Pinned Loading

1. fjta fjta Public

   FJTA (Forensic Journal Timeline Analyzer) is a tool that analyzes Linux filesystem (ext4, XFS) journals (not systemd-journald logs), generates timelines, and detects suspicious activities.

   Python 91 8

2. linimagemounter linimagemounter Public

   LinImageMounter is a Python tool designed to simplify the process of mounting disk images on Linux systems.

   Python 5 1

3. macosac macosac Public

   Forensic Artifact Collection Tool for macOS

   Python 117 18

4. ma2tl ma2tl Public

   macOS forensic timeline generator using the analysis result DBs of mac_apt

   Python 95 9

5. bgiparser bgiparser Public

   A parsing tool for backgrounditems.btm

   Python 52 3

6. vss_carver vss_carver Public

   Carves and recreates VSS catalog and store from Windows disk image.

   Python 100 21