Tools for forensics

Malware analysis evasion test suite.

High-speed forensic feature extractor.

Identify executable capabilities.

.NET assembly debugger and editor.

Capture SSL/TLS plaintext with eBPF.

IDA Pro emulation scripting framework.

jq for binary formats.

OSINT agent skill that geolocates where a photo was taken.

Terminal-based malware triage toolkit written in Rust

macOS and iOS forensic artifact parser

Firmware and IoT image identification and extraction.

SQL-powered endpoint visibility.

Mimikatz in pure Python.

Read-only MBR/GPT and file-signature inspection toolkit in Rust.

Command-line packet capture.

TCP/IP stream demultiplexer.

Trace any process, port, container or file back to what started it.