Finds event logs between two time points. Useful for helpdesk/support/malware analysis.
☆50Feb 26, 2019Updated 7 years ago
Alternatives and similar repositories for EventFinder2
Users that are interested in EventFinder2 are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- ☆12Jun 3, 2022Updated 4 years ago
- Simple Script to Help You Find All Files Has Been Modified, Accessed, and Created In A Range Time.☆27Dec 1, 2022Updated 3 years ago
- Power-Forensics is the Best Friend for Incident Responders to perform IR and collect evidences for Linux based host☆12Jun 2, 2023Updated 3 years ago
- Scripts to facilitate filtering with Plaso☆126May 20, 2020Updated 6 years ago
- Initial triage of Windows Event logs☆106Jun 16, 2024Updated 2 years ago
- End-to-end encrypted email - Proton Mail • AdSpecial offer: 40% Off Yearly / 80% Off First Month. All Proton services are open source and independently audited for security.
- Tool to rip system and user data from OSX and macOS☆16Dec 6, 2022Updated 3 years ago
- ☆11Aug 10, 2021Updated 5 years ago
- Resources and Discussions About Detection Engineering☆12Sep 28, 2022Updated 4 years ago
- no longer maintained☆15Feb 22, 2018Updated 8 years ago
- Library to process OLE compound file format. This is a work in progress and was initially written for jumplist parsing (for which it does…☆19Oct 16, 2026Updated 2 weeks ago
- LNK to JSON☆14Mar 7, 2019Updated 7 years ago
- Windows registry samples☆24Nov 18, 2018Updated 7 years ago
- EVTXtract recovers and reconstructs fragments of EVTX log files from raw binary data, including unallocated space and memory images.☆213Mar 12, 2025Updated last year
- Get-MiniTimeline - Triage Collection and Timeline Generation w/ KAPE☆37May 25, 2024Updated 2 years ago
- Virtual machines for every use case on DigitalOcean • AdGet dependable uptime with 99.99% SLA, simple security tools, and predictable monthly pricing with DigitalOcean's virtual machines, called Droplets.
- A small util to brute-force prefetch hashes☆78Jun 24, 2022Updated 4 years ago
- Mass Triage Tools☆20Sep 9, 2026Updated last month
- CLI version of NetworkMiner (https://www.netresec.com/?page=NetworkMiner)☆13Jul 1, 2026Updated 4 months ago
- Active Directory Group Policy Preferences cpassword cracker/decrypter.☆23Apr 14, 2021Updated 5 years ago
- ☆10Jul 6, 2023Updated 3 years ago
- Parses IE's Automatic Crash Recovery Files☆16Feb 3, 2017Updated 9 years ago
- ☆29Oct 15, 2025Updated last year
- Winterfell is a group of windows batch scripts to collect Windows forensics data and perform efficient, and fast incident response and th…☆52Jul 23, 2020Updated 6 years ago
- A script to assist in processing forensic RAM captures for malware triage☆26Feb 4, 2021Updated 5 years ago
- GPUs on demand by Runpod - Special Offer Available • AdRun AI, ML, and HPC workloads on powerful cloud GPUs—without limits or wasted spend. Deploy GPUs in under a minute and pay by the second.
- Harvest Linux forensic data for operational triage of an event.☆50Aug 3, 2026Updated 2 months ago
- Extension blocks as found in ShellBags and other places in the Registry☆26Oct 24, 2026Updated last week
- A Teracopy history log parser☆12Aug 12, 2026Updated 2 months ago
- ☆320Aug 14, 2020Updated 6 years ago
- Parse Microsoft shim databases☆33Oct 22, 2026Updated last week
- This is a repository for reporting any issues in any of my software☆14Oct 23, 2026Updated last week
- This tool aims at parsing Microsoft Protection logs to provide relevant data to forensic analysts during incident responses.☆22Sep 30, 2022Updated 4 years ago
- ☆23Mar 11, 2014Updated 12 years ago
- Various PowerShells scripts I've made (or others have made) to automate some of the boring stuff in my everyday DFIR journey!☆53Jan 9, 2026Updated 9 months ago
- Managed Kubernetes at scale on DigitalOcean • AdDigitalOcean Kubernetes includes the control plane, bandwidth allowance, container registry, automatic updates, and more for free.
- $I30 INDX Carver☆18Jun 23, 2025Updated last year
- Forensic cheatsheets for use with cheat☆16Dec 2, 2021Updated 4 years ago
- Elasticsearch pipelines for processing and enriching plaso data☆11Feb 6, 2024Updated 2 years ago
- PowerShell scripts to ensure consistent and reliable build quality and configuration for your servers☆107Apr 5, 2023Updated 3 years ago
- Binary commandline executable to parse ETL files☆69Jun 7, 2018Updated 8 years ago
- Automated forensics written in PowerShell☆33Sep 29, 2019Updated 7 years ago
- Merge all Yara rules from official Yara github repository in one .yar file☆31Jun 22, 2018Updated 8 years ago