Browser forensics tool for Google Chrome, other Chromium-based browsers, and Mozilla Firefox
-
Updated
Nov 11, 2026 - Python
#
browser-forensics
Here are 32 public repositories matching this topic...
Point it at disk + memory evidence; get a correlated, ATT&CK-mapped attack timeline. Rust DFIR orchestrator: one command ingests E01/EWF/VMDK/raw + memory dumps, parses NTFS/registry/EVTX/prefetch/LNK/SRUM/browser/Amcache + memory (processes, netstat, injection), correlates into a DuckDB super-timeline, scans threat-intel, and reports.
rust timeline incident-response forensics dfir ntfs digital-forensics sigma yara memory-forensics threat-intelligence mitre-attack evtx browser-forensics velociraptor duckdb windows-forensics disk-forensics linux-forensics attack-flow
-
Updated
Nov 4, 2026 - Rust
⚡ Temporal Browser Intelligence & Agent-Owned Workflow Runtime with 350 Certified MCP Tools & Python SDK · Sub-Millisecond DOM Time-Travel, Target Memory & Deterministic Automation.
chrome-extension typescript telegram dom mcp reverse-engineering devtools cursor browser-automation claude browser-forensics ai-agent causal-reasoning time-travel-debugger telegram-mini-app model-context-protocol temporal-intelligence dom-intelligence
-
Updated
Sep 11, 2026 - TypeScript
Kokino Forensic Toolkit (Kokino FTK): open-source disk forensics in your browser. E01, raw, VHD(X), VMDK, ISO; NTFS, FAT, exFAT, ext2/3/4, HFS+, APFS, ISO 9660, UDF; BitLocker, shadow copies, triage collections (KAPE, Velociraptor, UAC). Windows, macOS and Linux artifacts, browsers, email (Outlook PST/OST, mbox, Apple Mail), carving, correlation.
rust security ext4 incident-response forensics dfir fat ntfs exfat digital-forensics iso9660 vmdk vhdx apfs e01 browser-forensics windows-forensics linux-forensics hfs-plus registry-forensics
-
Updated
Nov 12, 2026 - Rust
Decrypt chrome profile data offline using the Chrome Safe Storage keyring secret.
chrome sqlite cookies chromium dfir infosec pentesting keyring post-exploitation digital-forensics decryption offensive-security red-team password-recovery browser-forensics credential-dumping cybersecurity-tools chrome-password-decrypt
-
Updated
Jul 7, 2026 - Python
Chrome SNSS session parser + History forensic extractor for Windows
-
Updated
Apr 27, 2026 - Python
Firefox profile decryption tool and master password cracker.
firefox dfir infosec pentesting post-exploitation digital-forensics decryption offensive-security nss password-cracker red-team password-recovery browser-security browser-forensics credential-dumping cybersecurity-tools firefox-password-decryption
-
Updated
Jul 7, 2026 - Python
Parse Chrome/Firefox/Safari and embedded-Chromium app artifacts — history, cookies, web storage, integrity/tampering, free-page carving, container discovery — into one JSON timeline. Single static Rust binary, no runtime deps.
electron rust cli firefox chrome sqlite leveldb incident-response safari chromium forensics dfir integrity digital-forensics web-storage memory-forensics browser-forensics
-
Updated
Nov 4, 2026 - Rust
Complete notes, lab writeups, and challenge walkthroughs for the LetsDefend Incident Responder Path. This covers DFIR, memory forensics, Windows Event Log analysis, Active Directory attack hunting, malware triage and more!
log-analysis incident-response active-directory dfir sysmon malware-analysis volatility memory-forensics kerberoasting browser-forensics windows-forensics linux-forensics soc-analyst letsdefend forensic-aquisition
-
Updated
Aug 11, 2026
Chronika is a forensic analysis tool for reading and visualizing different browser histories in a chronological timeline format. Supports Chrome, Firefox, Safari, Brave, Opera, Edge, Vivaldi, Tor Browser, Chromium, LibreWolf and all browsers on Linux and macOS.
firefox chrome opera browser safari chromium forensics edge vivaldi brave historical-data historical forensic-analysis forensic browser-forensic browser-forensics librewolf forensics-tools
-
Updated
Oct 15, 2026 - Python
DFIR tool for offline browser artifacts analysis (Chrome & Firefox)
-
Updated
Nov 12, 2026 - Python
Modified fork of CCL Group's ccl_chromium_reader: DFIR tools for parsing Chromium browser artifacts (Local Storage, Session Storage, IndexedDB, LevelDB)
python chrome leveldb localstorage chromium forensics dfir indexeddb sessionstorage digital-forensics browser-forensics
-
Updated
Oct 28, 2026 - Python
Digital forensics lab repository demonstrating evidence acquisition, analysis, and incident reconstruction using standard forensic tools while ensuring data integrity and forensic soundness.
digital-forensics cyber-security memory-forensics file-recovery timeline-analysis email-forensics browser-forensics disk-imaging metadata-analysis android-forensics hash-analysis
-
Updated
May 3, 2026 - Python
⚡ Browser Forensic Recorder, Live DOM Intelligence & Universal MCP Server for real-time AI Agent inspection and DOM time-travel.
-
Updated
Sep 1, 2026 - TypeScript
Parse Chrome/Firefox history and cookies into searchable timelines — browser forensics for DFIR and insider investigations.
python chrome incident-response forensics dfir cybersecurity threat-hunting digital-forensics security-tools blue-team browser-forensics offline-security
-
Updated
Sep 2, 2026 - Python
A local forensic workstation for web browser artifact analysis
-
Updated
Jul 3, 2026 - Python
End-to-end live RAM (volatile memory) forensic investigation on Windows 11 — acquisition with Magnet RAM Capture, sector-level processing in Magnet AXIOM, and reconstruction of web, cloud, geolocation, media & in-memory IoCs. DFIR lab write-up.
ioc incident-response dfir cybersecurity threat-hunting malware-analysis digital-forensics forensic-analysis memory-forensics blue-team ec-council browser-forensics windows-forensics forensic-investigation volatile-memory chfi magnet-axiom ram-forensics magnet-forensics
-
Updated
Oct 11, 2026
BrowserDig (Browser Digital Information Gatherer) is a fast, lightweight, cross-platform browser forensics tool for DFIR, threat hunting, and privacy audits. It extracts and analyze history, cookies, logins, downloads, bookmarks, and more from multiple browsers like Chrome, Edge, Firefox, Brave, Opera, Vivaldi, and Safari.
osint incident-response threat-hunting digital-forensics timeline-analysis browser-forensics dfir-tools
-
Updated
Oct 25, 2026 - Python
Chromium/Brave/Edge SNSS session-file forensic decoder — panic-free, read-only; validates the SNSS command stream, decodes navigation base::Pickle payloads, replays per-window tab state. No runtime deps.
rust chrome incident-response chromium forensics dfir brave digital-forensics snss browser-forensics session-restore
-
Updated
Aug 25, 2026 - Rust
Evidence-grade browser forensics in a single Bash file: discovery, hashed acquisition, Chromium/Gecko/WebKit parsing, deleted-record recovery, unified UTC timeline and reports.
bash firefox sqlite incident-response safari chromium forensics dfir digital-forensics browser-forensics
-
Updated
Oct 14, 2026 - Shell
Add this topic to your repo
To associate your repository with the browser-forensics topic, visit your repo's landing page and select "manage topics."