cristianzsh / amcache-evilhunterLinks
Parse and analyze a Windows Amcache.hve registry hive, VirusTotal integration.
☆18Updated last month
Alternatives and similar repositories for amcache-evilhunter
Users that are interested in amcache-evilhunter are comparing it to the libraries listed below
Sorting:
- Finding ClickFix and FakeCAPTCHA like it's 1999☆61Updated this week
- 🧰 ESXi Testing Tookit is a command-line utility designed to help security teams test ESXi detections.☆78Updated 5 months ago
- A PowerShell-based script to analyze network logs from CSV files and detect potential beaconing behavior. Supports VirusTotal integration…☆17Updated 4 months ago
- A simple script to read the contents of a zip/tar/folder and extract metadata☆20Updated 5 months ago
- Quick ESXi Log Parser☆26Updated 3 weeks ago
- ☆50Updated this week
- The Eventlog Compendium is the go-to resource for understanding Windows Event Logs.☆49Updated 5 months ago
- ASR Configurator, Essentials and Atomic Testing☆94Updated 5 months ago
- Tools and scripts to deploy and manage OpenRelik instances☆15Updated 3 months ago
- Have you ever wanted to search a link or IP address on multiple OSINT pages at once?☆57Updated 2 months ago
- ☆74Updated 2 weeks ago
- orc2timeline extracts and analyzes artifacts contained in archives generated with DFIR-ORC.exe to create a timeline from them☆34Updated 3 months ago
- Repo for experimenting and testing MCP server builds for CTI-related research.☆27Updated 4 months ago
- AppLocker Policy Generator☆22Updated last month
- Convert Sigma rules to SIEM queries, directly in your browser.☆95Updated last week
- A comprehensive GenAI protection system designed to protect against malicious prompts, injection attacks, and harmful content. System inc…☆73Updated this week
- FJTA (Forensic Journal Timeline Analyzer) is a tool that analyzes Linux filesystem (ext4, XFS) journals (not systemd-journald logs), gene…☆88Updated 3 weeks ago
- A tool for fetching DFIR and other GitHub tools.☆24Updated 2 months ago
- Cyber threat intelligence tool suite.☆42Updated 6 months ago
- A really good DFIR automation for collecting and analyzing evidence designed for cybersecurity professionals.☆157Updated 6 months ago
- Project based on RegRipper, to extract add'l value/pivot points from TLN events file☆88Updated 7 months ago
- Repo that hold write-ups of various research projects I did and/or overall InfoSec things I investigated/researched.☆21Updated 9 months ago
- A simple tool designed to create Atomic Red Team tests with ease.☆46Updated 6 months ago
- ☆68Updated 2 weeks ago
- The core backend server handling API requests and task management☆48Updated last week
- ☆96Updated last month
- Provides an advanced baseline to implement a secure Windows auditing strategy on Windows OS.☆56Updated 3 months ago
- Segugio allows the execution and tracking of critical steps in the malware detonation process, from clicking on the first stage to extrac…☆150Updated last year
- Parses USB connection artifacts from offline Registry hives☆101Updated 3 months ago
- Sigma detection rules for hunting with the threathunting-keywords project☆56Updated 7 months ago