forensicxlab
Follow
-
thanatology Public
Digital Forensics Framework
-
-
-
-
exhume_artefacts Public
Digital Forensics Artefacts Search engine and Parser library.
-
exhume_filesystem Public
Filesystem abstraction for the exhume suite.
-
-
exhume_ntfs Public
Exhume and investigate data from an NTFS filesystem.
Rust GNU General Public License v3.0 UpdatedAug 20, 2026 -
exhume_lvm Public
An exhume module understanding the Logical Volume Manager layout to read data.
Rust GNU General Public License v3.0 UpdatedAug 20, 2026 -
exhume_extfs Public
Exhume module to extract multiple filesystem format metadata to later be investigate.
-
exhume_exfat Public
Exhuming data from an exFAT filesystem.
-
exhume_apfs Public
Exhume Apple FileSystem
-
exhume_body Public
Exhume a body of data. Supports multiple file formats.
-
volatility3 Public
Forked from volatilityfoundation/volatility3Volatility 3.0 development
-
-
memflow-kvm Public
Forked from memflow/memflow-kvmLinux kernel module for memflow's KVM connector
C MIT License UpdatedJun 26, 2026 -
memflow-linux Public
Forked from memflow/memflow-linuxLinux OS layer for memflow
Rust UpdatedJun 26, 2026 -
exhume Public
The Exhume ToolKit umbrella repository
-
memflow-native Public
Forked from memflow/memflow-nativeSystem call based proxy-OS for memflow
Rust MIT License UpdatedApr 26, 2026 -
memflow-pcileech Public
Forked from memflow/memflow-pcileechmemflow connector backend to interface with pcileech devices
-
-
memflow-rawmem Public
Forked from memflow/memflow-rawmemmemflow connector to allow reading raw memory dumps
Rust MIT License UpdatedMar 11, 2026 -
memflow Public
Forked from memflow/memflowphysical memory introspection framework
Rust MIT License UpdatedFeb 27, 2026 -
memflowup Public
Forked from memflow/memflowupSetup tool for memflow and it's components
Rust MIT License UpdatedMay 26, 2025 -
xpress_lz77 Public
A pyo3 implementation of xpress decompression algorithms used in digital forensics.
-
VolWeb-Scripts Public
Contains multiple scripts to perform remote memory aquisition and interactions with the VolWeb Platform
-
-
scanflow Public
Forked from memflow/scanflowmemory scanner built on memflow
Rust MIT License UpdatedJan 5, 2024 -
VISION-ProcMon Public
A ProcessMonitor visualization application written in rust.
-
EWF Public
A rust implementation of Expert Witness Compression Format (EWF) parsing.