Top 35 digital-forensics open source projects

Cortex Analyzers Repository

DFIRTrack - The Incident Response Tracking Application

IPED Digital Forensic Tool. It is an open source software that can be used to process and analyze digital evidence, often seized at crime scenes by law enforcement or in a corporate investigation by private examiners.

A collection of tools for forensic analysis

Everything related to Linux Forensics

TheHive: a Scalable, Open Source and Free Security Incident Response Platform

Awesome list of digital forensic tools

A python application designed to remotely dump RAM of a Linux client and create a volatility profile for later analysis on your local host.

Python API Client for TheHive

An AFF4 C++ implementation.

A curated list of awesome forensic analysis tools and resources

Huawei backup decryptor

TCP/IP packet demultiplexer. Download from:

Beagle is an incident response and digital forensics tool which transforms security logs and data into graphs.

CIRCL system forensic tools or a jumble of tools to support forensic

📇 Digital Forensics Artifact Repository (forensicanalysis edition)

Log what files are accessed by any Linux process

Educational, CTF-styled labs for individuals interested in Memory Forensics

Digging Deeper....

Cortex: a Powerful Observable Analysis and Active Response Engine

Documentation of TheHive

Digital Forensics Investigation Platform

documentation, scripts, tools related to Zena Forensics (http://blog.digital-forensics.it)

Cyber-investigation Analysis Standard Expression (CASE) Ontology

🚨 The artifactcollector is a customizable agent to collect forensic artifacts on any Windows, macOS or Linux system

Catalyst is an open source SOAR system that helps to automate alert handling and incident response processes

The Python implementation of the AFF4 standard.

A list of free and open forensics analysis tools and other resources

The Red Rabbit project is just what a hacker needs for everyday automation. Red Rabbit unlike most frameworks out there does not automate other peoples tools like the aircrack suite or the wifite framework, it rather has its own code and is raw source with over 270+ options. This framework might just be your everyday key to your workflow

MemProcFS-Analyzer - Automated Forensic Analysis of Windows Memory Dumps for DFIR

Cybersecurity Career Path

Carve file metadata from NTFS index ($I30) attributes

Information Security Library

ThePhish: an automated phishing email analysis tool

Telegram cache4.db parser