Windows link file (shortcuts) examiner
☆68Jun 9, 2024Updated 2 years ago
Alternatives and similar repositories for lifer
Users that are interested in lifer are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- Parser for Sdba memory pool tags☆20Jul 16, 2021Updated 5 years ago
- ☆13Aug 8, 2022Updated 4 years ago
- MalRecon - Basic Malware Reconnaissance and Analysis Tool☆26Jun 8, 2017Updated 9 years ago
- PyMal is a python based interactive Malware Analysis Framework. It is built on the top of three pure python programes Pefile, Pydbg and V…☆43Jul 10, 2016Updated 10 years ago
- Carve Windows Prefetch files from arbitrary binary data☆16Jun 11, 2017Updated 9 years ago
- Wordpress hosting with auto-scaling - Free Trial Offer • AdFully Managed hosting for WordPress and WooCommerce businesses that need reliable, auto-scalable performance. Cloudways SafeUpdates now available.
- Print the strings of encoded printable characters in files☆12Jul 19, 2015Updated 11 years ago
- Imphash-like calculation on Golang binaries☆50Jul 2, 2022Updated 4 years ago
- Sinkhole Operational Framework for Automation and Reporting☆14May 28, 2014Updated 12 years ago
- Vba2Graph - Generate call graphs from VBA code, for easier analysis of malicious documents.☆283Dec 13, 2021Updated 4 years ago
- A repo to hold some scripts pertaining WMI (Windows implementation of WBEM) forensics☆88Oct 6, 2017Updated 9 years ago
- OSSEM Modular☆27Jun 29, 2020Updated 6 years ago
- WIP Emotet Control Flow Unflattening using miasm and radare2☆23Dec 27, 2022Updated 3 years ago
- "Evolving AppCompat/AmCache data analysis beyond grep"☆216Sep 15, 2021Updated 5 years ago
- Scripts and Modules for forensical analyses of mysql database systems☆23Sep 19, 2014Updated 12 years ago
- Deploy to Railway using AI coding agents - Free Credits Offer • AdUse Claude Code, Codex, OpenCode, and more. Autonomous software development now has the infrastructure to match with Railway.
- Automated Memory Forensic☆34Jul 18, 2018Updated 8 years ago
- Winbindex bot to pull in binaries for specific releases☆51Sep 15, 2023Updated 3 years ago
- EVTXtract recovers and reconstructs fragments of EVTX log files from raw binary data, including unallocated space and memory images.☆213Mar 12, 2025Updated last year
- ☆12Jun 29, 2021Updated 5 years ago
- IDAPython scripts☆15Aug 24, 2017Updated 9 years ago
- A tool for scanning registery key permissions. Find where non-admins can create symbolic links.☆43Oct 30, 2019Updated 7 years ago
- Allows you to quickly query a Windows machine for RAM artifacts☆219Jul 17, 2020Updated 6 years ago
- Malware/IOC ingestion and processing engine☆110Nov 20, 2018Updated 7 years ago
- Python tool and library to help analyze files during malware triage and analysis.☆79Jul 2, 2020Updated 6 years ago
- Managed hosting for WordPress and PHP on Cloudways • AdManaged hosting for WordPress, Magento, Laravel, or PHP apps, on multiple cloud providers. Deploy in minutes on Cloudways by DigitalOcean.
- Decodes PlugX traffic and encrypted/compressed artifacts☆38Apr 29, 2013Updated 13 years ago
- Emulates the VirusTotal "vt" YARA module for livehunt rule debugging/testing☆23May 29, 2023Updated 3 years ago
- This is a GUI (for Windows 64 bit) for a procedure to virtualize your EWF(E01), DD (raw), AFF disk image file without converting it, dire…☆54Oct 15, 2019Updated 7 years ago
- It's not just UsnJrnl (USN Journal Records/Change Journal Records) parser.☆24Nov 11, 2018Updated 7 years ago
- Fast Evidence Collector Toolkit is an incident response toolkit to collect evidences on a suspicious windows computer☆41Jul 29, 2020Updated 6 years ago
- ☆23Aug 1, 2020Updated 6 years ago
- Dockerfiles for containerized osquery☆14May 23, 2017Updated 9 years ago
- The official exploit for OCS Inventory NG v2.7 Remote Command Execution CVE-2020-14947☆17Jul 2, 2020Updated 6 years ago
- The history of Windows Internals via symbols.☆180Nov 4, 2021Updated 5 years ago
- Deploy to Railway using AI coding agents - Free Credits Offer • AdUse Claude Code, Codex, OpenCode, and more. Autonomous software development now has the infrastructure to match with Railway.
- Python script to decode common encoded PowerShell scripts☆215Jun 13, 2018Updated 8 years ago
- Simple yara rule manager☆67Dec 27, 2022Updated 3 years ago
- Event Tracing for Windows Custom Events☆21Jan 28, 2015Updated 11 years ago
- Evtx Log (xml) Browser☆61Mar 12, 2023Updated 3 years ago
- R-CSIRT Linux Triage tool☆39Jun 28, 2018Updated 8 years ago
- Tools to assist in forensicating docker☆89Sep 2, 2026Updated 2 months ago
- Conceptual Methods for Finding Commonalities in Macho Files☆13Mar 21, 2024Updated 2 years ago