Tools for forensics

Honeytoken tripwire for the Shai-Hulud npm worm.

Collaborative forensic timeline analysis platform.

Unix-like artifact collector.

Ultimate Packer for eXecutables.

Zero-install cross-platform incident response and DFIR toolkit.

Endpoint visibility and DFIR.

Memory forensics framework.

Open-source EDR for Windows.

Open-source XDR and SIEM.

Network protocol analyzer.

Pattern matching for malware research.

Community YARA rule repository.

Open-source threat-intel platform.

Network analysis framework.

Malware analysis evasion test suite.

High-speed forensic feature extractor.

Identify executable capabilities.

.NET assembly debugger and editor.

Capture SSL/TLS plaintext with eBPF.

IDA Pro emulation scripting framework.

jq for binary formats.

Terminal-based malware triage toolkit written in Rust

macOS and iOS forensic artifact parser

SQL-powered endpoint visibility.