Alternatives and similar repositories for MFTAnalyzer:

Users that are interested in MFTAnalyzer are comparing it to the libraries listed below

• kacos2000 / Jumplist-Browser
  Automatic/Custom Destinations & LNK (MS-SHLLINK) Browser
  ☆31Updated 11 months ago
• AndrewRathbun / VanillaWindowsRegistryHives
  A repo that contains a recursive dump from the ROOT key of every Windows Registry hive (using KAPE) from a vanilla (clean) install of eve…
  ☆45Updated last year
• ArsenalRecon / SdbaParser
  Parser for Sdba memory pool tags
  ☆17Updated 3 years ago
• Dump-GUY / Invoke-DetectItEasy
  Invoke-DetectItEasy is a wrapper for excelent tool called Detect-It-Easy. This PS module is very useful for Threat Hunting and Forensics.
  ☆24Updated 2 years ago
• dwmetz / Mal-Hash
  This script will generate hashes (MD5, SHA1, SHA256), submit the MD5 to Virus Total, and produce a text file with the results.
  ☆15Updated last year
• embee-research / CyberChef
  ☆14Updated last year
• kacos2000 / Win10LiveInfo
  Windows 10 Live Information viewer
  ☆35Updated 3 years ago
• kacos2000 / Prefetch-Browser
  Browse Windows Prefetch versions: 17,23,26,30v1/2,31 & some of SuperFetch .7db/.db's
  ☆59Updated last month
• anyrun / YARA
  ☆14Updated 2 months ago
• kacos2000 / WinEDB
  Windows.EDB Browser
  ☆54Updated last year
• kacos2000 / Evtx_Log_Browser
  Evtx Log (xml) Browser
  ☆56Updated last year
• moaistory / IE10Analyzer
  http://moaistory.blogspot.com/2016/08/ie10analyzer.html
  ☆14Updated 6 months ago
• ydkhatri / Appx-Analysis
  Scripts and tools created for appx analysis talk (Magnet summit 2019)
  ☆15Updated 11 months ago
• nasbench / procmon-malware-analysis-filters
  Repository containing malware analysis filters for the Windows SysInternals' - Process Monitor tool
  ☆14Updated 4 years ago
• gtworek / SysvolExplorer
  Active Directory Group Policy analyzer
  ☆14Updated 5 years ago
• alwashali / detection-validation
  Detection rule validation
  ☆41Updated last year
• bobby-tablez / Enable-All-The-Logs
  This script enhances endpoint logging telemetry for the purpose of advanced malware threat detection or for building detections or malwar…
  ☆23Updated 4 months ago
• ThisIsLibra / MalPull
  A multi-threaded malware sample downloader based upon given MD-5/SHA-1/SHA-256 hashes, using multiple malware databases.
  ☆29Updated last year
• redcode-labs / RedSand
  Hackable Windows SandBox environment
  ☆31Updated last year
• 0xThiebaut / PCAPeek
  A proof-of-concept re-assembler for reverse VNC traffic.
  ☆25Updated last year
• AndrewRathbun / SANSGoldPaperResearch_FOR500_Rathbun
  A repository containing the research output from my GCFE Gold Paper which compared Windows 10 and Windows 11.
  ☆26Updated 2 years ago
• EricZimmerman / RegistryPlugins
  ☆61Updated 3 weeks ago
• cod3nym / detection-rules
  Collection of my own detection rules
  ☆14Updated 11 months ago
• randomaccess3 / block-parser
  Parser for Windows PowerShell script block logs
  ☆13Updated last month
• dr4k0nia / yara-rules
  A collection of my yara rules
  ☆35Updated last year
• gajos112 / SRUM-Timeliner
  ☆10Updated last year
• sumeshi / ntfsfind
  An efficient tool for search files, directories, and alternate data streams directly from NTFS image files.
  ☆25Updated 11 months ago
• ezaspy / elrond
  Accelerating the collection, processing, analysis and outputting of digital forensic artefacts.
  ☆32Updated last month
• EricZimmerman / TLEFilePlugins
  Plugins for parsing CSV files in Timeline Explorer. This project allows for anyone to add more supported files (i,e. they get a Line #/ta…
  ☆22Updated 3 weeks ago
• dwmetz / PSHero
  PowerShell 'Hero': scripts for DFIR and automation with a PowerShell menu example.
  ☆36Updated last year