Tools¶
- FTK Imager ~ Imaging tool
- Autopsy ~ Opensource end-to-end forensic tool
- Volatility ~ Memory forensics
- Jeffrey's Image Metadata Viewer ~ Image metadata viewer
- Bulk Extractor ~ Extract information from disk images
- Eric Zimmerman Tools ~ A number of tools (Just go look)
- Velociraptor ~ Endpoint visibility, triage collection and hunting at scale
- Hayabusa ~ Windows event log timelines and threat hunting with Sigma rules
- VirusTotal ~ Check files, hashes, URLs, domains and IPs against many engines
- Houdin.io ~ IOC lookups correlated across threat intel sources, with a verdict
- Teoh VPN Detection ~ Check whether an IP belongs to a VPN, proxy or hosting provider
- urlscan.io ~ Safely scan a URL and see what the page loads and contacts
- Nmap ~ Network discovery and security auditing