0xHasanM / regexplore
Regexplore is a Volatility plugin designed to mimic the functionality of the Registry Explorer plugins in EZsuite
☆17Updated last year
Alternatives and similar repositories for regexplore:
Users that are interested in regexplore are comparing it to the libraries listed below
- Python based tool to extract forensic info from EventTranscript.db (Windows Diagnostic Data)☆68Updated last year
- Contains compiled binaries of Volatility☆30Updated 3 months ago
- Memory Baseliner is a script that can compare two windows memory images or perform frequency of occurrence / data stacking analysis on mu…☆50Updated last year
- Recycle bin artifact parser☆40Updated this week
- orc2timeline extracts and analyzes artifacts contained in archives generated with DFIR-ORC.exe to create a timeline from them☆30Updated last month
- Carve file metadata from NTFS index ($I30) attributes☆62Updated 11 months ago
- Logbook for Digital Forensics and Incident Response☆50Updated 6 months ago
- Malformed Access Log to CSV - Convert Web Server Access Logs to CSV☆16Updated 4 months ago
- Tools and scripts to deploy and manage OpenRelik instances☆11Updated last month
- A repository containing the research output from my GCFE Gold Paper which compared Windows 10 and Windows 11.☆26Updated 2 years ago
- Jupyter Notebooks for Cyber Threat Intelligence☆35Updated last year
- Dump quarantined files from Windows Defender☆56Updated 2 years ago
- A repository hosting example goodware evtx logs containing sample software installation and basic user interaction☆73Updated last year
- Just Another broken Registry Parser (JARP)☆16Updated 7 months ago
- SubCrawl is a modular framework for discovering open directories, identifying unique content through signatures and organizing the data w…☆50Updated last month
- Volatility 3 Plugins☆19Updated 2 years ago
- ☆20Updated last year
- ☆19Updated last year
- Browse Windows Prefetch versions: 17,23,26,30v1/2,31 & some of SuperFetch .7db/.db's☆59Updated last month
- A repo hosting the Markua content for the EZ Tools manuals hosted on Leanpub☆64Updated last year
- USN Journal full path builder☆52Updated 4 months ago
- Yara Rules for Modern Malware☆73Updated 10 months ago
- Various PowerShells scripts I've made (or others have made) to automate some of the boring stuff in my everyday DFIR journey!☆44Updated 3 months ago
- The Linux DFIR Collector is a stand-alone collection tool for Gnu / Linux. Dump artifacts in json format with very few impacts on the hos…☆30Updated 2 years ago
- ☆37Updated 3 years ago
- The ultimate solution for remotely deploying Crowdstrike sensors quickly and discreetly on any other EDR platform.☆22Updated 4 months ago
- A simple easy script to read the contents of a zip folder and extract metadata☆11Updated 2 months ago
- Forensic Artifact Collection Tool Matrix☆79Updated 2 months ago
- WLEAPP is an open source project that aims to parse Windows OS artifacts for the purpose of triage analysis.☆31Updated last year
- Scripts and tools accompanying HP Threat Research blog posts and reports.☆50Updated 9 months ago