Alternatives and similar repositories for 4n6_misc

Users that are interested in 4n6_misc are comparing it to the libraries listed below

• msuhanov / yarp

  View on GitHub
  Yet another registry parser
  ☆138Apr 15, 2022Updated 3 years ago
• PwCUK-CTO / OperationCloudHopper

  View on GitHub
  Indicators of compromise relating to our report on APT10's targeting of global MSPs
  ☆10Sep 26, 2017Updated 8 years ago
• forensicmatt / PyWindowsThingies

  View on GitHub
  Windows Thingies in Python for live use.
  ☆24Apr 22, 2019Updated 6 years ago
• jschicht / ExtractUsnJrnl

  View on GitHub
  Tool to extract the $UsnJrnl from an NTFS volume
  ☆110Jul 30, 2019Updated 6 years ago
• ssp4rk / threatintel

  View on GitHub
  ☆11Mar 12, 2021Updated 4 years ago
• re-fox / documentation

  View on GitHub
  ☆13Nov 10, 2020Updated 5 years ago
• PoorBillionaire / USN-Record-Carver

  View on GitHub
  Carve NTFS USN records from binary data
  ☆27May 21, 2017Updated 8 years ago
• woanware / wmi-parser

  View on GitHub
  Parses the WMI object database....looking for persistence
  ☆34Dec 12, 2019Updated 6 years ago
• hexpresso / WU-2015

  View on GitHub
  Writeups for CTF that took place in 2015.
  ☆13Mar 22, 2016Updated 9 years ago
• zerber0s / mac_int

  View on GitHub
  macOS Artifact Intelligence Tool
  ☆13Apr 30, 2019Updated 6 years ago
• 0x0v1 / MalwareRETools

  View on GitHub
  A repo containing some tooling build to assist with reverse engineering malware samples
  ☆15Jul 22, 2023Updated 2 years ago
• grayfold3d / POSH-Triage

  View on GitHub
  Tools for parsing Forensic images
  ☆41Dec 14, 2018Updated 7 years ago
• pstirparo / utils

  View on GitHub
  Different DFIR and CTI utilities
  ☆38May 13, 2020Updated 5 years ago
• mandiant / AuditParser

  View on GitHub
  AuditParser
  ☆60Aug 28, 2013Updated 12 years ago
• matonis / page_brute

  View on GitHub
  Page File analysis tools.
  ☆131Dec 3, 2015Updated 10 years ago
• stvemillertime / RonnieColemanYARAParser

  View on GitHub
  An experimental script to perform bulk parsing of arbitrary file features with YARA and console logging.
  ☆21Nov 13, 2022Updated 3 years ago
• CiscoCXSecurity / log4j

  View on GitHub
  Detection rules to look for Log4J usage and exploitation
  ☆18Jun 21, 2025Updated 7 months ago
• keydet89 / IWSBook

  View on GitHub
  Site for IWS book content
  ☆17Oct 28, 2018Updated 7 years ago
• kacos2000 / Win10

  View on GitHub
  Win 10/11 related research
  ☆198Dec 19, 2023Updated 2 years ago
• keydet89 / Tools

  View on GitHub
  Tools from WFA 4/e, timeline tools, etc.
  ☆145Feb 29, 2024Updated last year
• 2igosha / sunburst_dga

  View on GitHub
  ☆22Dec 22, 2020Updated 5 years ago
• carlpulley / volatility

  View on GitHub
  A collection of Volatility Framework plugins.
  ☆26Aug 29, 2013Updated 12 years ago
• Hestat / blazescan

  View on GitHub
  Blazescan is a linux webserver malware scanning and incident response tool, with built in support for cPanel servers, but will run on any…
  ☆60Nov 10, 2018Updated 7 years ago
• n3l5 / irFARTpull

  View on GitHub
  PowerShell script utilized to pull several forensic artifacts from a live Win7 and WinXP system without WINRM.
  ☆51Jan 25, 2018Updated 8 years ago
• Beercow / ProcDOT-Plugins

  View on GitHub
  Plugins to add funtionality to ProcDOT. http://www.procdot.com
  ☆25Sep 26, 2023Updated 2 years ago
• Fr3akaLmaTT3r / decryptor

  View on GitHub
  ☆26Aug 6, 2021Updated 4 years ago
• theflakes / reg_hunter

  View on GitHub
  Blueteam operational triage registry hunting/forensic tool.
  ☆149Sep 2, 2025Updated 5 months ago
• yarox24 / EvtxHussar

  View on GitHub
  Initial triage of Windows Event logs
  ☆106Jun 16, 2024Updated last year
• forensiclunch / ETLParser

  View on GitHub
  Binary commandline executable to parse ETL files
  ☆69Jun 7, 2018Updated 7 years ago
• BinaryDefense / IcedDecrypt

  View on GitHub
  IcedID Decryption Tool
  ☆28May 7, 2021Updated 4 years ago
• devgc / SrumMonkey

  View on GitHub
  Tool to parse SRU database
  ☆25Mar 1, 2018Updated 7 years ago
• CAPESandbox / CAHI

  View on GitHub
  CAPE Auto-Hardened Installer
  ☆25Jan 28, 2026Updated 2 weeks ago
• msuhanov / regf-samples

  View on GitHub
  Windows registry samples
  ☆24Nov 18, 2018Updated 7 years ago
• moehw / poc_exploits

  View on GitHub
  🕳️ Proof of Concept exploits and their descriptions for various products
  ☆25Nov 12, 2024Updated last year
• danielbohannon / DevSec-Defense

  View on GitHub
  Accompanying PowerShell Modules for DevSec Defense Presentation
  ☆30Apr 15, 2018Updated 7 years ago
• gkucherin / de4dot

  View on GitHub
  .NET deobfuscator and unpacker (with a control flow unflattener for DoubleZero added).
  ☆29Jun 14, 2022Updated 3 years ago
• JacobPimental / gunslinger

  View on GitHub
  Gunslinger is used to hunt for Magecart sites using URLScan's API
  ☆31Mar 15, 2022Updated 3 years ago
• informationextraction / core-android-native

  View on GitHub
  ☆28Jul 6, 2015Updated 10 years ago
• dfirfpi / decwindbx

  View on GitHub
  A sort of a toolkit to decrypt Dropbox Windows DBX files
  ☆31Apr 30, 2017Updated 8 years ago