dfir — Gesundheit von Open-Source-Software

PyPI

81ExzellentGesundheitsindex

Build AI-powered security tools. 50+ hands-on labs covering ML, LLMs, RAG, threat detection, DFIR, and red teaming. Includes Colab notebooks, Docker environment, and CTF challenges.

Python · Jupyter Notebook★ 1574. Aug. 2026

Eigene Lizenz4. Aug. 2026 · Metriken 2.10.0

crates.io

80ExzellentGesundheitsindex

mandiant/macos-UnifiedLogs

A cross platform parser for Apple UnifiedLogs!

Rust★ 366↓ 2.429/Monat31. Juli 2026

Apache-2.031. Juli 2026 · Metriken 2.10.0

crates.io

78GutGesundheitsindex

SecurityRonin/ewf-forensic

Forensic integrity analysis and repair for EWF (Expert Witness Format / E01) images

Rust★ 0↓ 2.679/Monat13. Aug. 2026

Apache-2.013. Aug. 2026 · Metriken 2.10.0

crates.io

78GutGesundheitsindex

SecurityRonin/forensicnomicon

DFIR artifact catalog (6,554 artifacts, LOL/LOFL binaries, abusable sites) plus the normalized report vocabulary the SecurityRonin analyzer fleet shares — offline Rust library + 4n6query CLI

Rust★ 4↓ 11.7K/Monat22. Aug. 2026

Apache-2.022. Aug. 2026 · Metriken 2.10.0

PyPI

77GutGesundheitsindex

mentat-is/gulp

g(ULP) core backend and plugins

Python★ 67↓ 836/Monat17. Juli 2026

Eigene Lizenz17. Juli 2026 · Metriken 2.10.0

71GutGesundheitsindex

EvilBit-Labs/unifi_extract

Decrypt and explore UniFi backup files (.unf/.unifi) entirely offline — extract, decode the MongoDB dump, export sites

Go★ 028. Juli 2026

Apache-2.028. Juli 2026 · Metriken 2.10.0

crates.io

71GutGesundheitsindex

SecurityRonin/forensic-vfs

Read-only forensic VFS contracts composing evidence into one positioned-read byte edge — ArchiveOpen · ContainerOpen · VolumeSystemOpen · EncryptionOpen · FileSystemOpen — with recursive PathSpec locators. The contract crate every fleet reader implements.

Rust · TeX★ 0↓ 2.584/Monat8. Aug. 2026

Apache-2.08. Aug. 2026 · Metriken 2.10.0

crates.io

69GutGesundheitsindex

WithSecureLabs/chainsaw

Rapidly Search and Hunt through Windows Forensic Artefacts

Rust★ 3.600↓ 64/Monat17. Juli 2026

GPL-3.017. Juli 2026 · Metriken 2.10.0

69GutGesundheitsindex

optimuslabs-io/grokpatrol

Open-source, offline forensic scanner CLI tool designed to detect evidence of git repo collection or upload by the Grok Build CLI to xAI infrastructure.

Go★ 1218. Juli 2026

Apache-2.018. Juli 2026 · Metriken 2.10.0

PyPI

63MittelGesundheitsindex

ydkhatri/mac_apt

macOS (& ios) Artifact Parsing Tool

Python★ 1.06831. Juli 2026

MIT31. Juli 2026 · Metriken 2.10.0

crates.io

54MittelGesundheitsindex

SecurityRonin/state-history-forensic

State-history forensic vocabulary — zero-dependency [H] KNOWLEDGE-tier types and traits lifting each forensic navigation primitive to a time-indexed variant. No deps, no I/O.

Rust★ 0↓ 2.870/Monat29. Aug. 2026

Apache-2.029. Aug. 2026 · Metriken 2.10.0

48SchwachGesundheitsindex

ridgelinecyberdefence/vanguard

Cross-platform incident response toolkit. 28 pre-built use cases in a single zero-install binary: triage, threat hunting, memory forensics, disk collection, remote operations, and Velociraptor management. Works air-gapped, with automated timeline generation.

Go · HTML★ 15020. Juli 2026

MIT20. Juli 2026 · Metriken 2.10.0

—

20GefährdetGesundheitsindex

mthcht/ThreatHunting-Keywords

Awesome list of keywords and artifacts for Threat Hunting sessions

PowerShell · HTML · Python★ 6694. Aug. 2026

Keine Lizenz4. Aug. 2026 · Metriken 2.10.0

PyPI

19KritischGesundheitsindex

cisagov/CHIRP

A DFIR tool written in Python.

Python★ 1.0554. Aug. 2026

CC0-1.04. Aug. 2026 · Metriken 2.10.0

PyPI

19KritischGesundheitsindex

hosssein193m-ai/allykit

A powerful Python module offering excellent capabilities in web scraping, security, and meeting the standard needs of programmers.

Python★ 126. Juli 2026

MIT26. Juli 2026 · Metriken 2.10.0

17KritischGesundheitsindex

AlecRandazzo/Packrat

Live system forensic collector

Go★ 1631. Juli 2026

MIT31. Juli 2026 · Metriken 2.10.0

#dfir