forensic 开源项目推荐（201 个）

sepinf-inc /IPED

IPED数字取证工具。它是一款开源软件，可用于处理和分析数字证据，通常由执法部门在犯罪现场或私人审查员在企业调查中查获。

dfir-iris /iris-web

Collaborative Incident Response platform

mthcht /ThreatHunting-Keywords

Awesome list of keywords and artifacts for Threat Hunting sessions

imakashsahu /Third-Eye-Final-Year-Project

Forensic Face Sketch Construction and Recognition (My B.E. Final Year Project)

A-YATTA /AMDH

Android Mobile Device Hardening

kacos2000 /Win10

Win 10/11 related research

kacos2000 /WindowsTimeline

Windows 10 (v1803+) ActivitiesCache.db parsers (SQLite, PowerShell, .EXE)

Am0rphous /Awesome

Awesome collection of resources 😎 Work in progress🔥

kh4sh3i /Malware-Analysis

A curated list of awesome malware analysis tools and resources

mnrkbys /fjta

FJTA (Forensic Journal Timeline Analyzer) is a tool that analyzes Linux filesystem (ext4, XFS) journals (not systemd-journald logs), generates timelines, and detects suspicious activities.

karthik997 /Forensic_Toolkit

Major tools used for Digital Forensic Investigation, includes tools used for Image, Audio, Memory, Network and Disk Image data analysis. Helpful resource for CTF Challenges.

kacos2000 /Queries

SQLite queries

wasereowen-debug /SysTools-Recovery-Field-Guide

SysTools Data Recovery Setup Guide for Windows 11 and 10 in 2026

kacos2000 /Prefetch-Browser

Browse Windows Prefetch versions: 17,23,26,30v1/2,31 & some of SuperFetch .7db/.db's

kacos2000 /Jumplist-Browser

Automatic/Custom Destinations & LNK (MS-SHLLINK) Browser

Frascott05 /SilenTrace

This project is for DFIR that wants to speed up some memory forensic analysis

CIRCL /forensic-tools

CIRCL system forensic tools or a jumble of tools to support forensic

srixivas /urlRecon

📝 urlRecon - Info Gathering or Recon tool for Urls -> Retrieves * Whois information of the domain * DNS Details of the domain * Server Fingerprint * IP geolocation of the server

ForensicRS /forensic-rs

Forensic framework to build tools that can be reused in multiple projects without changing anything

SagarBiswas-MultiHAT /Phoneint-OSINT-Toolkit

Phoneint-OSINT-Toolkit; a privacy-first phone-number OSINT toolkit (CLI + minimal GUI). Parses and normalizes numbers (E.164), enriches with deterministic metadata, runs optional async adapters (DuckDuckGo, Google, public datasets), computes explainable risk scores and owner intelligence, and exports JSON/CSV/PDF reports.