Dfir Automation Python Packages

mem-forensics-mcp

Unified Memory Forensics MCP Server - Multi-tier engine combining Rust speed with Vol3 coverage.

359 6 0

generaptor

CLI generator for Velociraptor offline collector

253 17 4

forensia

Your local AI assistant for weekend forensic work.

166 29 1

edf-helium-client

Collaborative Forensic Collections Manager

147 1 2

edf-helium-server

Collaborative Forensic Collections Manager

141 1 2

edf-helium-core

Collaborative Forensic Collections Manager

141 1 2

edf-carbon-server

Minimalist Collaborative Digital Logbook

126 2 1

edf-carbon-client

Minimalist Collaborative Digital Logbook

122 2 1

edf-carbon-core

Minimalist Collaborative Digital Logbook

120 2 1

crowdstrike-client

CrowdStrike API Client Library

116 0 0

edf-plasma-dissectors

Extract and normalize information from forensics artifacts

114 6 3

edf-plasma-cli

Extract and normalize information from forensics artifacts

114 6 3

edf-neon-server

Minimalist Collaborative Malware DB Management

113 1 1

edf-neon-client

Minimalist Collaborative Malware DB Management

112 1 1

edf-plasma-core

Extract and normalize information from forensics artifacts

111 6 3

edf-iron-server

Unified cases, seamless integrations

108 1 1

edf-neon-core

Minimalist Collaborative Malware DB Management

105 1 1

edf-iron-client

Unified cases, seamless integrations

101 1 1

varc

Volatile Artifact Collector collects a snapshot of volatile data from a system. It tells you what is happening on a system, and is of particular use when investigating a security incident.

98 254 14

edf-iron-core

Unified cases, seamless integrations

97 1 1

edf-iron-x-iris

Unified cases, seamless integrations

90 1 1

urlbreakdown

splits a URL into individual components, unescapes arguments, and performs light calculations for manual or automated analysis

53 1 0

edf-fossil

A post-mortem analysis tool for raw disk/partition images

38 0 1