A high-speed forensic timeline engine for Windows forensic artifact CSV output built for DFIR investigators. Quickly consolidate CSV output from processed triage evidence for Eric Zimmerman (EZ Tools) Kape, Axiom, Hayabusa, Chainsaw and Nirsoft into a unified timeline.

Digital forensic analysis tool that provides a user-friendly interface for investigating disk images.

Digital Forensics Essentials (DFE)

Forensic Linux VM for Apple Silicon, ARM64 and x86-64 compatible platforms

Python tool to quickly extract embedded JPEG images from pcap files. Perfect for image extraction, data recovery, and digital forensics with reliable error handling..

PEInsight is a fast and efficient command-line tool for parsing Windows Portable Executable (PE) files, written in C.

Utility for recovering ES File Explorer encrypted files (.eslock)

Masstin: High-Speed DFIR Tool written in Rust and Graph Visualization in Neo4j for Comprehensive Lateral Movement Analysis

A comprehensive Model Context Protocol (MCP) server for Android device forensic data acquisition using Android Debug Bridge (ADB).

Android RAM Parser

Browser-based Mac Model Finder — A forensic reference tool for identifying Apple computer device models, T2 and Apple Silicon systems, and acquisition workflows. Created by Junaid Abid for demonstration and educational purposes.

A MATLAB-based Digital Image Forensics Dashboard for detecting image tampering using ELA, Noise Analysis, JPEG Artifacts, and Copy-Move detection.

SUDARSHAN is a simple, interactive digital forensics framework that helps investigators analyze data, recover evidence, and generate reports — all from one easy-to-use script.

Tools to decrypt files from the apk Vault - Hide Pics, App Lock

Cross-platform Forensic Imaging Tool

Actively removes unwanted files as they're created, plus reorganizes the kept files into a type-based folder structure.

Run FTK Imager directly from a portable USB or WinFE environment to perform forensic imaging without installing software on the target system.

Artifact acquisition and the analysis of REGISTRY hives

HDeviceContentIndexer is a digital forensics tool that indexes and searches data from multiple devices simultaneously. It enables investigators to run keyword-based searches across all ingested devices and automatically identify links and related content between them, removing the need to manually analyze each device one by one.

A GUI based Hacking Toolkit with multipurpose usecases such as finding hash of text or file, Text to Hex, Hex to Text Conversion Encryption and much more