In-depth repository of Telegram OSINT resources covering, tools, techniques & tradecraft.

📚 A Curated List of Awesome Telegram OSINT Tools, Sites & Resources

Parses $MFT from NTFS file systems

FQLite - SQLite Forensic Toolkit. FQLite is a tool to find and restore deleted records in SQlite databases. It therefore examines the database for entries marked as deleted.

Credentials recovery project

Web browser forensics for Google Chrome/Chromium

The Sleuth Kit® (TSK) is a library and collection of command line digital forensics tools that allow you to investigate volume and file system data. The library can be incorporated into larger digi…

Autopsy® is a digital forensics platform and graphical interface to The Sleuth Kit® and other digital forensics tools. It can be used by law enforcement, military, and corporate examiners to invest…

Digital Forensics artifact repository

An advanced memory forensics framework

Digital Forensics Guide. Learn all about Digital Forensics, Computer Forensics, Mobile device Forensics, Network Forensics, and Database Forensics.

A curated list of iOS Forensics References, organized by folder with specific references (links to blog post, research paper, articles, and so on) for each interesting file

Android Logs Events And Protobuf Parser

iOS Logs, Events, And Plist Parser

OneDriveExplorer is a command line and GUI based application for reconstructing the folder structure of OneDrive from the <UserCid>.dat and <UserCid>.dat.previous file.

Google Filestream Forensic Tool

DriveFS Sleuth is a Python tool that automates investigating Google Drive File Stream disk artifacts, the tool has been developed based on research that has been performed by mounting different sce…