Margarita Shotgun
Python tool for remote memory acquisition
A rewrite of mactime, timeliner uses a real expression engine to parse and apply filtering logic, allowing complex queries like filtering events based on time, path, weekday, and date using a BPF syntax. Although still in alpha stage, its killer feature is the advanced expression engine.
Python tool for remote memory acquisition
A command-line tool for creating hex dumps, converting between binary and human-readable representations, and patching binary files.
A tool for discovering, analyzing, and remedying sensitive data
Comprehensive digital forensics and incident response platform for law enforcement, corporate, and academic institutions.
A user-friendly and fast Forensic Analysis tool with features like tagging files and generating preview reports.
An anti-forensic Linux Kernel Module kill-switch for USB ports.