Rifiuti2
Tool for analyzing Windows Recycle Bin INFO2 file
LiMEaide is a python application designed to remotely or locally dump RAM of a Linux client and create a volatility profile for later analysis on your local host. It simplifies Linux digital forensics by offering three primary modes of operation: Remote, Socket, and Locally. Remote mode initiates connection with SSH and transfers data over SFTP, Socket mode transfers the memory image over a TCP socket without writing to disk, and Locally mode maintains execution in its working directory without opening network sockets. For detailed usage, refer to the wiki.
Tool for analyzing Windows Recycle Bin INFO2 file
A bash script for automating Linux swap analysis for post-exploitation or forensics purposes.
A simple Golang application for storing NIST National Software Reference Library Reference Data Set (NSRL RDS) with md5 and sha1 hash lookup searches.
Dissect is a digital forensics & incident response framework that simplifies the analysis of forensic artefacts from various disk and file formats.
wxHexEditor is a free hex editor / disk editor with various data manipulation operations and visualization functionalities.
A Kernel fuzzer focusing on race bugs