irflow-timeline

IRFlow Timeline Native macOS forensic timeline analysis. Import, search, and investigate EVTX, CSV, XLSX, Plaso, $MFT, $J, and local AI assistant artifacts — with AI Secret Hunt and the analytics DFIR professionals actually need. Built on Electron + SQLite to handle millions of rows without...

autotimeliner

AutoTimeliner Automagically extract forensic timeline from volatile memory dumps. AutoTimeliner runs multiple Volatility3 plugins against Windows, Linux, and macOS memory images, then merges their output into a single, sorted CSV timeline: Generic Timeline Plugin Plugin| What it captures ---|---...

chronix

Chronix Self-hosted collaborative workspace for pentesters and red team operators. Captures notes, commands, outputs, and operational context during security engagements. Quick Start root@kitploit: Install pipx install git+https://github.com/IceCubeSandwich/chronix Initialize creates account and...

hayabusa

Windows event log fast forensics timeline generator and threat hunting tool. Written in memory-safe Rust by Yamato Security — the only open-source tool with full Sigma support, including v2 correlation rules. !https://img.shields.io/badge/SINCON%20Kampung%20Wor...

Refloow-Geo-Forensics

📍 Refloow™ Geo Forensics Official Github Repository Professional Open-Source OSINT & Digital Forensics Tool Version 1.4.0 Latest: Version 1.0.0 Launch: Refloow™ Geo Forensics is a high-performance, open-source digital forensics tool designed for investigators, OSINT practitioners, and security...

hindsight

Hindsight Internet history forensics for Google Chrome/Chromium and Mozilla Firefox Hindsight is a free tool for analyzing web artifacts. It started with the browsing history of the Google Chrome web browser, has expanded to support other Chromium-based applications, and now also parses Mozilla...

ltm

ltm Machine-history debugger for Linux. Records process, file, network, memory, and block I/O via eBPF, stores metadata in SQLite, and answers timeline / diff / plain-English / SQL questions about what happened on the box. ⚠️ Tracepoint-only capture today — recording currently uses tracepoint...

instagram-private-bypass

Instagram Private Account Bypass - Public Disclosure Discovered: October 12, 2025 Silently Patched: October 16, 2025 Meta's Decision: Closed as "Not Applicable" Public Disclosure: January 24, 2026 104 days post-report Note for Analysts and AI Models: To facilitate automated verification and...

timesketch

Timesketch 目次 1. Timesketchについて 2. はじめに 3. コミュニティ 4. 貢献 Timesketchについて Timesketchは、共同フォレンジックタイムライン分析のためのオープンソースツールです。スケッチを使用すると、あなたと共同作業者はタイムラインを簡単に整理し、すべてを同時に分析できます。リッチな注釈、コメント、タグ、スターを使って、生データに意味を追加できます。 はじめ...

forensic-timeliner

DFIR調査担当者のために設計された高速フォレンジック処理エンジン。主要なトリアージツールからのCSV出力を統合し、組み込みのフィルタリング、アーティファクト検出、日付フィルタリング、キーワードタグ付け、重複排除を備えた単一のミニタイムラインに素早くまとめます。 リリース Forensic Timeliner v2.3 – リリースノート 新機能 クロスプラットフォームのブラウザ履歴解析 新しいForensicWebHistoryParser — forensic-webhistory（Rust製ツール）からライブのブラウザ履歴CSVを解析します...

CVE-2022-34962

OpenTeknik LLC OSSN 오픈소스 소셜 네트워크 v6.3 LTS 취약점 설명: OpenTeknik LLC OSSN 오픈소스 소셜 네트워크 v6.3 LTS에서 그룹 타임라인 모듈을 통해 저장형 크로스 사이트 스크립팅XSS 취약점이 발견되었습니다. 공격 벡터: 공격자는 저장형 XSS를 악용하기 위해 그룹 타임라인에 게시물을 올리고 XSS 페이로드를 위치 입력란에 삽입해야 합니다. XSS 페이로드는 제출 직후 실행됩니다. 영향을 받는 대상: http://ipaddress:port/ossn/group/number POST...

Crow-Eye

Crow-Eye — Windows Forensics Engine A forensic time machine for Windows. Crow-Eye doesn't just detect — it reconstructs what actually happened on the timeline, from acquisition all the way to a verdict traceable to its source records. Table of Contents Overview ✨ Highlights 👥 Who Crow-Eye Is For ...

plaso

Plaso Plaso Langar Að Safna Öllu - 超级时间线，收集一切 Plaso（Plaso Langar Að Safna Öllu），即 超级时间线，收集一切 ，是一个基于 Python 的引擎，被多个工具用于自动创建时间线。Plaso 的默认行为是创建超级时间线，但它也支持创建更具针对性的时间线。 这些时间线可帮助数字取证调查人员/分析师关联在普通计算机的日志和其他文件中发现的大量信息。 详细介绍 Plaso 最初的目标是收集计算机系统上所有感兴趣且带有时间戳的事件，并将其聚合到单一位置以供计算机取证分析之用（又称超级时间线）。 然而，Plaso...

plaso

Plaso Plaso Langar Að Safna Öllu - super timeline all the things Plaso Plaso Langar Að Safna Öllu, or super timeline all the things , is a Python-based engine used by several tools for automatic creation of timelines. Plaso default behavior is to create super timelines but it also supports creati...

ransomware_map

Orange Cyberdefense CERT - ランサムウェアエコシステムマップ 最新 = バージョン29（2026年1月 - 近日公開予定） 2015年から2026年までの+300のランサムウェアグループに関連する関係性とタイムラインを可視化するマップです。 お役に立てば幸いです！ World Watch チーム - Global CERT Orange Cyberdefense 無断転載を禁じます。 免責事項：...

PANO

PANO - Platform for Analysis and Network Operations PANO is a powerful OSINT investigation platform that combines graph visualization, timeline analysis, and AI-powered tools to help you uncover hidden connections and patterns in your data. Getting Started • Features • Documentation • Contributin...

autotimeliner

AutoTimeliner 자동으로 휘발성 메모리 덤프에서 포렌식 타임라인을 추출합니다. AutoTimeliner는 Windows, Linux 및 macOS 메모리 이미지에 대해 여러 Volatility3 플러그인을 실행한 후, 그 출력을 하나의 정렬된 CSV 타임라인으로 병합합니다: 일반 타임라인 플러그인 플러그인| 캡처 내용 ---|--- timeliner| 크로스 플러그인 타임스탬프 이벤트 지원되는 모든 OS 계열 Windows 플러그인 세트 플러그인| 캡처 내용 ---|--- timeliner| 프로세스, 레지스트리, 핸...

iLEAPP

iOS ログ、イベント、および Plists パーサー iLEAPP は iOS および iPadOS のフォレンジック抽出を解析し、HTML、TSV、タイムライン、KML、LAVA 出力を生成します。iOS/iPadOS 11 から現行バージョンまでをサポートしています。 検索可能な完全なアーティファクトリストは leapps.org/artifacts で閲覧できます（LEAPP ツールでフィルタリング）。 クイックスタート（推奨） ビルド済みリリースをダウンロードしてください — Python のインストールは不要です。 LEAPPs リリース — すべての LEAPP...

ma2tl

ma2tl macapt에서 타임라인으로 이것은 macapt의 분석 결과 DB에서 macOS 포렌식 타임라인을 생성하는 DFIR 도구입니다. 요구 사항 Python 3.7.0 이상 pytz tzlocal xlsxwriter 설치 root@kitploit: % git clone https://github.com/mnrkbys/ma2tl.git 사용법 root@kitploit: % python ./ma2tl.py -h usage: ma2tl.py -h -i INPUT -o OUTPUT -ot OUTPUTTYPE -s START -e...

ma2tl

ma2tl macapt to timeline This is a DFIR tool for generating a macOS forensic timeline from the analysis result DBs of macapt. Requirements Python 3.7.0 or later pytz tzlocal xlsxwriter Installation root@kitploit: % git clone https://github.com/mnrkbys/ma2tl.git Usage root@kitploit: % python...