A course on "Digital Forensics" designed and offered in the Computer Science Department at Texas Tech University
🕵️♂️ Unlock the story hidden in data - Your digital investigation partner. TheSleuthKit (TSK) Python Wrapper.
High-performance cross-platform disk space analyzer (WinDirStat alternative) built with Java 21 & Compose Desktop. Features parallel ForkJoinPool I/O scanning & GPU-accelerated Canvas Treemaps.
Certificate repository for the "Intro to DFIR: Divide & Conquer" course by SleuthKitLabs - containing notes, labs, operations guides, and completion certificate.
Practical labs, case studies, and investigation notes for CHFI v11 — covering digital forensics, malware forensics, incident response, evidence collection, and analysis tools.
DFIR-oriented CTF write-ups covering disk, memory, and artifact-based analysis using various tools and techniques
A Digital Forensics Toolkit
Recover deleted files from raw disk images using The Sleuth Kit. Supports filtering, checksums, dry runs, JSON reports, and forensic workflows.
Swift Package for mounting forensic and general-purpose disk images on macOS.
FAEP is an automated tool to extract and parse forensic artifacts from .E01 images automatically, with a clean GUI and minimal manual effort.
Forensic MBR analyzer: graded anomaly findings (structural, gap/slack carving, wipe & bootkit detection, CHS/LBA & GPT/VBR cross-checks) on a pure read-only MBR parser — Rust crates mbr-partition-forensic + mbr-partition-core
Blazing-fast binary scanner for locating patterns and filesystem structures in raw disk images and devices
From-scratch NTFS reader (ntfs-core: MFT, attributes, indexes, data runs, LZNT1, $UsnJrnl:$J change journal over Read+Seek) plus a graded anomaly auditor (ntfs-forensic: timestomping, alternate data streams, deleted records, MFT/LogFile tamper checks) — panic-free, fuzzed, no unsafe
Add a description, image, and links to the disk-forensics topic page so that developers can more easily learn about it.
To associate your repository with the disk-forensics topic, visit your repo's landing page and select "manage topics."