QuoSec

Explore how Unix-like OS (Linux, BSD, macOS...) modify MACB timestamps and check against POSIX (non-)compliance

grap: define and match graph patterns within binaries

Selective Imaging Tool for live Windows system forensics.