Send files for analysis in Cuckoo Sandbox from context menu

Scripts that mount and unmount HFS e01 images; based on SANS FOR518 method 1

A collection of algorithms for comparing the similarity of images using perceptual hashes

Tool to extract domains/IP's from files

Fast Incident Response

An Ansible role for deploying the Volatility memory forensics framework.

A simple Flask API for looking up hashes in the NSRL dataset

Tools for the Computer Incident Response Team 💻

A GPS Forensics Utility to Parse GPX Files

A sort of a toolkit to decrypt Dropbox Windows DBX files

A Java based utility for data or file hash generation.

Fast Incident Response client library written in Go

Remotely deploy this script back to Windows or Linux hosts and do remote acquisition for memory, logical, and physical images.

Python and WMI based incident response script

osquery manager

osquery connector

osquery fleet management suite

Custom analyzers for the Cortex (https://thehive-project.org/, https://github.com/CERT-BDF/Cortex)

Scripts that parse macOS data objects