Tools
timesketch
google/timesketch
Timesketch is an open-source, self-hosted platform for collaborative forensic timeline analysis, letting investigators upload event logs into sketches, annotate them, and search and visualize timelines together.
Topics
Related projects
radare225.4kA libre reverse engineering framework and command-line toolset for analyzing, disassembling, debugging, and patching binaries across many architectures and formats.
mvt16kMobile Verification Toolkit (MVT) is a collection of command-line utilities for gathering and analyzing forensic traces from iOS and Android devices. It uses indicators of compromise to help investigators detect spyware, and is intended for forensic professionals.
zeek8.2kA powerful network security monitoring framework with deep protocol analyzers and a scripting language, used for traffic analysis, threat detection, and incident response.
chainsaw3.7kChainsaw is a fast Rust command-line tool for threat hunting through Windows forensic artefacts, applying Sigma rules to event logs and analysing MFT and SRUM data.
chainsaw3.7kChainsaw is a fast, standalone CLI for Windows forensic triage. It searches event logs and MFT artefacts, applies Sigma and custom detection rules, and builds timelines for threat hunting and incident response.
LogonTracer3.3kLogonTracer is a self-hosted web application for investigating Windows Active Directory logon events, graphing accounts and hosts and optionally using OpenAI models for AI-assisted threat analysis.