# cugu/awesome-forensics

⭐️ A curated list of awesome forensic analysis tools and resources

Repository: https://github.com/cugu/awesome-forensics
Canonical: https://ross.abutalabs.com/products/awesome-forensics
Homepage: http://cugu.github.io/awesome-forensics/
License: CC0-1.0
License Family: permissive
Topics: computer-forensics, digital-forensics, forensic-analysis, dfir, open-source, free
Last push: 2026-08-23T09:53:20+00:00

## Health v2 (maintenance only)
Score: 77/100 (v2, computed 2026-09-03T02:20:16.233290+00:00)
- activity 99, release rhythm 35, longevity 100
- inputs: {"age_days": 3809, "days_push": 10, "days_rel": null, "gap_med": null, "n_releases_24m": 0}
- flags: no_releases
- formula: round(0.45*activity + 0.35*rhythm + 0.20*longevity); archived -> min(score, 10)

## Adoption (not part of the score)
Stars 5166, forks 768 (observed 2026-08-28T04:09:11.528217+00:00)

## What it is
A curated list of free and open-source digital forensics (DFIR) tools and resources, organized by category such as memory forensics, network forensics, mobile forensics, and timeline analysis. It also includes learning materials like CTF challenges, books, blogs, and labs.

## Use cases
- find open-source digital forensics tools
- learn DFIR and incident response
- find memory forensics software
- discover forensic analysis Linux distributions
- find CTF challenges for forensics practice
- locate resources for mobile device forensics

## When to choose
- you need a starting point to discover forensic analysis tools
- you are learning digital forensics and want curated resources
- you want to compare tools across many forensics subdomains

## When to avoid
- you need a single working tool rather than a link list
- you need guaranteed-maintained software, since some listed projects are archived or unmaintained

## Facets
- artifact type: learning-resource
- maturity: active
- function: security, developer-tools
- domain: security, awesome-lists, developer-tools
- platform: cross-platform
- tags: digital-forensics, dfir, awesome-list, curated-list, incident-response, memory-forensics, network-forensics

## Member repositories
- cugu/awesome-forensics (main) score 77

## Provenance
- Observed fields: from GitHub, fetched 2026-08-28T04:09:11.528217+00:00.
- Health v2: computed from the inputs above; adoption is never an input.
- Inferred fields (summary, facets, guidance): AI-extracted, prompt v1, taxonomy v1, on 2026-08-29T18:01:52.411360+00:00, confidence not recorded.
  - readme: https://github.com/cugu/awesome-forensics (fetched 2026-08-28T04:09:11.528217+00:00, sha 4d343cc8896d)
  - homepage: http://cugu.github.io/awesome-forensics/ (fetched 2026-08-29T08:56:09.630004+00:00, sha 6a472f3fa9ae)
- Data as of 2026-08-30T08:39:29.467469+00:00.