RealityNet / McAFuse
Toolset to analyze disks encrypted with McAFee FDE technology
☆17Updated 3 years ago
Alternatives and similar repositories for McAFuse:
Users that are interested in McAFuse are comparing it to the libraries listed below
- ☆22Updated 4 years ago
- Carving tool based in Radare2 & Yara☆15Updated 6 years ago
- unix_collector is a Live Response collection script for Incident Response on UNIX-like systems using native binaries. Supports AIX, Andro…☆32Updated last month
- Emulates the VirusTotal "vt" YARA module for livehunt rule debugging/testing☆21Updated last year
- Scripts and tools created for appx analysis talk (Magnet summit 2019)☆15Updated 11 months ago
- Converts Sigma detection rules to a Splunk alert configuration.☆13Updated 3 years ago
- NTFS file system specimens☆14Updated last year
- A DFVFS Backed Forensic Viewer☆40Updated 4 years ago
- Steezy - Ghetto Yara Generation☆15Updated last year
- Yara rules☆20Updated last year
- Carve $MFT records from a chunk of data (for instance a memory dump)☆16Updated 8 years ago
- The Multiplatform Linux Sandbox☆15Updated last year
- ETW-Almulahaza is a consumer python-based tool that help you monitor ETW events of the operating system☆12Updated 2 years ago
- Repository of tools, YARA rules, and code-snippets from Stairwell's research team.☆22Updated last year
- Repository for scripts and tips for "Yara Scan Service"☆20Updated 2 years ago
- Radare2 Metadata Extraction to Elasticsearch☆22Updated 9 months ago
- Python emulator for Excel XLM macros.☆18Updated 4 years ago
- Public repository for Red Canary Research☆37Updated 4 years ago
- YARA Rule Strings Statistics Calculator and Malware Research Helper☆13Updated 3 years ago
- Low budget VirusTotal Intelligence Cosplay☆20Updated 3 years ago
- Tool for analysis of Windows Prefetch files☆26Updated 6 years ago
- Maltego transforms to pivot between PE files based on their VirusTotal codeblocks☆18Updated 3 years ago
- A script to assist in processing forensic RAM captures for malware triage☆27Updated 4 years ago
- ☆12Updated 3 years ago
- Carve files for MFT entries (eg. blkls output or memory dumps). Recovers filenames (long & short), timestamps ($STD & $FN) and data if re…☆21Updated 5 years ago
- A Modular MWDB Utility to Collect Fresh Malware Samples☆34Updated 3 years ago
- C# User Simulation☆32Updated 2 years ago
- Plugins for the Viper Framework☆14Updated 5 years ago
- Speaking materials from conferences I've given☆9Updated 2 years ago
- ☆24Updated 2 years ago