All

36 repositories

homebrew-fox
Public
Homebrew cask.
homebrew cask fox
homebrew cask fox homebrew-cask
Ruby
•0•0•0•0•Updated Jul 23, 2026Jul 23, 2026
fox
Public
The Forensic Examiner's Swiss Army Knife for analysing file-based forensic artifacts.
journal timeline splunk
journal timeline splunk active-directory wordlist forensics dfir cef ntlm elastic
Go
•
GNU General Public License v3.0
•0•2•0•0•Updated Jul 23, 2026Jul 23, 2026
awesome-forensics
Public
⭐️ A curated list of awesome forensic analysis tools and resources
Creative Commons Zero v1.0 Universal
•763•0•0•0•Updated Jul 16, 2026Jul 16, 2026
foxforensics.eu
Public
foxforensics.eu
website forensics fox
website forensics fox
CSS
•0•0•0•0•Updated Jul 15, 2026Jul 15, 2026
go.foxforensics.eu
Public
go.foxforensics.eu
packages forensics fox
packages forensics fox
HTML
•0•0•0•0•Updated Jul 10, 2026Jul 10, 2026
hasher
Public
Multi-algorithm hasher.
go hash checksums
go hash checksums perceptual-hashes cryptographic-hashes hash-algorithms performance-hashes
Go
•
MIT License
•0•0•0•0•Updated Jul 5, 2026Jul 5, 2026
corpus
Public
A corpus of various file formats for (mostly) forensic tool testing.
corpus forensics fox
corpus forensics fox test-files
Go
•0•0•0•0•Updated Jun 25, 2026Jun 25, 2026
go-fortilog
Public
Decodes Fortinet binary firewall logs.
go parser decoder
go parser decoder binary-log fortigate-firewall fortinet-firewall fortilog
Go
•
MIT License
•0•0•0•0•Updated Jun 19, 2026Jun 19, 2026
eventid
Public
Lookup Windows event messages by their event id.
go windows database
go windows database provider event lookup messages event-id evtx event-logs
Go
•
MIT License
•0•0•0•0•Updated Jun 18, 2026Jun 18, 2026
rhash
Public
Reverse hash lookup.
go lookup hash
go lookup hash reverse hashing-algorithms hashcat rhash
Go
•
MIT License
•0•0•0•0•Updated Jun 18, 2026Jun 18, 2026
wordlist
Public
Combined unique wordlist from different sources.
go wordlist unique
go wordlist unique wordlists
Go
•
MIT License
•0•0•0•0•Updated Jun 18, 2026Jun 18, 2026
strings
Public
Carve ASCII and Unicode strings from files.
go unicode string
go unicode string ascii strings file carving forensic-tools forensics-tools string-carving
Go
•
MIT License
•0•0•0•0•Updated Jun 18, 2026Jun 18, 2026
entropy
Public
Calculate file entropy.
go entropy binary
go entropy binary file calculation forensic-tools forensics-tools
Go
•
MIT License
•0•0•0•0•Updated Jun 18, 2026Jun 18, 2026
hashdump
Public
Dump password hashes and records from an offline Active Directory database.
go groups tools
go groups tools extract computers active-directory secrets users forensics ntlm
Go
•
MIT License
•1•0•0•0•Updated Jun 17, 2026Jun 17, 2026
bootkey
Public
Extract the BootKey from an offline system hive.
go windows registry
go windows registry system extract forensics-tools forensic-tool bootkey
Go
•
MIT License
•0•0•0•0•Updated Jun 17, 2026Jun 17, 2026
xr
Public
xr is an experimental fast event record analyzer.
go windows experimental
go windows experimental analyzer record xr evtx event-logs forensics-tool
Go
•
MIT License
•0•0•0•0•Updated Jun 17, 2026Jun 17, 2026
.github
Public
Fox Forensics
0•0•0•0•Updated Jun 13, 2026Jun 13, 2026
go-pst
Public
Personal Storage Table in Go.
go outlook pst
go outlook pst
Go
•
Apache License 2.0
•16•0•0•0•Updated Jun 12, 2026Jun 12, 2026
flog
Public archive
Log forensic artifacts as JSON in ECS format. Part of the Forensic Artifacts Collecting Toolkit.
go pipeline ecs
go pipeline ecs dfir artifacts fact forensic flog forensic-tools forensic-tool
Go
•
MIT License
•0•0•0•0•Updated Jun 11, 2026Jun 11, 2026
fmount
Public archive
Mount various disk images for forensic read-only processing. Part of the Forensic Artifacts Collecting Toolkit.
go pipeline dfir
go pipeline dfir mount fact forensic umount forensic-tools forensic-tool fmount
Go
•
MIT License
•0•0•0•0•Updated Jun 11, 2026Jun 11, 2026
ffind
Public archive
Find forensic artifacts in mount points or the live system. Part of the Forensic Artifacts Collecting Toolkit.
go windows pipeline
go windows pipeline dfir artifacts fact forensic forensic-tools forensic-tool ffind
Go
•
MIT License
•0•0•0•0•Updated Jun 11, 2026Jun 11, 2026
futils
Public archive
Forensic Artifacts Collecting Toolkit utils library.
go library pipeline
go library pipeline utils fact
Go
•
MIT License
•0•0•0•0•Updated Jun 11, 2026Jun 11, 2026
fact
Public archive
A shell pipeline for extracting forensic artifacts.
pipeline fact forensic
pipeline fact forensic flog forensic-tools forensics-tools fmount ffind
MIT License
•1•0•0•0•Updated Jun 11, 2026Jun 11, 2026
go-zip
Public
This is a fork of the archive/zip package from the Go standard library which adds encryption support.
go golang library
go golang library encryption aes zip archive standard aes-256 aes-128
Go
•
BSD 3-Clause "New" or "Revised" License
•167•0•0•0•Updated Jun 11, 2026Jun 11, 2026
go-bgzf
Public
BGZF reader in Go.
go bgzf
go bgzf
Go
•
BSD 3-Clause "New" or "Revised" License
•39•0•0•0•Updated Jun 11, 2026Jun 11, 2026
go-lnk
Public
Golang package for parsing Windows shell link binary (lnk or Windows shortcut) files.
go lnk forensic-analysis
go lnk forensic-analysis lnk-shortcut lnk-file lnk-parser
Go
•
Apache License 2.0
•16•0•0•0•Updated Jun 11, 2026Jun 11, 2026
anew
Public
Append unique lines from stdin to a file.
go anew unique
go anew unique logfiles
Go
•
MIT License
•172•0•0•0•Updated Jun 11, 2026Jun 11, 2026
discolor
Public
Remove ANSI color escape sequences from the input stream.
go terminal ansi
go terminal ansi codes escape remove sequences discolor
Go
•
MIT License
•0•0•0•0•Updated Jun 11, 2026Jun 11, 2026
xc
Public
xc is an experimental terminal chain-of-custody.
go experimental xc
go experimental xc chain-of-custody forensics-tool
Go
•
MIT License
•0•0•0•0•Updated Jun 11, 2026Jun 11, 2026
go-hash
Public
Various Go hash functions.
go hashing hash
go hashing hash
Go
•
Apache License 2.0
•1•0•0•0•Updated Jun 11, 2026Jun 11, 2026

ProTip! When viewing an organization's repositories, you can use the props. filter to filter by custom property.

All

All

Repositories list

36 repositories