evolve by JamesHabben
Web interface for the Volatility Memory Forensics Framework
created at April 14, 2015, 1:26 a.m.
SOC-Multitool by zdhenard42
A powerful and user-friendly browser extension that streamlines investigations for security professionals.
created at Jan. 3, 2023, 4:51 p.m.
imagemounter by ralphje
Command line utility and Python package to ease the (un)mounting of forensic disk images
created at Feb. 3, 2014, 10:27 a.m.
visualize_logs by keithjjones
A Python library and command line tools to provide interactive log visualization.
created at Oct. 11, 2016, 3:33 p.m.
catalyst by SecurityBrewery
Catalyst is an open source SOAR and ticket system that helps to automate alert handling and incident response processes
created at Dec. 12, 2021, 11:37 p.m.
MFT_Browser by kacos2000
$MFT directory tree reconstruction & FILE record info
created at Dec. 26, 2020, 2:28 a.m.
appcompatprocessor by mbevilacqua
"Evolving AppCompat/AmCache data analysis beyond grep"
created at April 2, 2017, 6:11 p.m.
CIRTKit by opensourcesec
Tools for the Computer Incident Response Team 
created at Oct. 19, 2015, 3:50 p.m.
fileintel by keithjjones
A modular Python application to pull intelligence about malicious files
created at Aug. 30, 2016, 5:35 p.m.
logdissect by dogoncouch
CLI utility and Python module for analyzing log files and other data.
created at Feb. 19, 2017, 8:31 p.m.
artifactcollector by forensicanalysis
🚨 The artifactcollector is a customizable agent to collect forensic artifacts on any Windows, macOS or Linux system
created at Jan. 3, 2020, 3:16 p.m.