Skip to content

@fox-it Fox-IT

Change the repository type filter

All

    Repositories list

    96 repositories

    • dissect.database

      Public
      A Dissect module implementing parsers for various database formats
      Python
      •
      Apache License 2.0
      •7•3•9•8•Updated Feb 27, 2026Feb 27, 2026

    • flow.record

      Public
      Recordization library
      Python
      •
      GNU Affero General Public License v3.0
      •13•11•10•2•Updated Feb 27, 2026Feb 27, 2026

    • dissect.cstruct

      Public
      A Dissect module implementing a parser for C-like structures.
      Python
      •
      Apache License 2.0
      •20•56•14•4•Updated Feb 26, 2026Feb 26, 2026

    • dissect.target

      Public
      The Dissect module tying all other Dissect modules together. It provides a programming API and command line tools which allow easy access to various data source…
      Python
      •
      GNU Affero General Public License v3.0
      •80•79•216•52•Updated Feb 26, 2026Feb 26, 2026

    • dissect.util

      Public
      A Dissect module implementing various utility functions for the other Dissect modules.
      Python
      •
      Apache License 2.0
      •7•4•13•5•Updated Feb 25, 2026Feb 25, 2026

    • acquire

      Public
      acquire is a tool to quickly gather forensic artifacts from disk images or a live system into a lightweight container.
      Python
      •
      GNU Affero General Public License v3.0
      •38•117•31•10•Updated Feb 25, 2026Feb 25, 2026

    • dissect

      Public
      Dissect is a digital forensics & incident response framework and toolset that allows you to quickly access and analyse forensic artefacts from various disk and …
      pythondfirdissect
      GNU Affero General Public License v3.0
      •80•1.1k•7•1•Updated Feb 25, 2026Feb 25, 2026

    • dissect.hypervisor

      Public
      A Dissect module implementing parsers for various hypervisor disk, backup and configuration files.
      Python
      •
      GNU Affero General Public License v3.0
      •11•8•7•1•Updated Feb 24, 2026Feb 24, 2026

    • dissect.volume

      Public
      A Dissect module implementing a parser for different disk volume and partition systems, for example LVM2, GPT and MBR.
      Python
      •
      GNU Affero General Public License v3.0
      •3•5•3•2•Updated Feb 24, 2026Feb 24, 2026

    • dissect.squashfs

      Public
      A Dissect module implementing a parser for the SquashFS file system.
      Python
      •
      GNU Affero General Public License v3.0
      •2•1•6•0•Updated Feb 24, 2026Feb 24, 2026

    • dissect.ntfs

      Public
      A Dissect module implementing a parser for the NTFS file system, used by the Windows operating system.
      Python
      •
      GNU Affero General Public License v3.0
      •7•10•5•2•Updated Feb 24, 2026Feb 24, 2026

    • dissect.fve

      Public
      A Dissect module implementing a parsers for full volume encryption implementations, currently Microsoft's Bitlocker Disk Encryption (BDE) and Linux Unified Key …
      Python
      •
      GNU Affero General Public License v3.0
      •3•6•1•0•Updated Feb 24, 2026Feb 24, 2026

    • dissect.evidence

      Public
      A Dissect module implementing a parsers for various forensic evidence file containers, currently: AD1, ASDF and EWF.
      Python
      •
      GNU Affero General Public License v3.0
      •3•11•6•4•Updated Feb 24, 2026Feb 24, 2026

    • dissect.btrfs

      Public
      A Dissect module implementing a parser for the btrfs file system.
      Python
      •
      GNU Affero General Public License v3.0
      •2•2•2•0•Updated Feb 24, 2026Feb 24, 2026

    • dissect.apfs

      Public
      Dissect module implementing a parser for the APFS file system, a commonly used Apple filesystem
      Python
      •
      GNU Affero General Public License v3.0
      •0•2•0•0•Updated Feb 24, 2026Feb 24, 2026

    • dissect.refs

      Public
      0•0•0•0•Updated Feb 11, 2026Feb 11, 2026

    • dissect.zfs

      Public
      0•0•0•0•Updated Feb 11, 2026Feb 11, 2026

    • dissect.erofs

      Public
      1•0•0•1•Updated Feb 11, 2026Feb 11, 2026

    • dissect-docs

      Public
      Dissect documentation project
      GNU Affero General Public License v3.0
      •8•7•6•4•Updated Jan 29, 2026Jan 29, 2026

    • foxhound

      Public
      0•0•0•0•Updated Jan 22, 2026Jan 22, 2026

    • dissect.disc

      Public
      A Dissect module implementing a parser for file systems commonly used on optical media, such as ISO9660 and several extensions.
      2•0•0•1•Updated Dec 31, 2025Dec 31, 2025

    • dissect.fat

      Public
      A Dissect module implementing parsers for the FAT and exFAT file systems, commonly used on flash memory based storage devices and UEFI partitions.
      Python
      •
      GNU Affero General Public License v3.0
      •4•4•2•1•Updated Dec 19, 2025Dec 19, 2025

    • dissect-workflow-templates

      Public
      Workflow templates for the dissect projects
      3•2•0•0•Updated Dec 15, 2025Dec 15, 2025

    • dissect.sql

      Public archive
      A Dissect module implementing a parsers for the SQLite database file format, commonly used by applications to store configuration data.
      Python
      •
      GNU Affero General Public License v3.0
      •7•7•0•0•Updated Nov 20, 2025Nov 20, 2025

    • dissect.esedb

      Public archive
      A Dissect module implementing a parser for Microsofts Extensible Storage Engine Database (ESEDB), used for example in Active Directory, Exchange and Windows Upd…
      Python
      •
      Apache License 2.0
      •11•24•0•0•Updated Nov 20, 2025Nov 20, 2025

    • dissect.xfs

      Public
      A Dissect module implementing a parser for the XFS file system, commonly used by RedHat Linux distributions.
      Python
      •
      GNU Affero General Public License v3.0
      •7•3•9•0•Updated Nov 20, 2025Nov 20, 2025

    • dissect.vmfs

      Public
      Dissect module implementing a parser for the VMFS file system, used by VMware virtualization software.
      Python
      •
      GNU Affero General Public License v3.0
      •2•6•2•0•Updated Nov 20, 2025Nov 20, 2025

    • dissect.thumbcache

      Public
      A Dissect module implementing a parser for windows thumbcache.
      Python
      •
      GNU Affero General Public License v3.0
      •2•3•0•0•Updated Nov 20, 2025Nov 20, 2025

    • dissect.shellitem

      Public
      A Dissect module implementing a parser for the Shellitem structures, commonly used by Microsoft Windows.
      Python
      •
      GNU Affero General Public License v3.0
      •3•4•1•0•Updated Nov 20, 2025Nov 20, 2025

    • dissect.regf

      Public
      A Dissect module implementing a parser for Windows registry file format, used to store application and OS configuration on Windows operating systems.
      Python
      •
      GNU Affero General Public License v3.0
      •3•5•0•0•Updated Nov 20, 2025Nov 20, 2025