Topic: "sleuthkit"
sleuthkit/sleuthkit
The Sleuth Kit® (TSK) is a library and collection of command line digital forensics tools that allow you to investigate volume and file system data. The library can be incorporated into larger digital forensics tools and the command line tools can be directly used to find evidence.
Language: C++ - Size: 62 MB - Last synced at: 18 days ago - Pushed at: 19 days ago - Stars: 2,772 - Forks: 630
sumeshi/ntfsfind
An efficient tool for search files, directories, and alternate data streams directly from NTFS image files.
Language: Python - Size: 160 KB - Last synced at: 15 days ago - Pushed at: about 1 year ago - Stars: 26 - Forks: 1
sumeshi/ntfsdump
An efficient tool for extracting files, directories, and alternate data streams directly from NTFS image files.
Language: Python - Size: 231 KB - Last synced at: 10 days ago - Pushed at: about 1 year ago - Stars: 21 - Forks: 4
shujianyang/btrForensics
Forensic Analysis Tool for Btrfs File System.
Language: C++ - Size: 773 KB - Last synced at: 3 months ago - Pushed at: over 6 years ago - Stars: 20 - Forks: 1
isciurus/sleuthkit Fork of sleuthkit/sleuthkit
A fork of The Sleuthkit with XFS filesystem support. See PR https://github.com/sleuthkit/sleuthkit/pull/1476 for more info.
Language: C - Size: 45.7 MB - Last synced at: over 1 year ago - Pushed at: over 5 years ago - Stars: 10 - Forks: 2
nov3mb3r/dfir
Collection of popular DFIR tools in a lightweight and fast docker image
Language: Dockerfile - Size: 23.4 KB - Last synced at: almost 2 years ago - Pushed at: over 5 years ago - Stars: 9 - Forks: 1
nannib/NBTEMPOW
NBTempoW V. 2.1 is a forensic tool for making timelines from block devices image files (raw, ewf,physicaldrive, etc.). It uses TSK (The Sleuthkit) and it has been developed with Lazarus V. 1.6.2 ( Delphi compatible cross-platform IDE for Rapid Application Development). It runs only in Windows. If the device image file is splitted, you can select just the first chunk.
Language: Pascal - Size: 16.4 MB - Last synced at: 28 days ago - Pushed at: about 8 years ago - Stars: 8 - Forks: 5
Sim4n6/Slack_handler
Python tool to extract File slacks from disk images.
Language: Python - Size: 25.6 MB - Last synced at: 3 days ago - Pushed at: about 3 years ago - Stars: 5 - Forks: 0
tanner-g/iKnowdeDiscovery
Forensic Inode Analysis
Language: Python - Size: 48.8 KB - Last synced at: over 1 year ago - Pushed at: over 6 years ago - Stars: 4 - Forks: 0
wv8672/digital-forensics-labs
A series of Linux and Windows based Forensics labs. Tools used include: FTK, EnCase, Sleuthkit, Autopsy, Volatility, etc.
Size: 5.33 MB - Last synced at: about 2 years ago - Pushed at: over 4 years ago - Stars: 3 - Forks: 3
turulomio/recovermypartition
Recover normal and deleted files from a partition
Language: Python - Size: 73.2 KB - Last synced at: 2 months ago - Pushed at: over 6 years ago - Stars: 3 - Forks: 0
franckferman/DataDetective
Unlock the story hidden in data - Your digital investigation partner. The Sleuth Kit Python Wrapper.
Language: Python - Size: 675 KB - Last synced at: 3 months ago - Pushed at: 8 months ago - Stars: 2 - Forks: 0
HyperHamster/sleuthkit-recoverdir
A Bash script that utilizes The Sleuth Kit to recover directories in their entirety
Language: Shell - Size: 30.3 KB - Last synced at: over 1 year ago - Pushed at: over 7 years ago - Stars: 2 - Forks: 1
labcif/autopsy-packager 📦
Automatic Github Workflows packager for autopsy
Language: Shell - Size: 22.5 KB - Last synced at: 12 months ago - Pushed at: over 1 year ago - Stars: 1 - Forks: 3
Deepak710/python-sleuthkit-recover
Linux command line thumbstick file recovery script using SleuthKit
Language: Python - Size: 22.5 KB - Last synced at: about 2 years ago - Pushed at: over 5 years ago - Stars: 1 - Forks: 1
tgmars/flshell
An interactive shell for The Sleuth Kit's fls tool.
Language: Go - Size: 12 MB - Last synced at: 9 months ago - Pushed at: almost 6 years ago - Stars: 1 - Forks: 0
erfanghorbanee/DigitalForensics-UNIGE
Solutions to some assignments of the Digital Forensics course that I took during my master's degree at UNIGE (University of Genova).
Size: 16.1 MB - Last synced at: 12 months ago - Pushed at: 12 months ago - Stars: 0 - Forks: 0
reductech/TSKConnector
This repository is a mirror of https://gitlab.com/reductech/sequence/connectors/tsk
Language: C# - Size: 208 KB - Last synced at: about 2 years ago - Pushed at: over 2 years ago - Stars: 0 - Forks: 0
