timeliner
A rewrite of mactime, timeliner uses a real expression engine to parse and apply filtering logic, allowing complex queries like filtering events based on time, path, weekday, and date using a BPF syntax. Although still in alpha stage, its killer feature is the advanced expression engine.
FEATURES
SIMILAR TOOLS
A user-friendly and fast Forensic Analysis tool with features like tagging files and generating preview reports.
A powerful tool for analyzing and visualizing system activity timelines.
Accessing databases stored on a machine by the Chrome browser and dumping URLs found.
A free, open source collection of tools for forensic artifact and image analysis.
An extensible network forensic analysis framework with deep packet analysis and plugin support.
WinSearchDBAnalyzer can parse and recover records in Windows.edb, providing detailed insights into various data types.
Malscan is a tool to scan process memory for YARA matches and execute Python scripts.
PINNED
Mandos
Fractional CISO service that helps B2B companies implement security leadership to win enterprise deals, achieve compliance, and develop strategic security programs.
Checkmarx SCA
A software composition analysis tool that identifies vulnerabilities, malicious code, and license risks in open source dependencies throughout the software development lifecycle.
Orca Security
A cloud-native application protection platform that provides agentless security monitoring, vulnerability management, and compliance capabilities across multi-cloud environments.
DryRun
A GitHub application that performs automated security code reviews by analyzing contextual security aspects of code changes during pull requests.