Skip to content
@SecurityRonin

Security Ronin

Popular repositories Loading

  1. docx-mcp docx-mcp Public

    MCP server for reading and editing Word (.docx) documents with track changes, comments, footnotes, and structural validation

    Python 69 20

  2. chat4n6 chat4n6 Public

    Forensic extraction for WhatsApp, Signal, and Telegram — 8-layer SQLite recovery, anti-forensics detection, court-ready reports.

    Rust 50 6

  3. usnjrnl-forensic usnjrnl-forensic Public archive

    The most comprehensive NTFS USN Journal parser: full path reconstruction (CyberCX Rewind), TriForce correlation (MFT + LogFile + UsnJrnl), ghost record recovery, anti-forensics detection, timestomp…

    Rust 33

  4. alaya alaya Public

    A memory engine for conversational AI agents, inspired by neuroscience and Buddhist psychology

    Rust 20 4

  5. issen issen Public

    Point it at disk + memory evidence; get a correlated, ATT&CK-mapped attack timeline. Rust DFIR orchestrator: one command ingests E01/EWF/VMDK/raw + memory dumps, parses NTFS/registry/EVTX/prefetch/…

    Rust 15 3

  6. blazehash blazehash Public

    Forensic file hasher — BLAKE3 at 1,640 MB/s, 25 hash algorithms, Ed25519 + post-quantum signing, Bitcoin timestamps, YARA scanning, 50+ remote backends. hashdeep for the modern era.

    Rust 12 1

Repositories

Showing 10 of 125 repositories
  • forensicnomicon Public

    DFIR artifact catalog (6,554 artifacts, LOL/LOFL binaries, abusable sites) plus the normalized report vocabulary the SecurityRonin analyzer fleet shares — offline Rust library + 4n6query CLI

    SecurityRonin/forensicnomicon's past year of commit activity
    Rust 9 Apache-2.0 2 0 0 Updated Nov 13, 2026
  • hfsplus-forensic Public

    Forensic-grade Apple HFS+/HFSX reader — volume header, catalog B-tree directory listing, and data-fork file extraction

    SecurityRonin/hfsplus-forensic's past year of commit activity
    Rust 1 Apache-2.0 0 0 0 Updated Nov 12, 2026
  • iso9660-forensic Public

    Forensic ISO 9660 reader & tamper analyzer in pure Rust — analyse() surfaces 23 anomaly findings (redundancy, slack, EDC/ECC, concealment) across multi-session, Rock Ridge, Joliet, El Torito & raw CD images

    SecurityRonin/iso9660-forensic's past year of commit activity
    Rust 1 Apache-2.0 1 0 0 Updated Nov 12, 2026
  • ntfs-forensic Public

    From-scratch NTFS reader (ntfs-core: MFT, attributes, indexes, data runs, LZNT1, $UsnJrnl:$J change journal over Read+Seek) plus a graded anomaly auditor (ntfs-forensic: timestomping, alternate data streams, deleted records, MFT/LogFile tamper checks) — panic-free, fuzzed, no unsafe

    SecurityRonin/ntfs-forensic's past year of commit activity
    Rust 2 Apache-2.0 3 6 3 Updated Nov 12, 2026
  • archive-forensic Public
    SecurityRonin/archive-forensic's past year of commit activity
    Rust 0 Apache-2.0 0 0 0 Updated Nov 12, 2026
  • ad1-forensic Public

    Pure-Rust reader + forensic auditor for AccessData AD1 logical images (FTK Imager Custom Content Image)

    SecurityRonin/ad1-forensic's past year of commit activity
    Rust 0 Apache-2.0 0 0 0 Updated Nov 12, 2026
  • aff4-forensic Public

    Pure-Rust read-only AFF4 disk-image reader (aff4) + forensic integrity analyzer (aff4-forensic)

    SecurityRonin/aff4-forensic's past year of commit activity
    Rust 0 Apache-2.0 1 0 1 Updated Nov 12, 2026
  • ewf-forensic Public

    Forensic integrity analysis and repair for EWF (Expert Witness Format / E01) images

    SecurityRonin/ewf-forensic's past year of commit activity
    Rust 0 Apache-2.0 2 0 6 Updated Nov 12, 2026
  • apfs-forensic Public

    Apple File System (APFS) forensic library — from-scratch pure-Rust reader (apfs-core) + anomaly analyzer (apfs-forensic) for container, volume, snapshot, encryption and sealed-volume structures. Panic-free, no runtime deps. Design + scaffold; implementation in progress.

    SecurityRonin/apfs-forensic's past year of commit activity
    Rust 0 Apache-2.0 2 0 1 Updated Nov 12, 2026
  • veracrypt-forensic Public

    VeraCrypt/TrueCrypt forensic library — brute the header PRF+cipher from a password, recover the master key, and decrypt the volume (AES/Serpent/Twofish, 5 PRFs, hidden volumes). Panic-free, no unsafe.

    SecurityRonin/veracrypt-forensic's past year of commit activity
    Rust 3 Apache-2.0 1 0 0 Updated Nov 12, 2026
View all repositories

People

This organization has no public members. You must be a member to see who’s a part of this organization.