Pinned Loading

1. volatilityfoundation/volatility volatilityfoundation/volatility Public

   An advanced memory forensics framework

   Python 7.4k 1.3k

2. google/timesketch google/timesketch Public

   Collaborative forensic timeline analysis

   Python 2.6k 589

3. williballenthin/python-registry williballenthin/python-registry Public

   Pure Python parser for Windows Registry hives.

   Python 427 101

4. AnalyzePDF AnalyzePDF Public

   Tool to help analyze PDF files

   Python 176 41

5. NoMoreXOR NoMoreXOR Public

   Tool to help guess a files 256 byte XOR key by using frequency analysis

   Python 86 18

6. IR IR Public

   Some dfir stuff

   Python 31 8