A skill to stop your coding agent from burying the answer. ADHD-friendly output.

Volatility 3 ported to Rust. Same output, much faster.

Incident Response documents and tooling

Autonomous DFIR agent — SANS SIFT Workstation MCP server for incident response

Draft a post once and format it for LinkedIn, X, Bluesky, Threads, Mastodon, Facebook, and Instagram — each platform's length and formatting limits applied live. Plus a LinkedIn-only browser extens…

Generate realistic synthetic security logs for cybersecurity threat hunting training and research

UAL Timeline Generator — User Access Logging Timeliner

Manage Elgato Prompter scripts from CLI or local web GUI: import, export, rename, reorder, backup, restore.

Miller is like awk, sed, cut, join, and sort for name-indexed data such as CSV, TSV, and tabular JSON

TinyToolTown is a place for stupid-delightful tools made with love. Free, fun & open source. Made for an audience of one.

Windows EVTX log analysis for DFIR — fast parsing, ATT&CK mapping, IOC extraction, and Sentinel anomaly detection. Normal + Juggernaut Mode (Arrow/DuckDB) for 10M+ events.

A modern alternative to ls

macos-collector - Automated Collection of macOS Forensic Artifacts for DFIR

A lightweight tool to view, search and analyze registry hives

Find, verify, and analyze leaked credentials

Forensic Browser History Analyzer - Cross-platform browser history extractor (Chrome, Firefox, IE/Edge, Brave, Opera, Vivaldi)

OBS Studio - Free and open source software for live streaming and screen recording

DFIR Timeline Analysis for macOS — SQLite-backed viewer for CSV, TSV, XLSX, EVTX, Plaso, $MFT, and $J files with AI Artifacts, AI Secret Hunt, process inspection, lateral movement tracking, persist…

This educational repository showcases the most common vulnerabilities found in .NET applications

An overhauled script to turn an Ubuntu 24.04 LTS VM into a Forensics workstation with a light flare of penetration testing tools onboard.

Plaso binaries for Windows

WELA (Windows Event Log Analyzer, ゑ羅) is a tool for auditing and configuring Windows event log settings. Windows event logs are a vital source of information for Digital Forensics and Incident Resp…

Cr*ap Fixer

📂 Web File Browser

This repository is used to store useful information regarding of the RMM forensics investigation.

Force Remove Copilot, Recall and More in Windows 11