Linux Runtime Security and Forensics using eBPF

Hayabusa (隼) is a sigma-based threat hunting and fast forensics timeline generator for Windows event logs.

The Sleuth Kit® (TSK) is a library and collection of command line digital forensics tools that allow you to investigate volume and file system data. The library can be incorporated into larger digital forensics tools and the command line tools can be directly used to find evidence.

Free hands-on digital forensics labs for students and faculty

Agent skills for solving CTF challenges - web exploitation, binary pwn, crypto, reverse engineering, forensics, OSINT, and more

PowerShell Digital Forensics & Incident Response Scripts.

🕵️ OSINT Tools for gathering information and actions forensics 🕵️

A collection of PowerShell scripts for analyzing data from Microsoft 365 and Microsoft Entra ID

Cross-platform incident response and live forensics toolkit with built-in detection, structured analysis, and report generation — designed for fast, actionable security investigations.

Forensics artefact collection tool for systems running Microsoft Windows

Beagle is an incident response and digital forensics tool which transforms security logs and data into graphs.

MemProcFS-Analyzer - Automated Forensic Analysis of Windows Memory Dumps for DFIR