AbdulRhmanAlfaifi / SDSParser-rs
NTFS Security Descriptor Stream ($Secure:$SDS) parser
☆14Updated last year
Related projects ⓘ
Alternatives and complementary repositories for SDSParser-rs
- Windows file metadata / forensic tool.☆15Updated 2 months ago
- Just Another broken Registry Parser (JARP)☆16Updated 5 months ago
- ☆21Updated last month
- ☆10Updated last year
- ☆19Updated last year
- A repository containing the research output from my GCFE Gold Paper which compared Windows 10 and Windows 11.☆25Updated 2 years ago
- Parser for Sdba memory pool tags☆17Updated 3 years ago
- Plugins for parsing CSV files in Timeline Explorer. This project allows for anyone to add more supported files (i,e. they get a Line #/ta…☆22Updated 2 weeks ago
- ☆31Updated 2 years ago
- ☆19Updated 2 months ago
- Manage Your Large Team of Consultants☆12Updated 4 months ago
- ☆18Updated 2 years ago
- Assist analyst and threat hunters to understand Windows authentication logs and to analyze brutforce scenarios.☆18Updated last year
- Windows 10 Live Information viewer☆33Updated 2 years ago
- Jupyter Notebooks for Cyber Threat Intelligence☆35Updated last year
- Scripts and lists to help generate YARA friendly string mutations☆19Updated last year
- Hunt for SQLite files used by various applications☆10Updated 2 weeks ago
- ESXi Cyber Security Incident Response Script☆20Updated 2 months ago
- Indicators of Normality☆12Updated 2 years ago
- Logbook for Digital Forensics and Incident Response☆49Updated 4 months ago
- Winterfell hunt is a python script to perform auto threat hunting for malicious activities in windows OS based on collected data by winte…☆14Updated 4 years ago
- USN Journal full path builder☆36Updated 2 months ago
- A repo that contains a recursive dump from the ROOT key of every Windows Registry hive (using KAPE) from a vanilla (clean) install of eve…☆43Updated last year
- Scripts and tools created for appx analysis talk (Magnet summit 2019)☆13Updated 8 months ago
- ShellSweeping the evil.☆52Updated 5 months ago
- This repository contains sample log data that were collected after running adversary simulations in Microsoft 365☆20Updated last month
- MasterParser is a simple, all-in-one, digital forensics artifact parser☆23Updated 3 years ago
- Carve file metadata from NTFS index ($I30) attributes☆61Updated 9 months ago
- 100 Days of YARA to be updated with rules & ideas as the year progresses☆56Updated last year
- A proof-of-concept re-assembler for reverse VNC traffic.☆25Updated last year