Simple Microsoft Windows sessions event logs visualization
☆154May 2, 2022Updated 4 years ago
Alternatives and similar repositories for event2timeline
Users that are interested in event2timeline are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- VMware Snapshot Forensic Comparison Scripts☆26Mar 19, 2013Updated 13 years ago
- Some IR notes☆72Jul 23, 2016Updated 10 years ago
- Fast Incident Response☆2,050Sep 14, 2026Updated last month
- Carve $MFT records from a chunk of data (for instance a memory dump)☆16Aug 21, 2016Updated 10 years ago
- Registry to JSON. This Project is for learning purposes and is not maintained.☆12Dec 28, 2021Updated 4 years ago
- Serverless GPU API endpoints on Runpod - Get Bonus Credits • AdSkip the infrastructure headaches. Auto-scaling, pay-as-you-go, no-ops approach lets you focus on innovating your application.
- Outlook add-in companion to report suspicious mail easily☆132Sep 1, 2022Updated 4 years ago
- A Windows Event Processing Utility☆48Feb 21, 2018Updated 8 years ago
- Python script for extracting USB information from Windows registry hives☆130Aug 14, 2019Updated 7 years ago
- Unpack MIME attachments from a file and check them against virustotal.com☆44Mar 11, 2016Updated 10 years ago
- Community modules for FAME☆65Oct 23, 2026Updated 2 weeks ago
- An informational repo about hunting for adversaries in your IT environment.☆14Apr 10, 2017Updated 9 years ago
- Yara is awesome, but sometimes you need to manipulate the data streams you're scanning in different ways.☆97Oct 21, 2014Updated 12 years ago
- A modern Python-3-based alternative to RegRipper☆220May 12, 2026Updated 5 months ago
- ☆515Jan 26, 2021Updated 5 years ago
- Simple, predictable pricing with DigitalOcean hosting • AdAlways know what you'll pay with monthly caps and flat pricing. Enterprise-grade infrastructure trusted by 600k+ customers.
- FAME Automates Malware Evaluation☆954Oct 23, 2026Updated 2 weeks ago
- Incident Response Methodologies☆1,014Aug 2, 2018Updated 8 years ago
- Network Block Device Server for windows with a DFIR/forensic focus.☆98Mar 31, 2017Updated 9 years ago
- Automating forensic data extraction, reduction, and overall triage of cold disk and memory images.☆21Mar 12, 2019Updated 7 years ago
- Cuckoo sandbox analyses dispatcher / centralizer☆22Jul 3, 2014Updated 12 years ago
- Reconstruct process trees from event logs☆148Aug 12, 2020Updated 6 years ago
- The Center for Internet Security Enumeration and Scanning Program☆11Nov 15, 2017Updated 8 years ago
- Minimalistic WebUI for passiveDNS tool☆18May 6, 2021Updated 5 years ago
- EVTXtract recovers and reconstructs fragments of EVTX log files from raw binary data, including unallocated space and memory images.☆213Mar 12, 2025Updated last year
- Bare Metal GPUs on DigitalOcean Gradient AI • AdPurpose-built for serious AI teams training foundational models, running large-scale inference, and pushing the boundaries of what's possible.
- Queries to parse sysmon event log file with microsoft logparser☆60Mar 31, 2015Updated 11 years ago
- Help summarize a PCAP file☆33Dec 27, 2011Updated 14 years ago
- Sources, configuration and how to detect evil things utilizing Microsoft Sysmon.☆946Dec 12, 2023Updated 2 years ago
- Maltego Transform to put entities into MISP events☆27Jul 24, 2021Updated 5 years ago
- Validate IOC from MISP ; Export results and iocs to SIEM and sensors using syslog and CEF format☆14Sep 13, 2016Updated 10 years ago
- Discover potential timestamps within the Windows Registry☆19Apr 22, 2014Updated 12 years ago
- Investigate suspicious activity by visualizing Sysmon's event log☆432Dec 22, 2023Updated 2 years ago
- Pure Python parser for Windows Event Log files (.evtx)☆787Oct 6, 2026Updated last month
- Collaborative malware analysis framework☆383Jan 22, 2019Updated 7 years ago
- Managed Database hosting by DigitalOcean • AdPostgreSQL, MySQL, MongoDB, Kafka, Valkey, and OpenSearch available. Automatically scale up storage and focus on building your apps.
- Swordphish Phishing Awareness Tool☆226Sep 22, 2024Updated 2 years ago
- A DFVFS Backed Forensic Viewer☆41Apr 13, 2020Updated 6 years ago
- An NTFS journal parser☆80Mar 3, 2016Updated 10 years ago
- Fast Evidence Collector Toolkit is an incident response toolkit to collect evidences on a suspicious windows computer☆41Jul 29, 2020Updated 6 years ago
- Metadata Inspection Database Alerting System☆42Jul 26, 2013Updated 13 years ago
- ☆46Jun 1, 2023Updated 3 years ago
- Parse Windows Prefetch files: Supports XP - Windows 10 Prefetch files☆123May 29, 2024Updated 2 years ago