Tools for forensics

Windows ETW provider browser and trace inspector.

Malware analysis automation.

Fast Incident Response platform.

Extract obfuscated strings from malware.

Dynamic network analysis for malware.

Runtime security for containers.

Adversary tradecraft detection on Windows.

Osquery-powered device management.

NSA's open-source reverse engineering suite.

OSINT tracker for IP addresses, phone numbers and usernames.

Recover Go symbol info from binaries.

Open log management.

The Hunting ELK stack.

Windows event log threat hunter.

Chrome/Chromium browser forensics.

Open-source digital forensics processor.

Hex editor for reverse engineers.

Map the associations of a private Instagram account.

Manage threat intel at scale.

CPU-based password cracker.

Visualize Windows logon events.

Simple IOC and YARA scanner.

Threat intelligence sharing platform.

Microsoft Threat Intelligence in Python.