⭐️ A curated list of awesome forensic analysis tools and resources

TheHive is a Collaborative Case Management Platform, now distributed as a commercial version

Digging Deeper....

Digital Forensics Guide. Learn all about Digital Forensics, Computer Forensics, Mobile device Forensics, Network Forensics, and Database Forensics.

A list of free and open forensics analysis tools and other resources

Cybersecurity Career Path

Educational, CTF-styled labs for individuals interested in Memory Forensics

TCP/IP packet demultiplexer. Download from:

IPED Digital Forensic Tool. It is an open source software that can be used to process and analyze digital evidence, often seized at crime scenes by law enforcement or in a corporate investigation by private examiners.

Cortex: a Powerful Observable Analysis and Active Response Engine

Collaborative Incident Response platform

Beagle is an incident response and digital forensics tool which transforms security logs and data into graphs.

ThePhish: an automated phishing email analysis tool

Digler is a tool for forensic disk analysis and file recovery. It's designed to help you unearth lost or deleted data from various disk images and raw devices.

Avilla Forensics FREE

Log what files are accessed by any Linux process

Digital Forensics Investigation Platform

A Cloud Forensics Powershell module to run threat hunting playbooks on data from Azure and O365

Everything related to Linux Forensics

MemProcFS-Analyzer - Automated Forensic Analysis of Windows Memory Dumps for DFIR

Awesome list of digital forensic tools

DFIRTrack - The Incident Response Tracking Application

A curated list of awesome Memory Forensics for DFIR

⚡️ Catalyst is a self-hosted, open source incident response platform and ticket system that helps to automate alert handling and incident response processes

An OSINT / digital forensics tool built in Python

Cortex Analyzers Repository

Handbook of windows forensic artifacts across multiple Windows version with interpretation tips and some examples. Work in progress!

A curated list of resources for DFIR through Microsoft Defender for Endpoint leveraging kusto queries, powershell scripts, tools such as KAPE and THOR Cloud and more.

practical toolkit for cybersecurity and IT professionals. It features a detailed Linux cheatsheet for incident response

Documentation of TheHive