⭐️ A curated list of awesome forensic analysis tools and resources
-
Updated
Sep 26, 2026
#
computer-forensics
Here are 67 public repositories matching this topic...
❄️ PcapXray - A Network Forensics Tool - To visualize a Packet Capture offline as a Network Diagram including device identification, highlight important communication and file extraction
python network-diagram security pcap packets network tor traffic forensics cybersecurity computer-forensics forensic-analysis tor-traffic
-
Updated
May 1, 2026 - Python
UAC is a powerful and extensible incident response tool designed for forensic investigators, security analysts, and IT professionals. It automates the collection of artifacts from a wide range of Unix-like systems, including AIX, ESXi, FreeBSD, Linux, macOS, NetBSD, NetScaler, OpenBSD and Solaris.
macos linux shell freebsd security terminal openbsd script esxi incident-response forensics dfir netscaler collector netbsd solaris aix triage computer-forensics live-response
-
Updated
Oct 26, 2026 - Shell
The best tools and resources for forensic analysis.
security analysis scanner hacking forensics digital-forensics computer-forensics forensic-analysis security-tools forensics-tools
-
Updated
Feb 24, 2023
Factual-rules-generator is an open source project which aims to generate YARA rules about installed software from a machine.
-
Updated
Jan 18, 2022 - Python
-
Updated
Dec 23, 2024
unix_collector is a Live Response collection script for Incident Response on UNIX-like systems using native binaries. Supports AIX, Android, ESXi, FreeBSD, Linux, macOS, NetBSD, NetScaler, OpenBSD and Solaris systems artifacts.
linux freebsd security unix openbsd script esxi incident-response posix forensics dfir solaris triage computer-forensics blueteam dfir-automation live-response forensics-tools
-
Updated
Jun 18, 2026 - Shell
This will compile a list of Android, iOS, Linux malware techniques for attacking and detection purposes.
-
Updated
Nov 29, 2022
Kali Linux in Docker + Ubuntu 26.04 in Docker for Bug Bounty, Penetration Testing, Security Research, Computer Forensics and Reverse Engineering. Kali Linux inside with Docker with or without support with systemd, repository also contains Proof of Concept with kind (Kubernetes in Docker) to test Kali Linux with enabled systemd in K8s cluster
docker dockerfile ubuntu docker-compose makefile systemd cybersecurity bug-bounty security-vulnerability kali-linux vulnerability-detection vulnerability-scanners kali computer-forensics security-tools docker-kali-linux buildkit pentesting-tools trivy
-
Updated
Aug 17, 2026 - Dockerfile
A Volatility plugin for finding sqlite database rows
-
Updated
Jul 14, 2019 - Python
Forensic System: Professionelles Analyse-Tool für Computer- und Netzwerk-Forensik (DFIR). Bietet automatische Korrelation von Endpunkt-Prozessen und Netzwerk-Traffic, RAM-Analyse und gerichtsverwertbare Beweissicherung.
incident-response digital-forensics computer-forensics pcap-analysis it-forensics endpoint-forensics
-
Updated
Sep 16, 2026
The forensic analysis write-up / walkthrough for forensic disk image.
-
Updated
Jul 23, 2022
Guymager is a free forensic imager for media acquisition. It is based on libewf and libguytools.
-
Updated
Feb 23, 2022 - C++
An updated C# port of X-Ways X-Tensions API.
-
Updated
Mar 12, 2018 - C#
Dump a process memory and extract data based on regular expressions.
windows security c-plus-plus incident-response reverse-engineering penetration-testing bug-bounty threat-hunting offensive-security ethical-hacking computer-forensics red-team-engagement defensive-security dump-memory windows-penetration-testing
-
Updated
Apr 25, 2023 - C++
LiveDiff is a portable system-level differencing tool for Microsoft Windows-based operating systems
-
Updated
Jan 9, 2026 - C
Access Expert Witness Format (ewf/E01/L01) files using Golang
-
Updated
Mar 25, 2019 - Go
Extract valid or partially valid domain names and IPs from malicious or invalid URLs.
python url security extractor incident-response domain penetration-testing ip bug-bounty threat-hunting domain-name ethical-hacking computer-forensics threat-intelligence red-team-engagement defensive-security
-
Updated
Jun 19, 2023 - Python
Practical labs, case studies, and investigation notes for CHFI v11 — covering digital forensics, malware forensics, incident response, evidence collection, and analysis tools.
network-forensics data-acquisition digital-forensics computer-forensics memory-forensics mobile-forensics evidence-collection windows-forensics disk-forensics cyber-forensics linux-forensics malware-forensics chfi cyber-investigation cybercrime-investigation log-anaysis forensics-analysis
-
Updated
Aug 31, 2025
A python-based tool to extract forensic info from ActivitiesCache.db (Windows Activity Timeline)
-
Updated
May 3, 2023 - Python
Add this topic to your repo
To associate your repository with the computer-forensics topic, visit your repo's landing page and select "manage topics."