Stars
A Volatility plugin to extract credentials from the memory of a OpenVPN client.
Volatility Framework plugin for extracting BitLocker FVEK (Full Volume Encryption Key)
UI for forensic filtering of filesystem mac times.
anarchivist / fido
Forked from openpreserve/fidoFormat Identification for Digital Objects (FIDO) is a command-line tool to identify the file formats of digital objects. It is designed for simple integration into automated work-flows.
Open source Python library for NTFS analysis
This is the development tree. Production downloads are at:
Digital Forensics Virtual File System (dfVFS)
Tool suite for inspecting NTFS artifacts.
Front-end package for memory capture and forensic tools
AFF is now being maintained at https://github.com/sshock/AFFLIBv3
It's a presentation framework based on the power of CSS3 transforms and transitions in modern browsers and inspired by the idea behind prezi.com.
Cross-platform, open-source shellbag parser
Cuckoo Sandbox is an automated dynamic malware analysis system
Pure Python parser for Windows Registry hives.
A framework that ease the use of the numerous forensic open source tools.
Tool to extract e-mail messages from Outlook Express DBX files.