Invoke-IR / ForensicPosters

Related projects: ⓘ

• keydet89 / RegRipper2.8
  ☆375Updated this week
• orlikoski / CDQR
  The Cold Disk Quick Response (CDQR) tool is a fast and easy to use forensic artifact parsing tool that works on disk images, mounted driv…
  ☆332Updated 2 years ago
• mkorman90 / VolatilityBot
  VolatilityBot – An automated memory analyzer for malware samples and memory dumps
  ☆263Updated 3 years ago
• mandiant / flare-wmi
  ☆415Updated last year
• kevthehermit / VolUtility
  Web App for Volatility framework
  ☆378Updated 2 weeks ago
• mandiant / ShimCacheParser
  ☆271Updated last year
• orlikoski / Skadi
  Collect, Process, and Hunt with host based data from MacOS, Windows, and Linux
  ☆489Updated last year
• Invoke-IR / PowerForensics
  PowerForensics provides an all in one platform for live disk forensic analysis
  ☆1,382Updated 10 months ago
• SekoiaLab / Fastir_Collector
  ☆505Updated 3 years ago
• teamdfir / sift
  SIFT
  ☆484Updated 7 months ago
• rowingdude / analyzeMFT
  analyzeMFT.py is designed to fully parse the MFT file from an NTFS filesystem and present the results as accurately as possible in multip…
  ☆429Updated this week
• hasherezade / malware_analysis
  Various snippets created during malware analysis
  ☆455Updated last year
• WiredPulse / PoSh-R2
  PowerShell - Rapid Response... For the incident responder in you!
  ☆291Updated 4 years ago
• JamesHabben / evolve
  Web interface for the Volatility Memory Forensics Framework
  ☆259Updated 6 years ago
• MarkBaggett / srum-dump
  A forensics tool to convert the data in the Windows srum (System Resource Usage Monitor) database to an xlsx spreadsheet.
  ☆592Updated 9 months ago
• Rurik / Noriben
  Noriben - Portable, Simple, Malware Analysis Sandbox
  ☆1,101Updated 9 months ago
• 504ensicsLabs / DAMM
  Differential Analysis of Malware in Memory
  ☆209Updated 7 years ago
• gfoss / PSRecon
  PSRecon gathers data from a remote Windows host using PowerShell (v2 or later), organizes the data into folders, hashes all extracted da…
  ☆475Updated 7 years ago
• halpomeranz / lmg
  Script for automating Linux memory capture and analysis
  ☆263Updated 4 years ago
• GoSecure / malboxes
  Builds malware analysis Windows VMs so that you don't have to.
  ☆1,027Updated 3 years ago
• adhdproject / adhdproject.github.io
  ☆195Updated 2 years ago
• wtsxDev / Malware-Analysis
  ☆390Updated this week
• williballenthin / INDXParse
  Tool suite for inspecting NTFS artifacts.
  ☆213Updated 10 months ago
• cryps1s / DARKSURGEON
  DARKSURGEON is a Windows packer project to empower incident response, digital forensics, malware analysis, and network defense.
  ☆460Updated 4 years ago
• krmaxwell / maltrieve
  A tool to retrieve malware directly from the source for security researchers.
  ☆562Updated 7 years ago
• OMENScan / AChoir
  Windows Live Artifacts Acquisition Script
  ☆181Updated 2 years ago
• mandiant / rvmi
  rVMI - A New Paradigm For Full System Analysis
  ☆350Updated 6 years ago
• SpiderLabs / malware-analysis
  A repository of tools and scripts related to malware analysis
  ☆242Updated 8 years ago
• davidpany / WMI_Forensics
  ☆293Updated 4 years ago
• JohnLaTwC / PyPowerShellXray
  Python script to decode common encoded PowerShell scripts
  ☆214Updated 6 years ago