PowerShell scripts for Hard Drive forensics and parsing Windows Artifacts
☆56Oct 15, 2020Updated 6 years ago
Alternatives and similar repositories for PS-DigitalForensics
Users that are interested in PS-DigitalForensics are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- Python Digital Forensics [video], published by Packt☆22Jan 30, 2023Updated 3 years ago
- no longer maintained☆18Feb 22, 2018Updated 8 years ago
- PowerShell module to automate via XMLRPC a remote Metasploit server.☆15May 30, 2014Updated 12 years ago
- Repo for the paper "USB Devices phoning home"☆22Feb 12, 2016Updated 10 years ago
- OLE Structured Storage Tool☆25May 26, 2025Updated last year
- Managed hosting for WordPress and PHP on Cloudways • AdManaged hosting for WordPress, Magento, Laravel, or PHP apps, on multiple cloud providers. Deploy in minutes on Cloudways by DigitalOcean.
- Detect malicious domain, Blablablablabla☆27Jan 8, 2017Updated 9 years ago
- PowerShell script utilized to pull several forensic artifacts from a live Win7 and WinXP system without WINRM.☆53Jan 25, 2018Updated 8 years ago
- POC for IAT Parsing Payloads☆49Jan 1, 2017Updated 9 years ago
- Tool for analysis of Windows Prefetch files☆26Nov 11, 2018Updated 7 years ago
- Slides from previous conference talks☆41May 13, 2017Updated 9 years ago
- Live-Armor: Building Custom Linux Live Images for Security Sandboxing☆11Mar 25, 2015Updated 11 years ago
- PowerForensics provides an all in one platform for live disk forensic analysis☆1,445Nov 16, 2023Updated 2 years ago
- A meterpreter script to backdoor windows (any version)☆13May 23, 2013Updated 13 years ago
- A sample vulnerable driver that emulates kernel mode vulnerabilities.☆19Jan 30, 2016Updated 10 years ago
- Deploy to Railway using AI coding agents - Free Credits Offer • AdUse Claude Code, Codex, OpenCode, and more. Autonomous software development now has the infrastructure to match with Railway.
- Babel Scripting Framework☆43Oct 28, 2020Updated 6 years ago
- Bash script for checking HTTP headers for security☆17Jan 16, 2014Updated 12 years ago
- Carbon Black SIEM Integration and Automation for LogRhythm☆16Mar 2, 2018Updated 8 years ago
- Network Block Device Server for windows with a DFIR/forensic focus.☆98Mar 31, 2017Updated 9 years ago
- Server's remote inventory, WMI, MSSQL Database☆15Aug 8, 2016Updated 10 years ago
- Rapid Assessment of Web Resources☆19Nov 11, 2016Updated 9 years ago
- Detects code differentials between executables in disk and the corresponding processes/modules in memory☆114Jun 19, 2020Updated 6 years ago
- Script for automating Linux memory capture and analysis☆12May 6, 2020Updated 6 years ago
- Intercept arbitrary functions at run-time, without knowing their typedefs☆88Apr 13, 2017Updated 9 years ago
- Serverless GPU API endpoints on Runpod - Get Bonus Credits • AdSkip the infrastructure headaches. Auto-scaling, pay-as-you-go, no-ops approach lets you focus on innovating your application.
- Win32k Elevation of Privilege Poc☆24May 17, 2019Updated 7 years ago
- A binary rainfall visualizer for packet captures. Idea taken from Greg Conti's "Security Data Visualization".☆13Nov 5, 2020Updated 5 years ago
- Volatility Framework plugin to detect various types of hooks as performed by banking Trojans☆40Dec 14, 2018Updated 7 years ago
- HexPADS, a host-based, Performance-counter-based Attack Detection System☆41Sep 6, 2022Updated 4 years ago
- Process Filter for Python☆16Jan 19, 2016Updated 10 years ago
- Digital Forensics Artifacts Knowledge Base☆90Sep 27, 2026Updated last month
- Wrapper class for IDAPython. Regroups various useful functions for reverse engineering of binaries.☆17Mar 17, 2016Updated 10 years ago
- Custom scripts released for BSidesDC 2016☆14Oct 19, 2016Updated 10 years ago
- Digital Forensics Virtual File System (dfVFS)☆222Updated this week
- AI Agents on DigitalOcean Gradient AI Platform • AdBuild production-ready AI agents using customizable tools or access multiple LLMs through a single endpoint. Create custom knowledge bases or connect external data.
- A collection of tools mostly written in Python.☆15Feb 4, 2015Updated 11 years ago
- ☆43Jul 2, 2018Updated 8 years ago
- inVtero.net: A high speed (Gbps) Forensics, Memory integrity & assurance. Includes offensive & defensive memory capabilities. Find/Extr…☆297Sep 30, 2023Updated 3 years ago
- Active Directory permissions (ACL/ACE) auditing tools☆148Jun 15, 2017Updated 9 years ago
- Windows PowerShell domain scanning tool☆54Apr 23, 2016Updated 10 years ago
- The Cold Disk Quick Response (CDQR) tool is a fast and easy to use forensic artifact parsing tool that works on disk images, mounted driv…☆347Jun 25, 2022Updated 4 years ago
- A driver that supports communication between a Windows guest and HyperWin☆15Jan 6, 2021Updated 5 years ago