Parser in the browser
- [Amcache Parser](https://www.amcacheparser.com) - Amcache Parser in the browser
Comment thread
florianamette marked this conversation as resolved.
Comment thread
florianamette marked this conversation as resolved.
Comment on lines +178 to +183

### OS X Forensics

Expand Down Expand Up @@ -249,6 +256,10 @@ Curated list of awesome **free** (mostly open source) forensic analysis tools an
- [oletools](https://github.com/decalage2/oletools) - Tools to analyze Microsoft OLE2 files and MS Office documents for malware analysis and forensics
- [pdf-parser](https://blog.didierstevens.com/programs/pdf-tools/) - Parse and analyze PDF files to extract metadata and identify malicious content

### Browser Forensics
- [hindsight](https://github.com/RyanDFIR/hindsight) - Browser forensics tool for Google Chrome (and other Chromium-based browsers)
Comment on lines +259 to +260
- [Browser Forensics](https://www.browserforensics.app/en) - Browser (Chrome,Firefox,Safari) artifact parser in the browser
Comment thread
florianamette marked this conversation as resolved.
Outdated
Comment thread
florianamette marked this conversation as resolved.
Outdated

### Steganography

- [Sonicvisualizer](https://www.sonicvisualiser.org)
Expand Down
Loading