Rust DFIR tool that massively parses cross-platform evidence, even deleted logs, into a lateral movement timeline and graph database.

DorkTerm is a security tool designed to assist security researchers in performing Google Dork queries efficiently.

Forensic locate based on plocate

Tools to decrypt files from the apk Vault - Hide Pics, App Lock

Browser-based LLM stylometric fingerprinting

AI-assisted SOC/SIEM platform for forensic log analysis, threat detection, IOC extraction, threat intelligence correlation and enterprise incident reporting.

Windows DFIR tool that parses and reconstructs screen images from RDP bitmap cache files (.bin/.bmc) - edge-match stitching, OCR, and forensic IOC scanning.

Extract the BootKey from an offline system hive.

Advanced local registry forensic engine and task scheduler integrity interceptor under Windows environments

Log forensic artifacts as JSON in ECS format. Part of the Forensic Artifacts Collecting Toolkit.

Mount various disk images for forensic read-only processing. Part of the Forensic Artifacts Collecting Toolkit.

🔍 Enhance file location searches with flocate, a forensic tool that adds metadata collection and history tracking to the fast plocate implementation.

Authorized CYBERDUDEBIVASH tool for detecting AI Lies-in-the-Loop (LITL) deception and Indirect Prompt Injection (IPI) in agent traces and HITL dialogs.

Advanced digital forensics and file intelligence tool for analyzing files, extracting metadata, detecting threats, and reconstructing timelines with chain-of-custody support.

Exifer is a next-generation cybersecurity-focused EXIF and metadata forensic analyzer for Android. It is designed to help users, investigators, journalists, and privacy-aware individuals detect:

Find forensic artifacts in mount points or the live system. Part of the Forensic Artifacts Collecting Toolkit.