Search Results for "forensics"

Sherloq is a research-oriented toolkit designed for digital image forensics, providing an integrated environment to experiment with algorithms for image analysis and tampering detection. Rather than functioning as an automated decision-making system, it serves as a companion tool for researchers, enthusiasts, and students who want to explore forensic techniques from scientific literature and workshops.

Autopsy® is a digital forensics platform and graphical interface to The Sleuth Kit® and other digital forensics tools. It can be used by law enforcement, military, and corporate examiners to investigate what happened on a computer. You can even use it to recover photos from your camera's memory card.

DVCS Ripper is a security and forensics toolkit that reconstructs source code repositories accidentally exposed on web servers. It understands multiple version-control systems—Git, Mercurial, Bazaar, and Subversion—and crawls their metadata directories to rebuild full history where possible. The utilities handle partial or blocked directory listings by guessing object paths and assembling missing pieces from loose files.

iRecover was developed to aid forensics investigators by combining other commonly used command-line forensics tools into a simple graphical user interface. iRecover provides a GUI interface using the Perl/Tk programming library for forensics examiners to use when retrieving deleted files from an image/ file partition under forensic investigation. Investigators can use this tool to selectively retrieve only certain kinds of files (text, images, video, audio, documents, etc.) for a quick overview of information or for recovery using the "icat" Sleuth Kit tool to actually go into the image and select the files of interest to display.

**This project has been moved to GitHub https://github.com/Gerodd/ESXimager ** With so many companies now moving to virtualization solutions like VMware, multiple "servers" are now stored as files (.vmdk, .vmem, etc..) on a SAN, NAS, local data store, etc... While this can make imaging a server easier, there is no tool to help a forensics investigator find the virtual machine they want to image, select the files they wish to image, and generate a hash and copy the image. This tool automates each of these steps and makes acquiring these images much easier while ensuring data integrity.

Development and support of OCFA have been discontinued. the code has moved to these github repositories: https://github.com/DNPA/OcfaLib https://github.com/DNPA/OcfaArch https://github.com/DNPA/OcfaJavaLib https://github.com/DNPA/OcfaModules https://github.com/DNPA/OcfaDoc If you are interested in contributing to ongoing work on the creation of a community maintained OCFA inspired computer forensic framework, please join the Mattock/MattockFS community page on...

The Forensics Data Identifier (FDI) is a tool which allows for large data files to be easily filtered for common forensically relevant data types.The tool was intended to speed up the ediscovery and analysis processes of the forensics investigation

...Byte Investigator The Byte Investigator project from Octane Labs was born in order to be a parsing toolkit for several Windows structures (files and file system structures). These Perl script tools are useful tools for Computer Forensics professionals and Information Security researchers.

SQLJuicer - SQL Server Transaction Log Forensics This is a Perl tool that lists database CRUD transactions parsing SQL Server Transaction Log entries. It depends on SQL Server and SQLCMD utility. Due to this dependencies, SQLJuicer.pl script cannot run in Linux. It is prepared to be localized to any language. The output language, by this date, can be English (default) and Brazilian Portuguese

FreeBSD Forensics Bootable ISO

Live Security/Forensics Linux Distribution, built from scratch and packed full of tools useful for vulnerability analysis, penetration tests, and forensic analysis.

Found at www.itadmins.net in the Projects area. The complete Linux Administrators CD. For normal system and network administration, security, forensics tools and utilities.