Acquire
A digital artifact extraction framework for extracting data from volatile memory (RAM) samples, providing visibility into the runtime state of a system.
Digital forensics for incident response. Uncover digital evidence to understand and resolve security breaches effectively.
Incident Management 210
A digital artifact extraction framework for extracting data from volatile memory (RAM) samples, providing visibility into the runtime state of a system.
Second-order subdomain takeover scanner
Open Source computer forensics platform with modular design for easy automation and scripting.
Python tool for remote memory acquisition
Recover event log entries from an image by heuristically looking for record structures.
A software utility with forensic tools for smartphones, offering powerful data extraction and decoding capabilities.
A console program for file recovery through data carving.
CyLR is a Live Response Collection tool for quickly and securely collecting forensic artifacts from hosts with NTFS file systems.
A Windows Registry hive extraction library that reads and writes Windows Registry 'hive' binary files.
Windows event log fast forensics timeline generator and threat hunting tool.
Remote Acquisition Tool
MFT and USN parser for direct extraction in filesystem timeline format with YARA rule support.
A forensics tool for tracking USB device artifacts on Linux machines.
A forensics tool for tracking USB device artifacts on Linux machines.
Web interface for the Volatility Memory Analysis framework with advanced features.
Exiv2 is a C++ library and command-line utility for image metadata manipulation.
Dissect is a digital forensics & incident response framework that simplifies the analysis of forensic artefacts from various disk and file formats.
A tool for triaging crash files with various output formats and debugging engine options.
A comprehensive guide to incident response and computer forensics, covering the entire lifecycle of incident response and remediation.
A library to access and read QEMU Copy-On-Write (QCOW) image file formats with support for zlib compression and AES-CBC encryption.
A Python tool for in-depth PDF analysis and modification.
A next-generation crawling and spidering framework for extracting data from websites
Tool for parsing NTFS journal files, $Logfile, and $MFT.
A collection of PowerShell modules for artifact gathering and reconnaissance of Windows-based endpoints.
Start your 7-day free trial and get your AI Visibility Score in about a minute. See exactly where you stand, where competitors are beating you, and the ranked fixes to get into the answer. Cancel anytime before the trial ends.
7-day free trial. Cancel anytime before it ends. Trusted by 500+ B2B SaaS teams.