Skip to content
@SecurityRonin

Security Ronin

Popular repositories Loading

  1. docx-mcp docx-mcp Public

    MCP server for reading and editing Word (.docx) documents with track changes, comments, footnotes, and structural validation

    Python 42 12

  2. chat4n6 chat4n6 Public

    Forensic extraction for WhatsApp, Signal, and Telegram — 8-layer SQLite recovery, anti-forensics detection, court-ready reports.

    Rust 37 5

  3. usnjrnl-forensic usnjrnl-forensic Public archive

    The most comprehensive NTFS USN Journal parser: full path reconstruction (CyberCX Rewind), TriForce correlation (MFT + LogFile + UsnJrnl), ghost record recovery, anti-forensics detection, timestomp…

    Rust 31

  4. alaya alaya Public

    A memory engine for conversational AI agents, inspired by neuroscience and Buddhist psychology

    Rust 13 3

  5. nameback nameback Public

    Give meaningful names to recovered files (normally only got placeholder names), based on their embedded metadata and/or contents extracted using OCR

    Rust 10

  6. ewf ewf Public archive

    ⤳ Moved to SecurityRonin/ewf-forensic — EWF/E01 reader, now the core/ member there. Crate 'ewf' still published.

    Rust 10 3

Repositories

Showing 10 of 121 repositories
  • forensicnomicon Public

    DFIR artifact catalog (6,554 artifacts, LOL/LOFL binaries, abusable sites) plus the normalized report vocabulary the SecurityRonin analyzer fleet shares — offline Rust library + 4n6query CLI

    SecurityRonin/forensicnomicon's past year of commit activity
    Rust 4 Apache-2.0 2 0 0 Updated Aug 11, 2026
  • sqlite-forensic Public

    Read-only SQLite forensic toolkit: carve deleted records (freelist/in-page/dropped-table/WAL/journal), read index b-trees & WITHOUT ROWID tables, WAL version history, anti-forensic + encryption-scheme diagnostics, BLOB typing/SHA-256/decode, CASE/UCO export. Panic-free, forbid-unsafe, validated vs undark/fqlite. CLI + Rust libs + Python.

    SecurityRonin/sqlite-forensic's past year of commit activity
    Rust 3 Apache-2.0 0 0 1 Updated Aug 11, 2026
  • fleet-ci Public

    Reusable GitHub Actions workflow for the SecurityRonin Rust fleet: fmt, clippy, test, MSRV, coverage, cargo-deny, cargo-vet, secret scan, and fuzz smoke in one callable job set.

    SecurityRonin/fleet-ci's past year of commit activity
    Python 0 0 0 0 Updated Aug 11, 2026
  • forensic-vfs-engine Public

    The forensic-vfs registry + resolver — one Vfs::open(path) that detects the container/volume/filesystem stack and mounts a read-only dyn FileSystem. Batteries-included: every fleet reader compiled in.

    SecurityRonin/forensic-vfs-engine's past year of commit activity
    Rust 1 Apache-2.0 0 2 0 Updated Aug 10, 2026
  • forensic-vfs-mount Public
    SecurityRonin/forensic-vfs-mount's past year of commit activity
    Rust 0 Apache-2.0 0 0 0 Updated Aug 10, 2026
  • xpress-huffman Public

    Pure-Rust, panic-free decompressor for Microsoft Xpress-Huffman ([MS-XCA] §2.2.4) — the codec behind Win10+ prefetch, hiberfil.sys, SMB3 and registry-hive compression. Cross-platform, no Windows API.

    SecurityRonin/xpress-huffman's past year of commit activity
    Rust 1 Apache-2.0 0 0 0 Updated Aug 10, 2026
  • lzo Public

    GPL-free, safe, no_std pure-Rust LZO1X decompressor — decode lzo1x_1 / lzo1x_999 streams (lzop, kernel/initramfs, btrfs, liblzo2) with zero C, zero dependencies, and #![forbid(unsafe_code)]; validated against liblzo2 and fuzz-hardened against malicious input.

    SecurityRonin/lzo's past year of commit activity
    Rust 1 Apache-2.0 2 0 0 Updated Aug 10, 2026
  • lzvn Public

    Safe, no_std pure-Rust Apple LZVN decompressor — length-tolerant for real macOS decmpfs resource-fork blocks. Published as lzvn-core (lib name lzvn).

    SecurityRonin/lzvn's past year of commit activity
    Rust 0 Apache-2.0 0 0 0 Updated Aug 10, 2026
  • elephant-diffuser Public

    The BitLocker Elephant Diffuser (Diffuser A + Diffuser B + sector-key XOR) in pure Rust — the format primitive with no ecosystem crate, validated in-situ against libbde. no_std, panic-free.

    SecurityRonin/elephant-diffuser's past year of commit activity
    Rust 0 Apache-2.0 0 0 0 Updated Aug 10, 2026
  • 4n6mount Public

    Mount forensic disk images, archives & memory dumps as a filesystem on Linux/macOS/Windows — ext4/NTFS/exFAT/HFS+/APFS/ISO, EWF/VMDK/AFF4, AD1, zip/7z/tar, LiME/AVML/crash dumps. FUSE + Dokan, ro/rw COW overlay, deleted-file browsing, NSRL filtering. Pure Rust, Apache-2.0.

    SecurityRonin/4n6mount's past year of commit activity
    Rust 6 Apache-2.0 0 1 0 Updated Aug 10, 2026
View all repositories

People

This organization has no public members. You must be a member to see who’s a part of this organization.

Top languages

Loading…

Most used topics

Loading…