Short scripts which use the registry to enable or disable write-blocking for removable disks
☆34Oct 12, 2023Updated 2 years ago
Alternatives and similar repositories for Registry-Write-Block
Users that are interested in Registry-Write-Block are comparing it to the libraries listed below
Sorting:
- Quick iOS Backup UnFunkerizor☆22May 25, 2021Updated 4 years ago
- ☆17Jan 15, 2025Updated last year
- Various short scripts and tools used for Digital Forensics☆14Apr 13, 2025Updated 10 months ago
- A C# (.NET 6) tool to compare the file signature of files recursively and inform the user of matches and mismatches☆16Nov 29, 2024Updated last year
- Winbuilder Mini-WinFE☆16Jul 17, 2023Updated 2 years ago
- A curated list of tools for incident response☆13Jan 22, 2024Updated 2 years ago
- Various PowerShells scripts I've made (or others have made) to automate some of the boring stuff in my everyday DFIR journey!☆51Jan 9, 2026Updated last month
- A series of python scripts to extract information from SQLite Data Files☆21Nov 15, 2025Updated 3 months ago
- ☆28Oct 17, 2025Updated 4 months ago
- Evtx Log (xml) Browser☆56Mar 12, 2023Updated 2 years ago
- Microsoft Office365 Protection Center Audit Log Parser☆27Jul 17, 2023Updated 2 years ago
- Powershell script to monitor a wireless adapter every second until it disconnects.☆14May 15, 2024Updated last year
- ☆15Nov 5, 2023Updated 2 years ago
- PowerShell scripts for running Magnet RESPONSE forensic collection tool in large enterprises.☆30Jan 9, 2025Updated last year
- Parser fo macOS/iOS FSEvents Logs☆43May 6, 2024Updated last year
- ☆70Feb 15, 2026Updated 2 weeks ago
- Automatic/Custom Destinations & LNK (MS-SHLLINK) Browser☆44Feb 21, 2026Updated last week
- $MFT directory tree reconstruction & FILE record info☆326Oct 7, 2024Updated last year
- Repository for different Windows DFIR related CMDs, PowerShell CMDlets, etc, plus workshops that I did for different conferences or event…☆77Jul 13, 2021Updated 4 years ago
- A DFIR tool to analyze artifacts on macOS☆35Jan 18, 2021Updated 5 years ago
- A list of Autopsy awesome plugins.☆77Jan 20, 2022Updated 4 years ago
- A modern web interface for managing Google Cloud Platform emulator services 🎮☆36Updated this week
- Data Recovery python tool to recover deleted files from formatted or corrupted removable drive.☆13Sep 17, 2025Updated 5 months ago
- ☆11Aug 9, 2023Updated 2 years ago
- This toolkit aims to help forensicators perform different kinds of acquisitions on iOS devices☆158May 21, 2020Updated 5 years ago
- GUC - Go UnderCover : Switch appearance from *unix to Windows ( Kali-undercover for all distros )☆39Dec 25, 2023Updated 2 years ago
- The home of the BriMor Labs rdpieces Perl script that tries to rebuild parsed RDP Bitmap Cache images☆89Aug 29, 2023Updated 2 years ago
- Proof of concept to see if more modern HTML reports can be made with PowerShell☆12Oct 10, 2021Updated 4 years ago
- The tool supports repairing two types of image files: CR2 (Canon RAW) and ARW/NEF (Sony/ Nikon RAW)☆13May 21, 2025Updated 9 months ago
- Many useful ActiveDirectory and other admin-type utilities typical in a HelpDesk role.☆10Dec 27, 2023Updated 2 years ago
- Fully automated Data Forensics / Recovery bot to recover, undelete, index, and organize as much as possible for any hard drive, and optio…☆12Feb 5, 2024Updated 2 years ago
- Update Properties of an Active Directory User with au2mator - Self Service Portal☆12May 5, 2025Updated 10 months ago
- Remote Shadow Using Windows built in software☆12Dec 10, 2025Updated 2 months ago
- GPO Bypass is a tool / proof-of-concept that highlights how one can bypass Group Policy enforced policies. It uses Firefox as an example.☆14Jan 28, 2023Updated 3 years ago
- Windows Power Plan Control (PowerShell)☆13Jan 18, 2025Updated last year
- SystemBanner is an application used to display relevant security classification information about the Windows systems it runs on.☆15Nov 17, 2023Updated 2 years ago
- A DFU-compatible bootloader for the NRF24LU1/NRF24LU1P☆10Apr 17, 2017Updated 8 years ago
- This PowerShell module contains a number of functions you might use to enhance your own functions and scripts. The Samples folder contain…☆10Mar 15, 2019Updated 6 years ago
- This bit of code scans over a folder set in a variable, then e-mails a set address if there are permissions for individual users.☆11Sep 12, 2016Updated 9 years ago