RealityNet / McAFuse
Toolset to analyze disks encrypted with McAFee FDE technology
☆17Updated 3 years ago
Alternatives and similar repositories for McAFuse:
Users that are interested in McAFuse are comparing it to the libraries listed below
- ☆22Updated 4 years ago
- The Multiplatform Linux Sandbox☆15Updated last year
- Scans through registry hives outputting entropy values for key/values, dumps binary contents to files...we are looking for those "fileles…☆11Updated 6 years ago
- Forensics triage tool relying on Volatility and Foremost☆24Updated last year
- DFF (Digital Forensics Framework)☆10Updated 4 years ago
- ☆47Updated 5 years ago
- A script to assist in processing forensic RAM captures for malware triage☆27Updated 3 years ago
- Python emulator for Excel XLM macros.☆18Updated 4 years ago
- Yara rules☆19Updated last year
- ☆26Updated 2 years ago
- Scripts and tools created for appx analysis talk (Magnet summit 2019)☆15Updated 10 months ago
- Attempt to replicate the functions of auto_rip by Corey Harrell in Python.☆13Updated 5 months ago
- Emulates the VirusTotal "vt" YARA module for livehunt rule debugging/testing☆21Updated last year
- Radare2 Metadata Extraction to Elasticsearch☆21Updated 7 months ago
- C# User Simulation☆32Updated 2 years ago
- Autopsy Module to analyze Registry Hives☆14Updated 2 years ago
- Parser for Sdba memory pool tags☆17Updated 3 years ago
- Public repository for Red Canary Research☆37Updated 4 years ago
- A set of tools for collecting forensic information☆26Updated 4 years ago
- Speaking materials from conferences I've given☆9Updated 2 years ago
- ☆12Updated 3 years ago
- ☆23Updated last year
- Read Registry.pol files on Linux, or anywhere Python runs!☆14Updated last year
- Carving tool based in Radare2 & Yara☆15Updated 6 years ago
- This is a repository for the public blog with Labs indicators of compromise and code☆18Updated 5 years ago
- Carve $MFT records from a chunk of data (for instance a memory dump)☆16Updated 8 years ago
- Plugins for the Viper Framework☆14Updated 5 years ago
- A Modular MWDB Utility to Collect Fresh Malware Samples☆34Updated 3 years ago
- Carve files for MFT entries (eg. blkls output or memory dumps). Recovers filenames (long & short), timestamps ($STD & $FN) and data if re…☆21Updated 5 years ago
- Captures Microsoft Teams application logs and parses to show activity☆10Updated 8 months ago