computer-forensics

❄️ PcapXray - A Network Forensics Tool - To visualize a Packet Capture offline as a Network Diagram including device identification, highlight important communication and file extraction

Factual-rules-generator is an open source project which aims to generate YARA rules about installed software from a machine.

A Volatility plugin for finding sqlite database rows

Extract valid or partially valid domain names and IPs from malicious or invalid URLs.

A python-based tool to extract forensic info from ActivitiesCache.db (Windows Activity Timeline)

CSAM/anti-trafficking forensics toolkit (Windows/Linux): safe triage via hashes & blurred thumbnails, YARA, ADS, browser/registry artifacts, reports & immutable logs.

CTF Suite is a collection of tools you can use during Capture The Flag competitions. These tools are aimed at specific categories of problems and are specific to Jeopardy-style CTFs.

This repository contains the forensic tools we made.

A Python script to extract and analyse EXIF data

A Python-based Digital Forensic File Analyzer with metadata extraction, hash verification, AI image detection, tamper analysis, and automated forensic reporting.

bfcpf stands for "Brute Force CPF" and it is a CLI tool that breaks a partial CPF, finding all valid ones within the pattern given by the user.

WebLogHunter is a tool for parsing and analysing web server access logs to detect suspicious activity. It normalises logs into a standard DataFrame format for efficient querying and applies risk-scoring rules to highlight potential threats.

Toolkit for reproducible local analysis of classification reports and confusion matrices, with per-class difficulty ranking, hard-class false-negative destination analysis, and readable Markdown outputs.

Parse information and find/carve Master Boot Records (MBR)

College lab tasks for Computer Forensics class & Hack The Box intro

Given a range of dates, is capable of extracting various information from a Windows system in said time range

Deep Learning framework for Source Camera Identification using PRNU (Sensor Pattern Noise), Wavelet Residual Extraction, CNN Feature Learning, and Hybrid Feature Fusion.