Investigation Python Packages

maigret

🕵️‍♂️ Collect a dossier on a person by username from 6K websites

filegrail

Trace file provenance, metadata, telemetry, investigative pivots and relationships across files, browser history, OS traces and archives. Local, read-only, no network requests.

tenzir

Tenzir is the data pipeline engine for security teams.

pyvast

Tenzir is the data pipeline engine for security teams.

anxwritter

Generate i2 Analyst's Notebook (.anx) charts from Python, JSON, or YAML

aarya

validate the existence of email address on various online platforms, find digital footprint related to it, like Google maps contributions, reviews etc. | aarya was featured on https://osintool.org/

consensus-osint

OSINT tool for username search, email lookup and phone intelligence. 7,900+ lookup modules standardised from 19 projects, with enriched results, evidence graphs and MCP integration. By the OSINT Experts Society.

moriarty-project

Advanced recognition and security analysis tool for OSINT investigations and penetration tests.

pytenzir

Tenzir is the data pipeline engine for security teams.

hashtray

hashtray is an OSINT (Open Source Intelligence) tool designed to find a Gravatar account associated with an email address and to locate an email address using a Gravatar account username or hash.

sierra-dev

Sierra‑SDK is a Python framework for building and managing invoker scripts that can be used across different nodes in Sierra during any investigation.

osintengine

The open-source Palantir for the people. Autonomous 7-phase OSINT engine across 16+ APIs with persistent knowledge graph, cross-case memory, and MCP community graph.

medor

medor is an OSINT tool that enables you to discover a WordPress website IP behind a WAF or behind Onion Services.

rekos

Terminal-native passive OSINT CLI for local-first public-source investigations, evidence correlation, and case management.

pdforensic

This package analyses PDF files for Forensic Investigations.

favicorn-osint

All-sources tool to search websites by favicons

noimosiny

Official Python SDK for the Noimosiny API — advanced reverse email, phone, and username lookup engine for OSINT and identity verification.

visualize-logs

A Python library and command line tools to provide interactive log visualization.

cuckoo-api

API for Cuckoo Malware Analysis Sandbox http://www.cuckoosandbox.org

querycombinedlogformat

This tool extracts, filters and parses combined log format (apache and nginx default access.log format) with a easy and fast language syntax.