edmichael Goto Github PK

4n6-scripts

Forensic Scripts

abeebus

A GeoIP lookup utility utilizing ipinfo.io services

achoir

Windows Live Artifacts Acquisition Script

alfa

ALFA stands for Automated Audit Log Forensic Analysis for Google Workspace. You can use this tool to acquire all Google Workspace audit logs and to perform automated forensic analysis on the audit logs using statistics and the MITRE ATT&CK Cloud Framework

anaximander

Python Code to Map Cell Towers From a Cellebrite Android Dump

android-usagestats-xml-parser

Android Usagestats XML Parser

androidpatternlock

A little Python tool to crack the Pattern Lock on Android devices

apollo

Apple Pattern of Life Lazy Output'er

automactc

AutoMacTC: Automated Mac Forensic Triage Collector

awesome-hacking-resources

awesome-incident-response

A curated list of tools for incident response

awesome-security

A collection of awesome software, libraries, documents, books, resources and cools stuffs about security.

aws-automated-incident-response-and-forensics

browserstate.db_parser

ccl-bplist

Python Module for parsing Binary Property List and NSKeyedArchiver files

cifr2019

Additional downloads for the CIFR2019 course in Orlando, FL

class

crowdstrike-falcon-search-queries

cyberchef

The Cyber Swiss Army Knife - a web app for encryption, encoding, compression and data analysis

cyberchef-recps

docker-explorer

A tool to help forensicate offline docker acquisitions

evmount

The start of a be-all end-all for Linux mounting of VMDK's, EWF's, and dd's

flashdrive-response

ios-frequent-locations-dumper

Dump the iOS Frequent Location binary plist files

ios_sms_parser

Parses iOS11 messages and handles the 18 digit timestamps. Will parse older iOS versions as long as iOS 11 was installed.

iosbackupexaminer

iOS Backup Examiner - A forensics tool for parsing an iOS backup's Info.plist file

itunes_backup2hashcat

Extract the information needed from the Manifest.plist files to convert it to hashes compatible with hashcat

jar-analyzer

A Java GUI Tool for Analyzing Jar

jm-press

keychaincracker

macOS keychain cracking tool