Wireless Forensics Framework In Python

FTK Imager a Forensics Tools For MAC OS X

This tool allows one to recover old RDP (mstsc) session information in the form of broken PNG files. These PNG files allows Red Team member to extract juicy information such as LAPS passwords or any sensitive information on the screen. Blue Team member can reconstruct PNG files to see what an attacker did on a compromised host. It is extremely u…

Hardware arduino based mouse emulator, preventing screen saver locking (eg. during forensic investigation)

Forensic Inode Analysis

Mouse jiggler written in AHK

Covert DD images to E01's using FTK Imager

A volatility plugin to detect Token Impersonation

A volatility plugin to parse Object Directories

A tool written in AHK to automate FTK imager for collection purposes.

Useful documents and utilities utilized in incident handling process to identify,contain and eradicate those who where illegally inside

This guide is for setting up Velociraptor in Kubernetes (AWS)

Automated forensic script hunting for cve-2019-19781

Cortex-Analyzers Modified - SecTeam/CERT/SOC Security orchestration tools on steroids

Survey of Electronic Fraud Cases in the Banking Industry using Digital Forensics tools

DFORC2 is a cloud-based digital forensics platform, developed at the RAND Corporation and backed by Autopsy and The Sleuth Kit. This repository is used to deploy the DFORC2 backend to AWS with Kubernetes. The backend also incorporates the autopsy-jar and spark-streaming-apps repositories. The DFORC2 frontend client comprises RAND's Linux-compati…