ETW forensic tool for Volatility3 plugin
☆17Nov 15, 2024Updated last year
Alternatives and similar repositories for etw-scan
Users that are interested in etw-scan are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- Rust-based Fast Forensics Tool for Windows☆15Aug 9, 2026Updated 2 months ago
- Walk any memory dump. Find what's hidden. Linux + Windows kernel forensics from a single static Rust binary — no Python required.☆12Aug 20, 2026Updated 2 months ago
- disarmBot is a bot that uses the AG2 framework to automatically create multiple LLM Agents, discuss about disinformation, and respond to …☆20Nov 25, 2025Updated 11 months ago
- Windows symbol tables for Volatility 3☆100Jul 11, 2024Updated 2 years ago
- A tool to parse Windows Master File Table ($MFT) and import them into Elasticsearch.☆12Updated this week
- GPUs on demand by Runpod - Special Offer Available • AdRun AI, ML, and HPC workloads on powerful cloud GPUs—without limits or wasted spend. Deploy GPUs in under a minute and pay by the second.
- This repository contains scripts designed to streamline and simplify workflows for purple/blue/red teamers, making day-to-day operations …☆13Jul 18, 2026Updated 3 months ago
- Generate Volatility3 profiles from BTF.☆38Dec 21, 2024Updated last year
- Sigma rules converted for direct use with Zircolite☆15Oct 24, 2026Updated last week
- javascript extension of windbg for hacker.☆19Jun 27, 2023Updated 3 years ago
- Linux BPF plugins for Volatility3☆23Jan 19, 2024Updated 2 years ago
- ☆25Oct 9, 2024Updated 2 years ago
- A command-line tool for searching files, directories, and alternate data streams directly from NTFS image files.☆29Oct 11, 2026Updated 3 weeks ago
- Hunt for SQLite files used by various applications☆33Oct 15, 2026Updated 2 weeks ago
- Invanti VPN Vulnerabilities for Jan - Feb 2024 - Links to Keep it all Organized☆16Feb 15, 2024Updated 2 years ago
- Managed hosting for WordPress and PHP on Cloudways • AdManaged hosting for WordPress, Magento, Laravel, or PHP apps, on multiple cloud providers. Deploy in minutes on Cloudways by DigitalOcean.
- rpv-web is a browser based frontend for the rpv library☆28Nov 21, 2025Updated 11 months ago
- A C implementation of the Sektor7 "A Thief" Windows privesc technique.☆67Mar 25, 2022Updated 4 years ago
- A harmless Netcat-lookalike for detection testing. Simulates NC-style command-line flags and listener behavior without exposing a real ba…☆37Nov 27, 2025Updated 11 months ago
- ☆26Apr 22, 2025Updated last year
- AI analyzer for Hayabusa results.☆28Oct 25, 2026Updated last week
- A curated list of Hardware Hacking resources☆12Apr 14, 2020Updated 6 years ago
- Decloak Linux stealth rootkits hiding data with this simple memory mapped IO investigation tool.☆29Sep 29, 2025Updated last year
- USN Journal full path builder☆71Apr 16, 2026Updated 6 months ago
- Capture BAT is a behavioral analysis tool of applications for the Win32 operating system family.☆32Jun 28, 2013Updated 13 years ago
- Bare Metal GPUs on DigitalOcean Gradient AI • AdPurpose-built for serious AI teams training foundational models, running large-scale inference, and pushing the boundaries of what's possible.
- ☆12Jun 3, 2022Updated 4 years ago
- An exercise to practice deobfuscating PowerShell Scripts.☆26Feb 10, 2023Updated 3 years ago
- Nim library to parse ANSI escape codes☆11Aug 8, 2023Updated 3 years ago
- TatamiRacer is tiny autonomous driving car. It is based on TAMIYA MINI 4WD kit.☆28Mar 20, 2026Updated 7 months ago
- Windows anti-forensics made easy☆11Mar 6, 2024Updated 2 years ago
- A summary of NSO Group/Circles documents, research and media clippings.☆11Apr 13, 2024Updated 2 years ago
- procout peeks write(2) of another process using ptrace(2), written in Rust☆28Oct 10, 2017Updated 9 years ago
- Carve file metadata from NTFS index ($I30) attributes☆76May 25, 2026Updated 5 months ago
- Python CLI and module for CIRCL hash lookup☆14Jul 9, 2025Updated last year
- Deploy on Railway without the complexity - Free Credits Offer • AdConnect your repo and Railway handles the rest with instant previews. Quickly provision container image services, databases, and storage volumes.
- Abusing Some Defects in KSLD Ark driver☆40May 30, 2026Updated 5 months ago
- An open-source, cross-platform application for Acorn ADFS and DFS disc image manipulation☆14Apr 10, 2018Updated 8 years ago
- Unicorn Engine based running of SecureROM☆13Sep 13, 2022Updated 4 years ago
- Parser for Windows PowerShell script block logs☆15Nov 4, 2025Updated 11 months ago
- Vulnerability Management with SBOM☆19Sep 24, 2026Updated last month
- Archive of challenges @ Flatt Security Mini CTFs☆19Aug 20, 2025Updated last year
- UPX - the Ultimate Packer for eXecutables☆68Mar 9, 2022Updated 4 years ago