A rewrite of mactime, timeliner uses a real expression engine to parse and apply filtering logic, allowing complex queries like filtering events based on time, path, weekday, and date using a BPF syntax. Although still in alpha stage, its killer feature is the advanced expression engine.
A tool that uses graph theory to reveal hidden relationships and attack paths in an Active Directory environment.
dc3dd is a patch to the GNU dd program, tailored for forensic acquisition with features like hashing and file verification.
A tool for creating compact Linux memory dumps compatible with popular debugging tools.
A framework/scripting tool to standardize and simplify the process of scripting favorite Live Acquisition utilities for Incident Responders.
NBD is a userland implementation of the Network Block Device protocol, allowing for remote access to block devices over a network.
Malscan is a tool to scan process memory for YARA matches and execute Python scripts.
A library to access the Extensible Storage Engine (ESE) Database File (EDB) format used in various Windows applications.
Fabric Platform is a cybersecurity reporting solution that automates and standardizes report generation, offering a private-cloud platform, open-source tools, and community-supported templates.
Stay ahead in cybersecurity. Get the week's top cybersecurity news and insights in 8 minutes or less.
Wiz Cloud Security Platform is a cloud-native security platform that enables security, dev, and devops to work together in a self-service model, detecting and preventing cloud security threats in real-time.
Adversa AI is a cybersecurity company that provides solutions for securing and hardening machine learning, artificial intelligence, and large language models against adversarial attacks, privacy issues, and safety incidents across various industries.