abaghinyan / AralezLinks
Aralez is a triage tool for Windows and Linux that automates the collection of system information, network/process data, and files.
☆20Updated this week
Alternatives and similar repositories for Aralez
Users that are interested in Aralez are comparing it to the libraries listed below
Sorting:
- Python based tool to extract forensic info from EventTranscript.db (Windows Diagnostic Data)☆68Updated 2 years ago
- Memory Baseliner is a script that can compare two windows memory images or perform frequency of occurrence / data stacking analysis on mu…☆55Updated 2 years ago
- USN Journal full path builder☆61Updated last year
- A Jupyter notebook to assist with the analysis of the output generated from Volatility memory extraction framework.☆97Updated 2 years ago
- A repository to store community malware research notes and findings.☆14Updated 2 months ago
- ☆68Updated 2 weeks ago
- PowerShell scripts for running Magnet RESPONSE forensic collection tool in large enterprises.☆28Updated 8 months ago
- Project based on RegRipper, to extract add'l value/pivot points from TLN events file☆88Updated 7 months ago
- ☆25Updated 8 months ago
- macOS Artifacts☆31Updated 7 months ago
- Capture. Detonate. Collect☆14Updated last year
- Detection Engineering with YARA☆87Updated last year
- Collection of scripts used to deobfuscate GOOTLOADER malware samples.☆64Updated 9 months ago
- Forensic Artifact Collection Tool Matrix☆90Updated 10 months ago
- Remote access and Antivirus Logging Database☆42Updated last year
- A forensic open-source parser module for Autopsy that allows extracting the messages, comments, posts, contacts, calendar entries and rea…☆103Updated last month
- A repository hosting example goodware evtx logs containing sample software installation and basic user interaction☆80Updated 4 months ago
- FJTA (Forensic Journal Timeline Analyzer) is a tool that analyzes Linux filesystem (ext4, XFS) journals (not systemd-journald logs), gene…☆89Updated last week
- Regexplore is a Volatility plugin designed to mimic the functionality of the Registry Explorer plugins in EZsuite☆17Updated 2 years ago
- Tools and scripts to deploy and manage OpenRelik instances☆15Updated 3 months ago
- Rules shared by the community from 100 Days of YARA 2024☆86Updated 9 months ago
- ☆12Updated 11 months ago
- A really good DFIR automation for collecting and analyzing evidence designed for cybersecurity professionals.☆157Updated 6 months ago
- Parses USB connection artifacts from offline Registry hives☆101Updated 3 months ago
- The Linux DFIR Collector is a stand-alone collection tool for Gnu / Linux. Dump artifacts in json format with very few impacts on the hos…☆32Updated 3 years ago
- Contains compiled binaries of Volatility☆35Updated 4 months ago
- A YARA & Malware Analysis Toolkit written in Rust.☆50Updated last week
- ☆22Updated 2 years ago
- A repo hosting the Markua content for the EZ Tools manuals hosted on Leanpub☆81Updated last month
- Recycle bin artifact parser☆53Updated 8 months ago