Dfir Automation Python Packages

generaptor

CLI generator for Velociraptor offline collector

903 16 5

edf-helium-core

Collaborative Forensic Collections Manager

809 1 2

edf-helium-server

Collaborative Forensic Collections Manager

743 1 2

edf-helium-client

Collaborative Forensic Collections Manager

697 1 2

edf-plasma-dissectors

Extract and normalize information from forensics artifacts

554 5 3

edf-plasma-core

Extract and normalize information from forensics artifacts

530 5 3

edf-carbon-core

Minimalist Collaborative Digital Logbook

511 2 2

edf-plasma-cli

Extract and normalize information from forensics artifacts

496 5 3

edf-neon-core

Minimalist Collaborative Malware DB Management

484 1 2

edf-carbon-server

Minimalist Collaborative Digital Logbook

483 2 2

edf-carbon-client

Minimalist Collaborative Digital Logbook

482 2 2

edf-iron-core

Unified cases, seamless integrations

468 1 2

edf-neon-server

Minimalist Collaborative Malware DB Management

462 1 2

edf-neon-client

Minimalist Collaborative Malware DB Management

444 1 2

edf-iron-server

Unified cases, seamless integrations

441 1 2

edf-iron-client

Unified cases, seamless integrations

430 1 2

edf-iron-x-iris

Unified cases, seamless integrations

405 1 2

mem-forensics-mcp

Unified Memory Forensics MCP Server - Multi-tier engine combining Rust speed with Vol3 coverage.

354 6 0

crowdstrike-client

A Non-oficial crowdstrike client API

215 0 0

varc

Volatile Artifact Collector collects a snapshot of volatile data from a system. It tells you what is happening on a system, and is of particular use when investigating a security incident.

172 254 14

urlbreakdown

splits a URL into individual components, unescapes arguments, and performs light calculations for manual or automated analysis

116 1 0

edf-fossil

A post-mortem analysis tool for raw disk images

82 0 1