sleuthkit

The Sleuth Kit INTRODUCTION The Sleuth Kit is an open source forensic toolkit for analyzing Microsoft and UNIX file systems and disks. The Sleuth Kit enables investigators to identify and recover evidence from images acquired during incident response or from live systems. The Sleuth Kit is open...

afot

自动化取证工具 自动化取证工具（AFOT）是一款使用 Python 构建的自动化工具，用于 Windows 取证，它整合了以下工具： AnalyzePESig（http://didierstevens.com/files/software/AnalyzePESigV0002.zip） National Software Reference Library 精简版本（http://www.nsrl.nist.gov/RDS/rds2.52/rds252m.zip） NSRL Tool（http://didierstevens.com/files/software/nsrlV002.zip）...

fileintel

fileintel This is a tool used to collect various intelligence sources for a given file. Fileintel is written in a modular fashion so new intelligence sources can be easily added. Files are identified by file hash MD5, SHA1, SHA256. The output is in CSV format and sent to STDOUT so the data can be...

Free Open Source Self Hosted VirusTotal: Malice

Free Open Source Self Hosted VirusTotal Malice’s mission is to be a free open source version of VirusTotal that anyone can use at any scale from an independent researcher to a fortune 500 company.’ Ubuntu Install: Install Go $ sudo add-apt-repository ppa:ubuntu-lxc/lxd-stable $ sudo apt-get updat...