13 repositorios
Comprehensive platforms and toolsets for managing digital investigations and evidence processing.
Explore 13 awesome GitHub repositories matching part of an awesome list · Forensic Frameworks. Refine with filters or upvote what's useful.
The Sleuth Kit® (TSK) is a library and collection of command line digital forensics tools that allow you to investigate volume and file system data. The library can be incorporated into larger digital forensics tools and the command line tools can be directly used to find evidence.
Core library and tools for low-level forensic analysis.
IPED Digital Forensic Tool. It is an open source software that can be used to process and analyze digital evidence, often seized at crime scenes by law enforcement or in a corporate investigation by private examiners.
Integrated platform for forensic investigations and evidence processing.
PowerForensics provides an all in one platform for live disk forensic analysis
Framework for performing live disk forensic analysis.
Dissect is a digital forensics & incident response framework and toolset that allows you to quickly access and analyse forensic artefacts from various disk and file formats, developed by Fox-IT (part of NCC Group).
Toolset for rapid access and analysis of forensic artifacts.
IntelMQ is a solution for IT security teams for collecting and processing security feeds using a message queuing protocol.
Collects and processes security feeds for incident response.
Digital Forensics Investigation Platform
Platform for managing digital investigation workflows.
Laika BOSS: Object Scanning System
Object scanner and intrusion detection system for file analysis.
Orchestrates and manages forensic workloads in cloud environments.
DFF (Digital Forensics Framework) is a Forensics Framework coming with command line and graphical interfaces. DFF can be used to investigate hard drives and volatile memory and create reports about user and system activities.
General-purpose framework for digital forensic investigations.
Analyse a forensic target (such as a directory) to find and report files found and not found from CIRCL hashlookup public service - https://circl.lu/services/hashlookup/
Analyzes files against known hash databases for identification.
Forensics acquisition framework designed to be extensible and secure
Extensible and secure framework for forensic data acquisition.
linux c++, fox-toolkit, multi-threaded forensic gui tool
Graphical user interface for forensic analysis tasks.
AIFT is a GUI, CLI, REST API, and MCP tool that helps DFIR analysts get oriented quickly. Point it at disk images, VM images, forensic archives, or triage packages; AIFT discovers what can be opened, parses artifacts with Dissect, and uses AI to turn parsed data into concrete leads and gaps for the investigator to verify.
Parses evidence and generates AI-assisted forensic reports.