A Windows Event Processing Utility
☆48Feb 21, 2018Updated 8 years ago
Alternatives and similar repositories for EventMonkey
Users that are interested in EventMonkey are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- A GC link parser for both linkfiles and jumplists.☆18Oct 28, 2016Updated 10 years ago
- Tool to parse SRU database☆26Mar 1, 2018Updated 8 years ago
- Assorted classes and methods for indexing reports and retrieving information from an elastic index☆21Jul 5, 2016Updated 10 years ago
- MacOS incident Response Toolkit. Mostly written while stuck on a NJTransit train.☆20Feb 20, 2020Updated 6 years ago
- A DFVFS Backed Forensic Viewer☆42Apr 13, 2020Updated 6 years ago
- GPUs on demand by Runpod - Special Offer Available • AdRun AI, ML, and HPC workloads on powerful cloud GPUs—without limits or wasted spend. Deploy GPUs in under a minute and pay by the second.
- An NTFS journal parser☆80Mar 3, 2016Updated 10 years ago
- Registry to JSON. This Project is for learning purposes and is not maintained.☆12Dec 28, 2021Updated 4 years ago
- Various DFIR Tools☆27Jul 23, 2018Updated 8 years ago
- Unpack MIME attachments from a file and check them against virustotal.com☆44Mar 11, 2016Updated 10 years ago
- Various scrips☆12Oct 19, 2022Updated 4 years ago
- ☆52Sep 17, 2018Updated 8 years ago
- EVTXtract recovers and reconstructs fragments of EVTX log files from raw binary data, including unallocated space and memory images.☆213Mar 12, 2025Updated last year
- VolatilityBot – An automated memory analyzer for malware samples and memory dumps☆269Jun 15, 2021Updated 5 years ago
- Registry Miner☆14Apr 10, 2018Updated 8 years ago
- Open source password manager - Proton Pass • AdSecurely store, share, and autofill your credentials with Proton Pass, the end-to-end encrypted password manager trusted by millions.
- Konrads' Pen-Ultimate (Windows) Log File Parser☆14Dec 27, 2025Updated 10 months ago
- PowerShell Utilities for Security Situational Awareness☆13Jan 10, 2017Updated 9 years ago
- Make Windows LNK file with python (pylnk)☆64Jun 4, 2016Updated 10 years ago
- LNK to JSON☆14Mar 7, 2019Updated 7 years ago
- Core fordrop, including XMPP federation☆10Oct 31, 2012Updated 13 years ago
- Some dfir stuff☆31Jan 12, 2022Updated 4 years ago
- Parser for Windows PowerShell script block logs☆101Aug 4, 2024Updated 2 years ago
- Small scripts and POCs related to digital forensics☆18Nov 1, 2022Updated 3 years ago
- Monitor JSON notifications feed from VT☆17Jun 13, 2017Updated 9 years ago
- Serverless GPU API endpoints on Runpod - Get Bonus Credits • AdSkip the infrastructure headaches. Auto-scaling, pay-as-you-go, no-ops approach lets you focus on innovating your application.
- Utilities for the memory forensics framework☆22Jul 31, 2018Updated 8 years ago
- Python script to decode common encoded PowerShell scripts☆215Jun 13, 2018Updated 8 years ago
- Evidence Fetcher (efetch) is a web-based file explorer, viewer, and analyzer.☆39Apr 11, 2020Updated 6 years ago
- Query and report user logons relations from MS Windows Security Events☆242Aug 9, 2018Updated 8 years ago
- Some IR notes☆72Jul 23, 2016Updated 10 years ago
- Plugins for the most recent branch of Volatility☆19May 3, 2013Updated 13 years ago
- Windows Thingies in Python for live use.☆24Apr 22, 2019Updated 7 years ago
- Tools from WFA 4/e, timeline tools, etc.☆146Feb 29, 2024Updated 2 years ago
- Extract common Windows artifacts from source images and VSCs☆66May 10, 2021Updated 5 years ago
- AI Agents on DigitalOcean Gradient AI Platform • AdBuild production-ready AI agents using customizable tools or access multiple LLMs through a single endpoint. Create custom knowledge bases or connect external data.
- Queries to parse sysmon event log file with microsoft logparser☆60Mar 31, 2015Updated 11 years ago
- Python script to parse the NTFS USN Journal☆119Jul 15, 2022Updated 4 years ago
- Extract compressed memory pages from page-aligned data☆48Sep 25, 2018Updated 8 years ago
- all things awesome security☆14Jan 11, 2016Updated 10 years ago
- Network Block Device Server for windows with a DFIR/forensic focus.☆98Mar 31, 2017Updated 9 years ago
- Code for the DIMVA 2018 paper: "MemScrimper: Time- and Space-Efficient Storage of Malware Sandbox Memory Dumps"☆26Jul 22, 2019Updated 7 years ago
- Windows Live Artifacts Acquisition Script☆195Jun 20, 2022Updated 4 years ago