UNIX-like reverse engineering framework and command-line toolset
Process-aware, eBPF-based tcpdump
A Linux packet crafting tool.
👾 a decade of resources for security researchers: pentesting, CTF, wargames, cryptography, forensics, reverse engineering, IoCs, botnets, cloud hacking, linux hacking, steganography, vulnerabilities, etc.
Malware Behavior Analyzer
CDIR (Cyber Defense Institute Incident Response) Collector - live collection tool based on oss tool/library
Windows Recycle Bin analyser
Enhanced version of dd for forensics and security
Fileless persistence, attacks and anti-forensic capabilties.
dcfldd - enhanced version of dd for forensics and security
Rootkit Detector for UNIX
Reveal encrypted files stored on a filesystem.
Illuminant inconsistencies for image splicing detection in forensics
Trace ScriptBlock execution for powershell v2
Binary EYE is a viewer of binary files with a built-in editor
A tiny data wiping library and tool.
🦀🦊 Snappy (Firefox morgue cache format) files de-compressor, works even if they're corrupted
Add a description, image, and links to the forensics topic page so that developers can more easily learn about it.
To associate your repository with the forensics topic, visit your repo's landing page and select "manage topics."