GitHub - TonyPhipps/Meerkat: A collection of PowerShell modules designed for artifact gathering and reconnaisance of Windows-based endpoints.

GitHub - google/grr: GRR Rapid Response: remote live forensics for incident response

Grr rapid response remote live forensics for incident response git hub google grr grr rapid response remote live forensics for incident response

GitHub - volatilityfoundation/volatility: An advanced memory forensics framework

An advanced memory forensics framework contribute to volatilityfoundation volatility development by creating an account on git hub

mig - MIG is a platform to perform investigative surgery on remote endpoints. It enables investigators to obtain information from large numbers of systems in parallel, thus accelerating investigation of incidents and day-to-day operations security.

GitHub - diogo-fernan/ir-rescue: A Windows Batch script and a Unix Bash script to comprehensively collect host forensic data during incident response.

A windows batch script and a unix bash script to comprehensively collect host forensic data during incident response git hub diogo fernan ir rescue a windows batch script and a unix bash scrip

GitHub - dogoncouch/logdissect: CLI utility and Python module for analyzing log files and other data.

Cli utility and python module for analyzing log files and other data git hub dogoncouch logdissect cli utility and python module for analyzing log files and other data

GitHub - google/rekall: Rekall Memory Forensic Framework

Rekall memory forensic framework contribute to google rekall development by creating an account on git hub

GitHub - 504ensicsLabs/LiME: LiME (formerly DMD) is a Loadable Kernel Module (LKM), which allows the acquisition of volatile memory from Linux and Linux-based devices, such as those powered by Android. The tool supports acquiring memory either to the file system of the device or over the network. LiME is unique in that it is the first tool that allows full memory captures from Android devices. It also minimizes its interaction between user and kernel space processes during acquisition, which allows it to produce memory captures that are more forensically sound than those of other tools designed for Linux memory acquisition.

Li me formerly dmd is a loadable kernel module lkm which allows the acquisition of volatile memory from linux and linux based devices such as those powered by android the tool supports acquir