Forensic Analysis Python Packages

filegrail

Trace file provenance, metadata, telemetry, investigative pivots and relationships across files, browser history, OS traces and archives. Local, read-only, no network requests.

fivemcipherfinder

A Fivem Cipher finder for those that don't want Ciphers in their scripts :D

snapwonders-mcp

Official MCP server for the snapWONDERS API — let an AI assistant hide, reveal, analyse and convert files on your own machine.

snapwonders

Official Python SDK for the snapWONDERS API — steganography (hide & reveal), forensic media analysis, and format conversion in a few lines.

mem-forensics-mcp

Unified Memory Forensics MCP Server - Multi-tier engine combining Rust speed with Vol3 coverage.

logdissect

CLI utility and Python module for analyzing log files and other data.

vminspect

Tools for inspecting disk images

tgartifacts

Python app for auditing tdata Telegram Desktop 6.x and 4.x versions. Support decrypting tdata, extractring cache, settings, MTProto data from tdata directory

pybeagle

Beagle is an incident response and digital forensics tool which transforms security logs and data into graphs.

pdforensic

This package analyses PDF files for Forensic Investigations.

pyemailtools

Analysis and email forgering with SMTP, IMAP and POP3 client (client for emails protocols).

elfanalyzer

This module parses and analyzes ELF file for Forensic and investigations.

dfler

DFLER: Drone Flight Log Entity Recognizer to Support Forensic Investigation on Drone Device

seqparser

Cli tool to find specific regular expression like email, ip adress, phone number, bitcoin adress ... in a file

pymem-snapshot

PyMem - Memory Acquisition Tool