Skip to content

Dissect

Forensics & Incident Response

A digital forensics & incident response framework that provides unified tools for analysing forensic artefacts across multiple disk formats, filesystems and operating systems.

Track releases GitHub Website
Latest 3.22 · 5mo ago Security brief →

Features

  • Unified access to forensic artifacts from diverse disk/container formats (E01, VMDK, QCoW, etc.)
  • Cross‑filesystem and cross‑OS support (NTFS, ExtFS, FFS on Windows, Linux, ESXi)
  • Command‑line utilities `target-query` and `target-shell` for quick artifact extraction and interactive analysis

Recent releases

View all 1 releases →
3.22 New feature
Notable features
  • APFS filesystem support
  • Active Directory Certificate Services plugin
  • NTDS database filesystem
View release on GitHub

Weekly OSS security release digest.

The CVE patches and breaking changes that affected production tools this week. One email, every Sunday.

No spam, unsubscribe anytime.

About

Stars
1,130
Forks
85
View on GitHub Homepage Live demo Documentation

Install & Platforms

Install via
pip

Community & Support

Discord

Similar tools

Acquire
Forensic Artifacts
DFIR ORC

Beta — feedback welcome: [email protected]