Parse and analyze a Windows Amcache.hve registry hive, VirusTotal integration.
☆114Oct 18, 2026Updated 2 weeks ago
Alternatives and similar repositories for amcache-evilhunter
Users that are interested in amcache-evilhunter are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- OpenRelik worker to interact with a Timesketch server☆10Feb 14, 2026Updated 8 months ago
- PETriage: A symbol-unified PE file reader for triage, built for multi-platform and multi-interface use.☆13Aug 4, 2026Updated 2 months ago
- ☆10May 19, 2026Updated 5 months ago
- Tools and scripts to deploy and manage OpenRelik instances☆17Mar 23, 2026Updated 7 months ago
- Triage automation tool☆24Oct 24, 2026Updated last week
- GPUs on demand by Runpod - Special Offer Available • AdRun AI, ML, and HPC workloads on powerful cloud GPUs—without limits or wasted spend. Deploy GPUs in under a minute and pay by the second.
- An AWS CloudTrail exported logs analyzer tool☆21Oct 7, 2026Updated 3 weeks ago
- Get-MiniTimeline - Triage Collection and Timeline Generation w/ KAPE☆37May 25, 2024Updated 2 years ago
- Detect and extract hidden files☆25Aug 29, 2024Updated 2 years ago
- Cold Xan RAT - a Quasar-based Remote Access Trojan's full src code and detection rules, along with short analysis of it's capabilities☆25Sep 1, 2026Updated 2 months ago
- A Python script to automatically search GitHub for .exe, .com, .pif, .msi, .scr, .bat, .cmd, .dll, .sys, .drv, .ocx, .vbs, .js, .ps1, .ht…☆16Nov 25, 2025Updated 11 months ago
- A free data collection and YARA scanning tool for cybersecurity incident investigation, compromise assessment and threat hunting☆23Nov 12, 2024Updated last year
- $I30 INDX Carver☆18Jun 23, 2025Updated last year
- MemProcFS-Analyzer - Automated Forensic Analysis of Windows Memory Dumps for DFIR☆743Aug 31, 2026Updated 2 months ago
- A tool designed to extract data from a logical ReFS 3.4 forensic image produced by FTK Imager☆18Nov 22, 2023Updated 2 years ago
- End-to-end encrypted cloud storage - Proton Drive • AdSpecial offer: 40% Off Yearly / 80% Off First Month. Protect your most important files, photos, and documents from prying eyes.
- Fedora Cyber Test Lab offers quantitative static and dynamic risk analysis of binaries☆13Feb 11, 2018Updated 8 years ago
- ☆89Updated this week
- Crowdstrike response script containing various functions for IR/triage☆13Dec 7, 2020Updated 5 years ago
- Blueteam operational triage registry hunting/forensic tool.☆147Sep 2, 2025Updated last year
- ☆16Jun 5, 2024Updated 2 years ago
- ☆133Feb 19, 2026Updated 8 months ago
- ☆14Feb 28, 2026Updated 8 months ago
- Windows anti-forensics made easy☆11Mar 6, 2024Updated 2 years ago
- macos-collector - Automated Collection of macOS Forensic Artifacts for DFIR☆54Sep 13, 2026Updated last month
- Deploy to Railway using AI coding agents - Free Credits Offer • AdUse Claude Code, Codex, OpenCode, and more. Autonomous software development now has the infrastructure to match with Railway.
- ☆19Sep 17, 2026Updated last month
- Aralez is a triage tool for Windows, Linux and MacOS that automates the collection of system information, network/process data, and files…☆26Aug 14, 2026Updated 2 months ago
- ☆70Jan 8, 2026Updated 9 months ago
- An easy to use PowerShell script to collect memory and disk forensics for DFIR investigations.☆347Dec 3, 2025Updated 11 months ago
- Browse Windows Prefetch versions: 17,23,26,30v1/2,31 & some of SuperFetch .7db/.db's☆67Dec 18, 2024Updated last year
- Collect-MemoryDump - Automated Creation of Windows Memory Snapshots for DFIR☆272Oct 29, 2025Updated last year
- Bash Script to extract GNU/Linux forensic artifacts for digital forensic analysis and incident response.☆43Jul 5, 2023Updated 3 years ago
- A repo that aims to centralize a current, running list of relevant parsers/tools for known DFIR artifacts☆83Oct 20, 2025Updated last year
- Captive portal page.☆20Updated this week
- GPU virtual machines on DigitalOcean Gradient AI • AdGet to production fast with high-performance AMD and NVIDIA GPUs you can spin up in seconds. The definition of operational simplicity.
- ☆46Jun 1, 2023Updated 3 years ago
- Former UEFI Firmware Rootkit Replicating MoonBounce / ESPECTRE☆14Jun 14, 2022Updated 4 years ago
- call gates as stable comunication channel for NT x86 and Linux x86_64☆32Aug 11, 2023Updated 3 years ago
- Everything related to YARA☆16Apr 18, 2026Updated 6 months ago
- A small experiment on assigning a processes threads a specific CPU and then blocking it with a high priority thread☆33Sep 24, 2025Updated last year
- Memory acquisition for Linux that makes sense.☆257Nov 21, 2023Updated 2 years ago
- Automate forensic traige package collection and evidence parsing with KAPE and Crowdstrike☆15Mar 5, 2022Updated 4 years ago