A tool to view and remove Windows JumpLists
UAL Timeline Generator — User Access Logging Timeliner
A comprehensive Model Context Protocol (MCP) server for Android device forensic data acquisition using Android Debug Bridge (ADB).
Ferramenta pericial desenvolvida para agilizar a triagem inicial e análise de evidências digitais, além de permitir a Aquisição Forense (Bit-a-bit) de unidades lógicas e físicas. Um "canivete suíço" offline e portátil que faz o trabalho pesado de extração de dados de forma rápida, segura e em lote.
Practical labs, case studies, and investigation notes for CHFI v11 — covering digital forensics, malware forensics, incident response, evidence collection, and analysis tools.
Open-source ReFS forensics (Resilient File System v3.4-v3.14): file listing, super-timeline, USN + MLog journals, deleted-file recovery, snapshots plus a byte-level on-disk reference.
A professional security research study on Linux system resilience and kernel-level protection mechanisms. Analysis of boot process integrity, direct syscall implementation, anti-debugging, and sandbox evasion. An in-depth exploration of OS durability under adversarial stress.
From Shadows to Sun: A high-resolution forensics suite for absolute coordinate determination, from triage to testimony.
A Docker-based Python tool for analyzing PCAP network traffic files. Extracts insights, detects anomalies, and generates detailed reports from packet captures.
Forensics Tooling. Current status is that the repo contains tooling to parse SMBv1 and SMBv2 traffic.
To associate your repository with the forensics-analysis topic, visit your repo's landing page and select "manage topics."