akhil-dara (Akhil Dara) · GitHub
Skip to content
View akhil-dara's full-sized avatar

Block or report akhil-dara

Block user

Prevent this user from interacting with your repositories and sending you notifications. Learn more about blocking users.

You must be logged in to block users.

Content in all repositories owned by your account will be closed.
Maximum 250 characters. Please don’t include any personal information such as legal names or email addresses. Markdown is supported. This note will only be visible to you.
Report abuse

Contact GitHub support about this user’s behavior. Learn more about reporting abuse.

Report abuse
akhil-dara/README.md

Akhil Dara — Digital Forensics and Incident Response (DFIR), Assistant Manager at Deloitte, GIAC Certified Forensic Analyst (GCFA), Hyderabad. “I start where the forensic suite stops.”

Akhil Dara on LinkedIn GIAC Certified Forensic Analyst (GCFA) Microsoft Certified: Security Operations Analyst Associate (SC-200) Total GitHub stars

The lab — forensic suites are built for the common case; these tools are for the other one. Six open-source DFIR tools that open evidence read-only, hash every file and export, and tie each value to its source file and offset.



WAInsight — WhatsApp Android forensics for msgstore.db and wa.db. Rebuilds every chat with edit history, deletions, reactions and replies; per-recipient read receipts to the millisecond; recovers view-once media from the CDN URL and media key; SHA-256 propagation and perceptual-hash search; offline HTML hand-off.

WAInsight stars

SQLite GUI Analyzer — SQLite forensic viewer that recovers WAL-only rows, overwritten row versions, and records carved from freed pages, freeblocks and indexes; decodes bplist, NSKeyedArchiver, protobuf, typedstream and LZFSE BLOBs; opens 30–60 databases as one case; immutable, hashed, zero dependencies.

SQLite GUI Analyzer stars SQLite GUI Analyzer downloads

WebCache Forensic Analyzer — reads dirty WebCacheV01.dat ESE databases without repair or writes, recovers deleted and unflushed records, and shows each time in UTC and the machine's own time zone. RecycleBin Forensic Explorer — opens E01 images directly, pairs every $I with its $R, and rebuilds deleted files in their original folders per user SID with their real names.

Google Drive Forensics — triages a Google Drive estate from metadata (owners, sharing, hashes) before downloading, with hash-verified streaming exports. Wi-Fi Geolocation Forensics — resolves a BSSID with two independent providers, catches IP-fallback answers and randomised MACs, and seals every byte into a self-verifying evidence package.

Outside forensics: CVAurum — a fully offline résumé builder with 75 ATS-ready templates.

Got an artifact your tools can't read? Open an issue on any repo — or find me on LinkedIn.

Pinned Loading

  1. WAInsight WAInsight Public

    Forensic analysis of already-acquired WhatsApp Android databases - browse every chat exactly like the WhatsApp home screen, plus 30 forensic pages: media recovery, visual-hash search, contact + gro…

    Python 58 5

  2. GDrive-Forensics GDrive-Forensics Public

    Digital forensics for Google Drive—done right. Identify, preserve, and document cloud evidence with hash verification, timeline reconstruction, and defensible reporting for typical DLP cases.

    Python 30 7

  3. sqlite-gui-analyzer sqlite-gui-analyzer Public

    Free, open-source SQLite viewer and forensic analyzer: search every table, browse millions of rows, decode BLOBs (bplist, protobuf) and timestamps, recover deleted records from the WAL and freed pa…

    Python 35 4

  4. CVAurum CVAurum Public

    Free, open-source, 100% local résumé builder. 75 ATS-ready templates, a deterministic ATS score, PDF résumé import with on-device OCR, and archival vector PDF (PDF/A-2B + PDF/UA-1), Word and JSON R…

    TypeScript 19 9

  5. sujayadkesar/PhonePe-Forensics sujayadkesar/PhonePe-Forensics Public

    PhonePe Forensics Analysis Dashboard for iOS Extractions

    Python 11 2

  6. WebCache-Forensic-Analyzer WebCache-Forensic-Analyzer Public

    Forensic analyzer for Windows WebCacheV01.dat. Reads dirty ESE databases read-only, recovers deleted records from free pages and transaction logs, and exports court-ready reports (PDF, Excel, CSV, …

    Python 10