All

29 repositories

xr
Public
xr is an experimental fast event record analyzer.
go windows experimental
go windows experimental analyzer record xr evtx event-logs forensics-tool
Go
•
MIT License
•0•1•0•0•Updated Apr 20, 2026Apr 20, 2026
foxforensics.eu
Public
foxforensics.eu website.
website forensics fox
website forensics fox
HTML
•0•0•0•0•Updated Apr 20, 2026Apr 20, 2026
fox
Public
The Forensic Examiners Swiss Army Knife.
journal splunk forensics
journal splunk forensics dfir cef ntlm hunt elastic fox hashes
Go
•
GNU General Public License v3.0
•0•2•0•0•Updated Apr 20, 2026Apr 20, 2026
fox-cask
Public
brew install f0x4n6/fox/fox
homebrew fox homebrew-tap
homebrew fox homebrew-tap homebrew-cask
Ruby
•0•0•0•0•Updated Apr 19, 2026Apr 19, 2026
go-zip
Public
This is a fork of the archive/zip package from the Go standard library which adds encryption support.
go golang library
go golang library encryption aes zip archive standard aes-256 aes-128
Go
•
BSD 3-Clause "New" or "Revised" License
•167•1•0•0•Updated Apr 18, 2026Apr 18, 2026
eventid
Public
Lookup Windows event messages by their event id.
go windows database
go windows database provider event lookup messages event-id evtx event-logs
Go
•
MIT License
•0•1•0•0•Updated Apr 17, 2026Apr 17, 2026
ustrings
Public
Carve Unicode and/or ASCII strings from files.
go unicode string
go unicode string ascii strings file carving forensic-tools forensics-tools string-carving
Go
•
MIT License
•0•1•0•0•Updated Apr 15, 2026Apr 15, 2026
entropy
Public
Calculate file entropy.
go entropy binary
go entropy binary file calculation forensic-tools forensics-tools
Go
•
MIT License
•0•1•0•0•Updated Apr 15, 2026Apr 15, 2026
wth
Public
A simple hash reverse lookup.
go lookup hash
go lookup hash hashing-algorithms hashcat wth
Go
•
MIT License
•0•1•0•0•Updated Apr 14, 2026Apr 14, 2026
hashdump
Public
Dump user password hashes from Active Directory databases.
go tools extract
go tools extract active-directory secrets forensics ntlm dump hashes ntds
Go
•
MIT License
•1•1•0•0•Updated Apr 13, 2026Apr 13, 2026
anew
Public
Append unique lines from stdin to a file.
go anew unique
go anew unique logfiles
Go
•
MIT License
•175•1•0•0•Updated Apr 13, 2026Apr 13, 2026
bootkey
Public
Extract the BootKey from an offline system hive.
go windows registry
go windows registry system extract forensics-tools forensic-tool bootkey
Go
•
MIT License
•0•1•0•0•Updated Apr 13, 2026Apr 13, 2026
fact
Public
A shell pipeline for extracting forensic artifacts.
pipeline fact forensic
pipeline fact forensic flog forensic-tools forensics-tools fmount ffind
MIT License
•1•1•0•0•Updated Mar 28, 2026Mar 28, 2026
go-msi
Public
Go library for reading msi files.
Go
•
MIT License
•1•1•0•0•Updated Mar 28, 2026Mar 28, 2026
go-mscfb
Public
Microsoft Compound File Binary File Format reader.
Go
•
MIT License
•1•1•0•0•Updated Mar 28, 2026Mar 28, 2026
go-mmap
Public
A portable mmap package for Go.
go windows linux
go windows linux unix mmap
Go
•
BSD 3-Clause "New" or "Revised" License
•134•1•0•0•Updated Mar 28, 2026Mar 28, 2026
go-lnk
Public
Golang package for parsing Windows shell link binary (lnk or Windows shortcut) files.
go lnk forensic-analysis
go lnk forensic-analysis lnk-shortcut lnk-file lnk-parser
Go
•
Apache License 2.0
•17•1•0•0•Updated Mar 28, 2026Mar 28, 2026
go-krypto
Public
A Go library collecting cryptographic hash algorithms designed in the Republic of Korea
has-160 lsh-256 lsh-512
has-160 lsh-256 lsh-512
Go
•
MIT License
•7•1•0•0•Updated Mar 28, 2026Mar 28, 2026
go-hash
Public
Various Go hash functions.
go hashing hash
go hashing hash
Go
•
Apache License 2.0
•1•1•0•0•Updated Mar 28, 2026Mar 28, 2026
go-fortilog
Public
Decodes Fortinet binary firewall logs.
go parser decoder
go parser decoder binary-log fortigate-firewall fortinet-firewall fortilog
Go
•
MIT License
•0•1•0•0•Updated Mar 28, 2026Mar 28, 2026
go-ese
Public
Go implementation of an Extensible Storage Engine parser.
go ese esedb
go ese esedb
Go
•
Apache License 2.0
•13•1•0•0•Updated Mar 28, 2026Mar 28, 2026
go-bgzf
Public
BGZF reader in Go.
go bgzf
go bgzf
Go
•
BSD 3-Clause "New" or "Revised" License
•40•1•0•0•Updated Mar 28, 2026Mar 28, 2026
uncolor
Public
Remove ANSI color escape sequences from the input stream.
go terminal ansi
go terminal ansi codes escape remove sequences uncolor
Go
•
MIT License
•0•1•0•0•Updated Mar 28, 2026Mar 28, 2026
memfile
Public
Memfile is an in-memory, thread-safe, dependency-free file abstraction, that supports seek and notify.
go file in-memory
go file in-memory virtual mem memfile
Go
•
MIT License
•0•1•0•0•Updated Mar 28, 2026Mar 28, 2026
fox-query
Public
Experimental Fox Hunt RAG and LLM server
events forensics fox
events forensics fox rag llm dfir-tools
Go
•0•1•0•0•Updated Mar 28, 2026Mar 28, 2026
flog
Public
Log forensic artifacts as JSON in ECS format. Part of the Forensic Artifacts Collecting Toolkit.
go pipeline ecs
go pipeline ecs dfir artifacts fact forensic flog forensic-tools forensic-tool
Go
•
MIT License
•0•1•0•0•Updated Mar 28, 2026Mar 28, 2026
fmount
Public
Mount various disk images for forensic read-only processing. Part of the Forensic Artifacts Collecting Toolkit.
go pipeline dfir
go pipeline dfir mount fact forensic umount forensic-tools forensic-tool fmount
Go
•
MIT License
•0•1•0•0•Updated Mar 28, 2026Mar 28, 2026
futils
Public
Forensic Artifacts Collecting Toolkit utils library.
go library pipeline
go library pipeline utils fact
Go
•
MIT License
•0•1•0•0•Updated Mar 28, 2026Mar 28, 2026
ffind
Public
Find forensic artifacts in mount points or the live system. Part of the Forensic Artifacts Collecting Toolkit.
go windows pipeline
go windows pipeline dfir artifacts fact forensic forensic-tools forensic-tool ffind
Go
•
MIT License
•0•1•0•0•Updated Mar 28, 2026Mar 28, 2026

ProTip! When viewing an organization's repositories, you can use the props. filter to filter by custom property.

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Fox Forensics

All

All

29 repositories

xr

foxforensics.eu

fox

fox-cask

go-zip

eventid

ustrings

entropy

wth

hashdump

anew

bootkey

fact

go-msi

go-mscfb

go-mmap

go-lnk

go-krypto

go-hash

go-fortilog

go-ese

go-bgzf

uncolor

memfile

fox-query

flog

fmount

futils

ffind

All

All

Repositories list

29 repositories