Digital Forensics Tools

While conducting a chip-off acquisition of an OnStar Gen 9 telematics control module. It came to my attention Berla iVe was unable to correctly import and process the resulting binary image. This was because the chip-off imaging process did not account for converting the endianess of the file. This script forensically converts a binary image from one endianness to another.

The converted binary file can then be directly imported into Berla iVe successfully or manually parsed for artifacts.

While this was developed for a specific use case it can also be utilized to convert any binary file from one endianness to another.

A standalone Windows GUI tool for forensic processing of Garmin FIT activity files utilizing Garmin SDK FitCSVTool. It automates FIT→CSV conversion, decodes all FIT messages into Excel sheets, produces a cleaned “Processed Records” workbook with human‐readable units and local timestamps, and generates a KML track file with dot place marks.

More open source tools coming soon.