PyPI · npm
prowler-cloud/prowler
Prowler is the world’s most widely used open-source cloud security platform that automates security and compliance across any cloud environment.
Apache-2.02026年8月27日 · 指标 2.10.0
全部标签
目录标签
#forensics
公开记录中带有此标签的全部仓库——标签来自其 GitHub 主题或软件包注册表发布的关键词。健康度量遵循与记录其余部分相同的版本化方法论。
35 条记录
PyPI
mvt-project/mvt
MVT (Mobile Verification Toolkit) helps with conducting forensics of mobile devices in order to find signs of a potential compromise.
自定义许可证2026年9月19日 · 指标 2.10.0
crates.io · Go · npm +1
VirusTotal/yara-x
A rewrite of YARA in Rust.
BSD-3-Clause2026年9月5日 · 指标 2.10.0
PyPI
sherlock-project/sherlock
Hunt down social media accounts by username across social networks
MIT2026年9月16日 · 指标 2.10.0
PyPI · crates.io
mkorman90/regipy
Regipy is an os independent python library for parsing offline registry hives
MIT2026年10月12日 · 指标 2.10.0
crates.io · PyPI
Yamato-Security/hayabusa
Hayabusa (隼) is a sigma-based threat hunting and fast forensics timeline generator for Windows event logs.
AGPL-3.02026年10月12日 · 指标 2.10.0
PyPI
wagga40/Zircolite
A standalone SIGMA-based detection tool for EVTX, Auditd and Sysmon for Linux logs
自定义许可证2026年10月19日 · 指标 2.10.0
PyPI
SpamScope/mail-parser
A tool that parses emails by enhancing the Python standard library, extracting all details into a comprehensive object.
Apache-2.02026年10月20日 · 指标 2.10.0
crates.io
mandiant/macos-UnifiedLogs
A cross platform parser for Apple UnifiedLogs!
Apache-2.02026年9月15日 · 指标 2.10.0
crates.io
SecurityRonin/forensicnomicon
DFIR artifact catalog (6,554 artifacts, LOL/LOFL binaries, abusable sites) plus the normalized report vocabulary the SecurityRonin analyzer fleet shares — offline Rust library + 4n6query CLI
Apache-2.02026年10月20日 · 指标 2.10.0
PyPI
attenlabs/hotato
Find what broke in your agent calls. Pin it so it never ships again. Local voice-agent call forensics and regression guards.
MIT2026年10月20日 · 指标 2.10.0
Go
L1ghtn1ng/traceguard
TraceGuard uses the eBPF subsystem of the linux kernel to get valuable insights to what your system is doing
MIT2026年10月21日 · 指标 2.10.0
crates.io
SecurityRonin/ewf-forensic
Forensic integrity analysis and repair for EWF (Expert Witness Format / E01) images
Apache-2.02026年9月18日 · 指标 2.10.0
Go
EvilBit-Labs/unifi_extract
Decrypt and explore UniFi backup files (.unf/.unifi) entirely offline — extract, decode the MongoDB dump, export sites
Apache-2.02026年9月14日 · 指标 2.10.0
crates.io
SecurityRonin/lzo
GPL-free, safe, no_std pure-Rust LZO1X decompressor — decode lzo1x_1 / lzo1x_999 streams (lzop, kernel/initramfs, btrfs, liblzo2) with zero C, zero dependencies, and #![forbid(unsafe_code)]; validated against liblzo2 and fuzz-hardened against malicious input.
Apache-2.02026年9月17日 · 指标 2.10.0
crates.io
WithSecureLabs/chainsaw
Rapidly Search and Hunt through Windows Forensic Artefacts
GPL-3.02026年9月10日 · 指标 2.10.0
crates.io
WithSecureOpenSource/chainsaw
Rapidly Search and Hunt through Windows Forensic Artefacts
GPL-3.02026年10月18日 · 指标 2.10.0
crates.io
SecurityRonin/forensic-vfs
Read-only forensic VFS contracts composing evidence into one positioned-read byte edge — ArchiveOpen · ContainerOpen · VolumeSystemOpen · EncryptionOpen · FileSystemOpen — with recursive PathSpec locators. The contract crate every fleet reader implements.
Apache-2.02026年9月17日 · 指标 2.10.0
PyPI
hed0rah/acidcat
Binary analysis and reverse-engineering for audio file formats and music-production hardware
MIT2026年9月10日 · 指标 2.10.0
Go
optimuslabs-io/grokpatrol
Open-source, offline forensic scanner CLI tool designed to detect evidence of git repo collection or upload by the Grok Build CLI to xAI infrastructure.
Apache-2.02026年9月11日 · 指标 2.10.0
PyPI
osintshifu/filegrail
Trace file provenance, metadata, telemetry, investigative pivots and relationships across files, browser history, OS traces and archives. Local, read-only, no network requests.
Apache-2.02026年9月19日 · 指标 2.10.0
PyPI
ydkhatri/mac_apt
macOS (& ios) Artifact Parsing Tool
MIT2026年9月15日 · 指标 2.10.0
crates.io
SecurityRonin/state-history-forensic
State-history forensic vocabulary — zero-dependency [H] KNOWLEDGE-tier types and traits lifting each forensic navigation primitive to a time-indexed variant. No deps, no I/O.
Apache-2.02026年10月20日 · 指标 2.10.0
PyPI
6abd/horus
An OSINT / digital forensics tool built in Python
GPL-3.02026年9月8日 · 指标 2.10.0
npm
whisper-sec/whisper-graph-mcp
Open-source MCP server for WhisperGraph — query the internet's infrastructure & threat-intel graph (DNS, BGP, GeoIP, WHOIS) via Cypher.
Apache-2.02026年9月18日 · 指标 2.10.0
Go
philcantcode/go-forensic-artifacts
Local-first Go library for immutable forensic evidence, provenance, and reproducible artifacts.
MIT2026年10月20日 · 指标 2.10.0
Go
aoiflux/libntfs
LIBNTFS is a Go library for parsing NTFS. The library is designed following industry best practices and informed by the reference implementation from The Sleuth Kit (TSK).
MIT2026年10月18日 · 指标 2.10.0
crates.io
SecurityRonin/safe-read
Panic-free bounded integer readers over untrusted byte slices (no_std, no deps)
Apache-2.02026年9月17日 · 指标 2.10.0
crates.io
ankit-chaubey/Archivum
Deterministic TAR-based backups with per-file SHA-256, Blake3-sealed index, split archives, and incremental updates
Apache-2.02026年10月19日 · 指标 2.10.0
Go
ridgelinecyberdefence/vanguard
Cross-platform incident response toolkit. 28 pre-built use cases in a single zero-install binary: triage, threat hunting, memory forensics, disk collection, remote operations, and Velociraptor management. Works air-gapped, with automated timeline generation.
MIT2026年9月12日 · 指标 2.10.0