ydkhatri Goto Github PK

010_templates

010 editor templates for parsing various formats

achoir

Windows Live Artifacts Acquisition Script

aleapp

Android Logs Events And Protobuf Parser

android

Android forensics related scripts

android-usagestats-xml-parser

Android Usagestats XML Parser

apfs

Package apfs implements an Apple File System(apfs) bindings for Go

apfs-fuse

FUSE driver for APFS (Apple File System)

apfs.ksy

APFS filesystem format for Kaitai Struct

apfs_010

010 template for apfs

appx-analysis

Scripts and tools created for appx analysis talk (Magnet summit 2019)

awesome-forensics

A curated list of awesome forensic analysis tools and resources

awesome-incident-response

A curated list of tools for incident response

bash_basics

biplist

This project now lives on BitBucket.

blackboxprotobuf

Blackbox protobuf is a library for decoding and modifying arbitrary protobuf messages without the protobuf type definition.

bmc-tools

RDP Bitmap Cache parser

dissect.esedb

A Dissect module implementing a parser for Microsofts Extensible Storage Engine Database (ESEDB), used for example in Active Directory, Exchange and Windows Update.

dtformats

Collection of data formats

go-ntfs

An NTFS file parser in Go

ileapp

iOS Logs, Events, And Plists Parser

jarp

Just Another broken Registry Parser (JARP)

kapefiles

This repository serves as a place for community created Targets and Modules for use with KAPE.

mac_apt

macOS (& ios) Artifact Parsing Tool

macforensics

Scripts to process macOS forensic artifacts

macos_fe

Tools for macOS Forensic Bootable media

macosac

Forensic Artifact Collection Tool for macOS

nska_deserialize

NSKeyedArchive plist deserializer

onedrive

OneDrive log .ODL reader

osx-and-ios-security-awesome

OSX and iOS related security tools

plistutils

Python utilities related to plists