Uncurated Links

...a holding pen, not a recommendation list.

2087 links · page 16 of 35

filter this page:

• 0901 Browser History Viewer - Free tool to view web browser history
  foxtonforensics.com
  url: https://www.foxtonforensics.com/browser-history-viewer/
• 0902 GitHub - gustavoparedes/Browser-Reviewer: Browser Reviewer is a portable forensic tool for analyzing user activity in Firefox and Chrome-based browsers. It extracts and displays browsing history, downloads, bookmarks, and autofill data. The tool allows analysts to tag, comment, and export reports in PDF. · GitHub
  github.com
  url: https://github.com/gustavoparedes/Browser-Reviewer
• 0903 GitHub - simsong/bulk_extractor: This is the development tree. Production downloads are at: · GitHub
  github.com
  url: https://github.com/simsong/bulk_extractor
• 0904 Bulk Extractor with Record Carving | Forensicist
  kazamiya.net
  url: https://www.kazamiya.net/en/bulk_extractor-rec
• 0905 GitHub - WithSecureLabs/chainsaw: Rapidly Search and Hunt through Windows Forensic Artefacts · GitHub
  github.com
  source: https://github.com/countercept/chainsaw
  resolved: https://github.com/WithSecureLabs/chainsaw
• 0906 GitHub - markmckinnon/cLeapp: Chrome Logs Events and Protobuf Parser · GitHub
  github.com
  url: https://github.com/markmckinnon/cLeapp
• 0907 GitHub - dwmetz/CyberPipe: An easy to use PowerShell script to collect memory and disk forensics for DFIR investigations. · GitHub
  github.com
  url: https://github.com/dwmetz/CyberPipe
• 0908 GitHub - AmgdGocha/DriveFS-Sleuth: DriveFS Sleuth is a Python tool that automates investigating Google Drive File Stream disk artifacts, the tool has been developed based on research that has been performed by mounting different scenarios and noting down the changes in the Google Drive File Stream disk artifacts. · GitHub
  github.com
  url: https://github.com/AmgdGocha/DriveFS-Sleuth
• 0909 Live System Analysis: Discovering Encrypted Disk Volumes | ElcomSoft blog
  blog.elcomsoft.com
  url: https://blog.elcomsoft.com/2020/07/live-system-analysis-discovering-encrypted-disk-volumes/
• 0910 GitHub - MarkBaggett/ese-analyst: This is a set of tools for doing forensics analysis on Microsoft ESE databases. · GitHub
  github.com
  url: https://github.com/MarkBaggett/ese-analyst
• 0911 GitHub - stuxnet999/EventTranscriptParser: Python based tool to extract forensic info from EventTranscript.db (Windows Diagnostic Data) · GitHub
  github.com
  url: https://github.com/stuxnet999/EventTranscriptParser
• 0912 GitHub - AbdulRhmanAlfaifi/Fennec: Artifact collection tool for *nix systems · GitHub
  github.com
  url: https://github.com/AbdulRhmanAlfaifi/Fennec
• 0913 FEX Imager™ - GetData Forensics
  getdataforensics.com
  url: https://getdataforensics.com/product/fex-imager/
• 0914 Untitled page on d1kpmuwb7gvu1i.cloudfront.net
  d1kpmuwb7gvu1i.cloudfront.net
  url: https://d1kpmuwb7gvu1i.cloudfront.net/Imgr/4.7.3.81%20Release/Exterro_FTK_Imager_%28x64%29-4.7.3.81.exe
• 0915 Untitled page on d1kpmuwb7gvu1i.cloudfront.net
  d1kpmuwb7gvu1i.cloudfront.net
  url: https://d1kpmuwb7gvu1i.cloudfront.net/8.2/ImagerPro/ImagerPro_8.2.0.26.zip
• 0916 GitHub - Lazza/Fuji: macOS forensic acquisition made simple · GitHub
  github.com
  url: https://github.com/Lazza/Fuji
• 0917 GitHub - obsidianforensics/hindsight: Browser forensics tool for Google Chrome (and other Chromium-based browsers) · GitHub
  github.com
  url: https://github.com/obsidianforensics/hindsight
• 0918 GitHub - cocopollo/HunterM: macOS Artifacts · GitHub
  github.com
  url: https://github.com/cocopollo/HunterM
• 0919 GitHub - williballenthin/INDXParse: Tool suite for inspecting NTFS artifacts. · GitHub
  github.com
  url: https://github.com/williballenthin/INDXParse
• 0920 GitHub - sepinf-inc/IPED: IPED Digital Forensic Tool. It is an open source software that can be used to process and analyze digital evidence, often seized at crime scenes by law enforcement or in a corporate investigation by private examiners. · GitHub
  github.com
  url: https://github.com/sepinf-inc/IPED
• 0921 GitHub - linuxartifactparser/LAP · GitHub
  github.com
  url: https://github.com/linuxartifactparser/LAP
• 0922 GitHub - alex-cart/LEAF: Linux Evidence Acquisition Framework · GitHub
  github.com
  url: https://github.com/alex-cart/LEAF
• 0923 GitHub - 0xHasanM/LogonSessionAuditor: This tool parses Windows EVTX logs to extract login and logout sessions from a security.evtx file. It uses a Tkinter GUI to let you select the EVTX file and specify a time for correlating login and logout events. · GitHub
  github.com
  url: https://github.com/0xHasanM/LogonSessionAuditor
• 0924 GitHub - ydkhatri/mac_apt: macOS (& ios) Artifact Parsing Tool · GitHub
  github.com
  url: https://github.com/ydkhatri/mac_apt
• 0925 GitHub - a1l4m/Mac-Triage: A powerful macOS triage collection tool designed for forensic analysis. It gathers critical system artifacts such as FSEvents, Spotlight, Unified Logs, user data and many more, while preserving the original macOS file system structure. Ideal for incident response, digital forensics, and security investigations. · GitHub
  github.com
  url: https://github.com/a1l4m/Mac-Triage
• 0926 GitHub - mnrkbys/macosac: Forensic Artifact Collection Tool for macOS · GitHub
  github.com
  url: https://github.com/mnrkbys/macosac
• 0927 Untitled page on storage.googleapis.com
  storage.googleapis.com
  source: https://magnet.tools/MagnetEncryptedDiskDetector
  resolved: https://storage.googleapis.com/mfi-files/free_tools/EDD/EDDv310.zip
• 0928 Untitled page on storage.googleapis.com
  storage.googleapis.com
  source: https://magnet.tools/MagnetResponse
  resolved: https://storage.googleapis.com/mfi-files/free_tools/MagnetRESPONSE/MagnetRESPONSEv171_Self_Extracting_Archive.exe
• 0929 GitHub - jschicht/Mft2Csv: Extract $MFT record info and log it to a csv file. · GitHub
  github.com
  url: https://github.com/jschicht/Mft2Csv
• 0930 GitHub - kacos2000/MFT_Browser: $MFT directory tree reconstruction & FILE record info · GitHub
  github.com
  url: https://github.com/kacos2000/MFT_Browser
• 0931 blueangel's ForensicNote - NTFS Log Tracker
  sites.google.com
  url: https://sites.google.com/site/forensicnote/ntfs-log-tracker
• 0932 GitHub - ANSSI-FR/bmc-tools: RDP Bitmap Cache parser · GitHub
  github.com
  url: https://github.com/ANSSI-FR/bmc-tools
• 0933 GitHub - BSI-Bund/RdpCacheStitcher: RdpCacheStitcher is a tool that supports forensic analysts in reconstructing useful images out of RDP cache bitmaps. · GitHub
  github.com
  url: https://github.com/BSI-Bund/RdpCacheStitcher
• 0934 GitHub - keydet89/RegRipper3.0: RegRipper3.0 · GitHub
  github.com
  url: https://github.com/keydet89/RegRipper3.0
• 0935 GitHub - skydive241/Regshot-Advanced: This is a fork of Regshot (original found at https://sourceforge.net/projects/regshot/) with very enhanced functionality. · GitHub
  github.com
  url: https://github.com/skydive241/Regshot-Advanced
• 0936 GitHub - abrignoni/RLEAPP: Returns Logs Events And Properties Parser · GitHub
  github.com
  url: https://github.com/abrignoni/RLEAPP
• 0937 ShadowExplorer.com - Downloads
  shadowexplorer.com
  url: https://www.shadowexplorer.com/downloads.html
• 0938 GitHub - strozfriedberg/sidr: Search Index Database Reporter · GitHub
  github.com
  url: https://github.com/strozfriedberg/sidr
• 0939 GitHub - stark4n6/TeraLogger: A Teracopy history log parser · GitHub
  github.com
  url: https://github.com/stark4n6/TeraLogger
• 0940 Thumbcache Viewer - Extract thumbnail images from the thumbcache_*.db and iconcache_*.db database files.
  thumbcacheviewer.github.io
  url: https://thumbcacheviewer.github.io/
• 0941 Thumbs Viewer - Extract thumbnail images from the Thumbs.db, ehthumbs.db, ehthumbs_vista.db, Image.db, Video.db, TVThumb.db, and musicThumbs.db database files.
  thumbsviewer.github.io
  url: https://thumbsviewer.github.io/
• 0942 GitHub - google/timesketch: Collaborative forensic timeline analysis · GitHub
  github.com
  url: https://github.com/google/timesketch
• 0943 GitHub - Gadzhovski/TRACE-Forensic-Toolkit: Digital forensic analysis tool that provides a user-friendly interface for investigating disk images. · GitHub
  github.com
  url: https://github.com/Gadzhovski/TRACE-Forensic-Toolkit
• 0944 GitHub - plonxyz/triagectl · GitHub
  github.com
  url: https://github.com/plonxyz/triagectl
• 0945 GitHub - tclahr/uac: UAC is a powerful and extensible incident response tool designed for forensic investigators, security analysts, and IT professionals. It automates the collection of artifacts from a wide range of Unix-like systems, including AIX, ESXi, FreeBSD, Linux, macOS, NetBSD, NetScaler, OpenBSD and Solaris. · GitHub
  github.com
  url: https://github.com/tclahr/uac
• 0946 Download USB Detective Community - USB Detective
  usbdetective.com
  url: https://usbdetective.com/community-download/
• 0947 GitHub - CyberCX-DFIR/usnjrnl_rewind: USN Journal full path builder · GitHub
  github.com
  url: https://github.com/CyberCX-DFIR/usnjrnl_rewind
• 0948 GitHub - Velocidex/velociraptor: Digging Deeper.... · GitHub
  github.com
  url: https://github.com/Velocidex/velociraptor
• 0949 GitHub - abrignoni/VLEAPP: Vehicle Logs Events And Properties Parser · GitHub
  github.com
  url: https://github.com/abrignoni/VLEAPP
• 0950 GitHub - sujayadkesar/vscexplorer: Volume Shadow Copy Explorer · GitHub
  github.com
  url: https://github.com/sujayadkesar/vscexplorer
• 0951 GitHub - Yamato-Security/WELA: Windows Event Log Auditor · GitHub
  github.com
  url: https://github.com/Yamato-Security/WELA
• 0952 GitHub - kacos2000/Win10LiveInfo: Windows 10 Live Information viewer · GitHub
  github.com
  url: https://github.com/kacos2000/Win10LiveInfo
• 0953 GitHub - digitalsleuth/WIN-FOR: Windows Forensics Environment Builder · GitHub
  github.com
  url: https://github.com/digitalsleuth/WIN-FOR
• 0954 Build Your Lab – Blue Cape Security
  bluecapesecurity.com
  url: https://bluecapesecurity.com/build-your-lab/
• 0955 BYOM - Build Your Own Methodology (in Mobile Forensics)
  blog.digital-forensics.it
  url: https://blog.digital-forensics.it/2020/04/byom-build-your-own-methodology-in.html
• 0956 Creating a Full File System image from a jailbroken iOS device — Hexordia
  hexordia.com
  url: https://www.hexordia.com/blog/6bp27c41pqg4n8wmb6r093kn9r5mc8
• 0957 GitHub - DFIRScience/DFIRCommunityHardwareFund: Repository to track community hardware, data and funding. · GitHub
  github.com
  url: https://github.com/DFIRScience/DFIRCommunityHardwareFund
• 0958 Part 1: Step-by-step macOS Setup for iOS Research (via @bizzybarney) — mac4n6.com
  mac4n6.com
  url: http://www.mac4n6.com/blog/2020/8/13/step-by-step-macos-setup-for-ios-research-via-bizzybarney
• 0959 Part 2: Step-by-step iPhone Setup for iOS Research (via @bizzybarney) — mac4n6.com
  mac4n6.com
  url: http://www.mac4n6.com/blog/2020/8/23/step-by-step-iphone-setup-for-ios-research-via-bizzybarney
• 0960 Part 3: Step-by-step Tooling for iOS Research (via @bizzybarney) — mac4n6.com
  mac4n6.com
  url: http://www.mac4n6.com/blog/2021/3/21/part-3-step-by-step-tooling-for-ios-research-via-bizzybarney