ForensicTools/albinohatbreakme
Public repository.
Discovered public repositories for ForensicTools in the GitHub catalog.
Public repository.
Hotaru visualizes the contents of a drive. It provides a quick way to see where large amounts of certain file types are located, as well as showing where large amounts of files have been deleted. It will also potentially provide a timeline of changes on the drive.
This tool will recursively navigate through a flie system and record the created, modified, and access times and then place them on a time line for easy viewing capabilities. Possibly going to be able to access the individual files from the timeline.
GRREAT is a tool written in Python that will integrate with Google GRR. It will allow the user to hash the contents of a box with a piecewise algorithm and store the hashes. The user could later hash the contents again to determine what has been changed and the extent of those changes.
This is a java-based tool to extract web browsing history and extensions and display in a variety of formats - both raw data and visual.
OSACT is a collection of python modules aimed at the collection and analysis/presentation of forensically interesting artifacts on a Windows machine. It is primarily intended to be run against a live machine rather than a dead box or disk image.
Talon is a Python application that will allow a user to perform a more thorough forensic analysis of a Twitter profile by analyzing the content, location, media, and chronological activity of a given username.
This project seeks certain or all types of files on a box and displays the information in a visual format.
This tool pulls browsing history data and visualizes it into : graphs showing how often someone visits a site graphs showing where the servers of the site are located. shows location of where a website is hosted on a map.
The tool will show notifications when the system is being remoted into with tools such as Powershell Remoting(WinRM) or PSExec.
BitHash takes advantage of the ".torrent" file format - specifically the "pieces" field in the file
A tool to search the memory for strings and patterns with suspicious, illegal or immoral connotation. Searches memory for words and patterns based on past and current news of illegal activities or threats. Finding matches, it will analyze and provide a clear and readable summary to the user.
MEMCoin will indicate if a bitcoin wallet exists, will pull the contents of memory and search for indicators that might advance access.
Tool for Apple Time Machine backup analysis.
Tool to analyze and create a profile of given operating systems based on time stamp information. Will organize time data in readable format, provide time-stamp based OS comparison, and indicate probability of having been "Timestomped".
Extensible Forensic Framework
Visualization tool to scan image files for time, GPS, camera data and plot on interactive map as thumbnails with timeline scrubbing.
A tool to extract memory locations *not* allocated by the symbol table.
Goal is to create a monitor of both Bluetooth and Wi-Fi traffic. Using this traffic we will attempt to track and analyze movement around a location.
This tool will recursively analyze photos in a directory, aggregate and display their metadata in an organized manner, and plot the location of all of the photos on Google Maps. Will most likely be written in Perl and use one of the various Google Maps modules for Perl.
This tool will take a collection of images, extract metadata, and analyze against data from other images metadata to reveal patterns. Results will be displayed in a graphical form. Front-end: php. Back-end: Python. Other tools such as JHead, ExifTool, and exif-py may be used for metadata extraction.
A memory analyzer that creates an image of a device’s memory, encrypts and sends to a server for further analysis.
Public repository.
All-in-one imager/hasher/OOV grabber
USB tool for memory imaging
Promisc mode detection tool
tool to map downloaded files to their directories
Front-end tool for Volatility framework
a powerful strings extractor/analyzer
image classification tool
image gps mapper mashup
Front-end package for memory capture and forensic tools
Script that dumps running process memory from Linux systems using /proc.
Forensic Tool
Public repository.
Image Exif Data Parser for JPEG and TIFF images
strings.py
Forensics Tool Project
Tool to carve files and paritions from image files using sleuthkit
Tool to analyze Skype communications
fMem - Perl Front End
Exif data details for forensics
gui-for-mactime-tool_forensics
forked from http://sourceforge.net/projects/flsmac/
forked from http://sourceforge.net/projects/imageovernet/
forked from http://sourceforge.net/projects/irecover/