Category: Forensics

whapa

whapa: WhatsApp Parser Toolset

Whatsapp Parser Toolset Whapa is a toolset to analyze the WhatsApp app for android. All tools are written in Python 2.X. It is divided into three tools: Whapa (Whatsapp Parser) Whamerge (Whatsapp Merger) Whagodri (WhatsApp Google...

Real Intelligence Threat Analytics

RITA v3.0.6 releases: Real Intelligence Threat Analytics

Real Intelligence Threat Analytics (RITA) is an open-source framework for network traffic analysis. The framework ingests Bro Logs, and currently supports the following analysis features: Beaconing Detection: Search for signs of beaconing behaviour in and...

usbrip

usbrip v2.1.4-7 releases: tracking history of USB events on GNU/Linux

usbrip usbrip (derived from “USB Ripper”, not “USB R.I.P.” 😯) is an open source forensics tool with CLI interface that lets you keep track of USB device artifacts (a.k.a. USB event history: “Connected” and “Disconnected” events) on...

dfirtrack

dfirtrack v0.2 releases: The Incident Response Tracking Application

DFIRTrack DFIRTrack (Digital Forensics and Incident Response Tracking application) is an open-source web application mainly based on Django using a PostgreSQL database backend. In contrast to other great incident response tools, which are mainly case-based and support...

Cortex

Cortex 3.0.0 released: Powerful Observable Analysis Engine

Cortex tries to solve a common problem frequently encountered by SOCs, CSIRTs and security researchers in the course of threat intelligence, digital forensics, and incident response: how to analyze observables they have collected, at scale, by querying a single...