Unofficial Rust Bindings for X-Ways Forensics X-Tension API

Displays information from Windows recycle bin $IXXXXXX files

Simple Recycle Bin Forensic Tool Written with ❤ Rust

Simple read only zfs implementation with some simple tools for data recovery.

A tool to decrypt files from the android application "Folder Lock"

Tool for extracting the text from .doc files

SQLite and WAL files parser

⛔️ DEPRECATED: Use https://github.com/dfir-dd/dfir-toolkit instead

Library to handle the files in zff format (file format to store and handle forensic acquisitions).

Aralez is a triage tool for Windows that automates the collection of system information, network/process data, and files from NTFS.

This aims to be a collection of tools to forensically analyze Active Directory databases

Forensic framework to build tools that can be reused in multiple projects without changing anything

MalwareDB: bookkeeping for malware, goodware, and unknown files with relationship discovery

CLI tools for forensic investigation of Windows artifacts