Skip to content
@SecurityRonin

Security Ronin

Popular repositories Loading

  1. docx-mcp docx-mcp Public

    MCP server for reading and editing Word (.docx) documents with track changes, comments, footnotes, and structural validation

    Python 67 20

  2. chat4n6 chat4n6 Public

    Forensic extraction for WhatsApp, Signal, and Telegram — 8-layer SQLite recovery, anti-forensics detection, court-ready reports.

    Rust 50 6

  3. usnjrnl-forensic usnjrnl-forensic Public archive

    The most comprehensive NTFS USN Journal parser: full path reconstruction (CyberCX Rewind), TriForce correlation (MFT + LogFile + UsnJrnl), ghost record recovery, anti-forensics detection, timestomp…

    Rust 33 1

  4. alaya alaya Public

    A memory engine for conversational AI agents, inspired by neuroscience and Buddhist psychology

    Rust 20 4

  5. issen issen Public

    Point it at disk + memory evidence; get a correlated, ATT&CK-mapped attack timeline. Rust DFIR orchestrator: one command ingests E01/EWF/VMDK/raw + memory dumps, parses NTFS/registry/EVTX/prefetch/…

    Rust 13 3

  6. blazehash blazehash Public

    Forensic file hasher — BLAKE3 at 1,640 MB/s, 25 hash algorithms, Ed25519 + post-quantum signing, Bitcoin timestamps, YARA scanning, 50+ remote backends. hashdeep for the modern era.

    Rust 12 1

Repositories

Showing 10 of 125 repositories
  • forensicnomicon Public

    DFIR artifact catalog (6,554 artifacts, LOL/LOFL binaries, abusable sites) plus the normalized report vocabulary the SecurityRonin analyzer fleet shares — offline Rust library + 4n6query CLI

    SecurityRonin/forensicnomicon's past year of commit activity
    Rust 9 Apache-2.0 2 0 0 Updated Nov 7, 2026
  • memory-forensic Public

    Walk any memory dump. Find what's hidden. Linux + Windows kernel forensics from a single static Rust binary — no Python required.

    SecurityRonin/memory-forensic's past year of commit activity
    Rust 12 Apache-2.0 1 3 1 Updated Nov 4, 2026
  • btrfs-forensic Public

    Btrfs forensic library — parse superblock/chunk-tree/fs-tree/extents, detect integrity anomalies, carve deleted files via CoW backup roots. Pure-Rust, panic-free, fuzzed, Tier-1-validated.

    SecurityRonin/btrfs-forensic's past year of commit activity
    Rust 1 Apache-2.0 1 0 1 Updated Nov 4, 2026
  • zfs-forensic Public

    ZFS forensic library — parse ZFS on-disk (vdev labels, uberblock, block pointers, DMU/dnode, ZAP/DSL/ZPL/SA), detect anomalies, carve deleted files via snapshots. Pure-Rust, panic-free, fuzzed, Tier-1 (FreeBSD/OpenZFS).

    SecurityRonin/zfs-forensic's past year of commit activity
    Rust 3 Apache-2.0 1 0 1 Updated Nov 4, 2026
  • dar-forensic Public

    Pure-Rust forensic reader + anomaly auditor for Denis Corbin DAR (Disk ARchiver) archives, incl. Passware Kit Mobile / Cellebrite mobile extractions; formats 1-11, transparent gzip/bzip2/xz/zstd/lz4/lzo, multi-volume, hardened and fuzz-tested. dar-core reader + dar-forensic analyzer.

    SecurityRonin/dar-forensic's past year of commit activity
    Rust 0 Apache-2.0 1 0 1 Updated Nov 4, 2026
  • forensic-vfs Public

    Read-only forensic VFS contracts composing evidence into one positioned-read byte edge — ArchiveOpen · ContainerOpen · VolumeSystemOpen · EncryptionOpen · FileSystemOpen — with recursive PathSpec locators. The contract crate every fleet reader implements.

    SecurityRonin/forensic-vfs's past year of commit activity
    Rust 0 Apache-2.0 0 0 0 Updated Nov 4, 2026
  • aff4-forensic Public

    Pure-Rust read-only AFF4 disk-image reader (aff4) + forensic integrity analyzer (aff4-forensic)

    SecurityRonin/aff4-forensic's past year of commit activity
    Rust 0 Apache-2.0 1 0 2 Updated Nov 4, 2026
  • zip-forensic Public

    Pure-Rust forensic ZIP toolkit: zip-full-core reader (no C-FFI, all common codecs + decryption) and zip-forensic anomaly auditor

    SecurityRonin/zip-forensic's past year of commit activity
    Rust 0 Apache-2.0 1 0 1 Updated Nov 4, 2026
  • sqlite-forensic Public

    Read-only SQLite forensic toolkit: carve deleted records (freelist/in-page/dropped-table/WAL/journal), read index b-trees & WITHOUT ROWID tables, WAL version history, anti-forensic + encryption-scheme diagnostics, BLOB typing/SHA-256/decode, CASE/UCO export. Panic-free, forbid-unsafe, validated vs undark/fqlite. CLI + Rust libs + Python.

    SecurityRonin/sqlite-forensic's past year of commit activity
    Rust 5 Apache-2.0 0 0 0 Updated Nov 4, 2026
  • ronin-issen Public

    The SecurityRonin forensic fleet — 86 pure-Rust DFIR libraries fronted by Issen: point it at a disk image + memory dump, get one correlated ATT&CK-mapped timeline. Governance, ADRs, and the component map.

    SecurityRonin/ronin-issen's past year of commit activity
    Python 6 Apache-2.0 0 2 0 Updated Nov 4, 2026
View all repositories

People

This organization has no public members. You must be a member to see who’s a part of this organization.