sustainablelobster

The Cyber Swiss Army Knife - a web app for encryption, encoding, compression and data analysis

A forensic utility for converting data found on desktop and mobile devices into human-readable timestamps.

Arsenal Image Mounter mounts the contents of disk images as complete disks in Microsoft Windows.

Android Logs Events And Protobuf Parser

Web browser forensics for Google Chrome/Chromium

Web browser forensics for Google Chrome/Chromium

Tableau Forensic Imager (TIM) is Tableau's free forensic imaging software application.

A tool for creating isolated virtual python environments.

Volatility is the world's most widely used framework for extracting digital artifacts from volatile memory (RAM) samples.

Extract $MFT record info and log it to a csv file.

Parser for $LogFile on NTFS

Fast suspicious file finder for incident response.

FullEventLogView displays the details of all events from the event log of Windows (Including the event description).

bulk_extractor is a high-performance digital forensics exploitation tool.

Hibernation Recon extracts forensic data from Windows hibernation files.

iOS Logs, Events, And Plists Parser

Parser for $UsnJrnl on NTFS

Simple IOC and Incident Response Scanner

Emulates the Sysinternals Autoruns tool, but for DFIR purposes e.g. multi user processing