Browser forensics tool for Google Chrome, other Chromium-based browsers, and Mozilla Firefox
-
Updated
Oct 7, 2026 - Python
#
browser-forensics
Here are 27 public repositories matching this topic...
⚡ Temporal Browser Intelligence & Agent-Owned Workflow Runtime with 350 Certified MCP Tools & Python SDK · Sub-Millisecond DOM Time-Travel, Target Memory & Deterministic Automation.
chrome-extension typescript telegram dom mcp reverse-engineering devtools cursor browser-automation claude browser-forensics ai-agent causal-reasoning time-travel-debugger telegram-mini-app model-context-protocol temporal-intelligence dom-intelligence
-
Updated
Sep 11, 2026 - TypeScript
Point it at disk + memory evidence; get a correlated, ATT&CK-mapped attack timeline. Rust DFIR orchestrator: one command ingests E01/EWF/VMDK/raw + memory dumps, parses NTFS/registry/EVTX/prefetch/LNK/SRUM/browser/Amcache + memory (processes, netstat, injection), correlates into a DuckDB super-timeline, scans threat-intel, and reports.
rust timeline incident-response forensics dfir ntfs digital-forensics sigma yara memory-forensics threat-intelligence mitre-attack evtx browser-forensics velociraptor duckdb windows-forensics disk-forensics linux-forensics attack-flow
-
Updated
Aug 17, 2026 - Rust
Decrypt chrome profile data offline using the Chrome Safe Storage keyring secret.
chrome sqlite cookies chromium dfir infosec pentesting keyring post-exploitation digital-forensics decryption offensive-security red-team password-recovery browser-forensics credential-dumping cybersecurity-tools chrome-password-decrypt
-
Updated
Jul 7, 2026 - Python
Firefox profile decryption tool and master password cracker.
firefox dfir infosec pentesting post-exploitation digital-forensics decryption offensive-security nss password-cracker red-team password-recovery browser-security browser-forensics credential-dumping cybersecurity-tools firefox-password-decryption
-
Updated
Jul 7, 2026 - Python
Chrome SNSS session parser + History forensic extractor for Windows
-
Updated
Apr 27, 2026 - Python
Parse Chrome/Firefox/Safari and embedded-Chromium app artifacts — history, cookies, web storage, integrity/tampering, free-page carving, container discovery — into one JSON timeline. Single static Rust binary, no runtime deps.
electron rust cli firefox chrome sqlite leveldb incident-response safari chromium forensics dfir integrity digital-forensics web-storage memory-forensics browser-forensics
-
Updated
Aug 26, 2026 - Rust
Complete notes, lab writeups, and challenge walkthroughs for the LetsDefend Incident Responder Path. This covers DFIR, memory forensics, Windows Event Log analysis, Active Directory attack hunting, malware triage and more!
log-analysis incident-response active-directory dfir sysmon malware-analysis volatility memory-forensics kerberoasting browser-forensics windows-forensics linux-forensics soc-analyst letsdefend forensic-aquisition
-
Updated
Aug 11, 2026
DFIR tool for offline browser artifacts analysis — Chrome & Firefox
-
Updated
Jul 14, 2026 - Python
Chronika is a forensic analysis tool for reading and visualizing different browser histories in a chronological timeline format. Supports Chrome, Firefox, Safari, Brave, Opera, Edge, Vivaldi, Tor Browser, Chromium, LibreWolf and all browsers on Linux and macOS.
firefox chrome opera browser safari chromium forensics edge vivaldi brave historical-data historical forensic-analysis forensic browser-forensic browser-forensics librewolf forensics-tools
-
Updated
Aug 8, 2025 - Python
Digital forensics lab repository demonstrating evidence acquisition, analysis, and incident reconstruction using standard forensic tools while ensuring data integrity and forensic soundness.
digital-forensics cyber-security memory-forensics file-recovery timeline-analysis email-forensics browser-forensics disk-imaging metadata-analysis android-forensics hash-analysis
-
Updated
May 3, 2026 - Python
BrowserDig (Browser Digital Information Gatherer) is a fast, lightweight, cross-platform browser forensics tool for DFIR, threat hunting, and privacy audits. It extracts and analyze history, cookies, logins, downloads, bookmarks, and more from multiple browsers like Chrome, Edge, Firefox, Brave, Opera, Vivaldi, and Safari.
osint incident-response threat-hunting digital-forensics timeline-analysis browser-forensics dfir-tools
-
Updated
Aug 26, 2025
A local forensic workstation for web browser artifact analysis
-
Updated
Jul 3, 2026 - Python
Parse Chrome/Firefox history and cookies into searchable timelines — browser forensics for DFIR and insider investigations.
python chrome incident-response forensics dfir cybersecurity threat-hunting digital-forensics security-tools blue-team browser-forensics offline-security
-
Updated
Sep 2, 2026 - Python
End-to-end live RAM (volatile memory) forensic investigation on Windows 11 — acquisition with Magnet RAM Capture, sector-level processing in Magnet AXIOM, and reconstruction of web, cloud, geolocation, media & in-memory IoCs. DFIR lab write-up.
ioc incident-response dfir cybersecurity threat-hunting malware-analysis digital-forensics forensic-analysis memory-forensics blue-team ec-council browser-forensics windows-forensics forensic-investigation volatile-memory chfi magnet-axiom ram-forensics magnet-forensics
-
Updated
Oct 11, 2026
⚡ Browser Forensic Recorder, Live DOM Intelligence & Universal MCP Server for real-time AI Agent inspection and DOM time-travel.
-
Updated
Sep 1, 2026 - TypeScript
FAEP is an automated tool to extract and parse forensic artifacts from .E01 images automatically, with a clean GUI and minimal manual effort.
python3 dfir digital-forensics forensic-analysis python-automation amcache browser-forensics dfir-automation registry-parser disk-forensics dfir-tools artifacts-parser artifacts-extractor pyewf
-
Updated
Dec 17, 2025 - Perl
A write-up about the CyberDefenders Lab Phishy
powershell mozilla-firefox meterpreter data-exfiltration c2 vba-macros oletools oledump ftk-imager db-browser-for-sqlite smishing browser-forensics maldoc cyberdefenders endpoint-forensics registry-explorer passwordfox phishy
-
Updated
Jun 25, 2026
Chromium/Brave/Edge SNSS session-file forensic decoder — panic-free, read-only; validates the SNSS command stream, decodes navigation base::Pickle payloads, replays per-window tab state. No runtime deps.
rust chrome incident-response chromium forensics dfir brave digital-forensics snss browser-forensics session-restore
-
Updated
Aug 25, 2026 - Rust
A modular Python DFIR suite for live system analysis, Chromium credential decryption, .evtx log parsing, Recycle Bin recovery, and RAM memory carving.
-
Updated
Sep 2, 2026 - Python
Add this topic to your repo
To associate your repository with the browser-forensics topic, visit your repo's landing page and select "manage topics."