dwmetz / detonaRELinks
Capture. Detonate. Collect
☆14Updated last year
Alternatives and similar repositories for detonaRE
Users that are interested in detonaRE are comparing it to the libraries listed below
Sorting:
- Memory Baseliner is a script that can compare two windows memory images or perform frequency of occurrence / data stacking analysis on mu…☆56Updated 2 years ago
- ☆27Updated last month
- Python based tool to extract forensic info from EventTranscript.db (Windows Diagnostic Data)☆67Updated 2 years ago
- Tools and scripts to deploy and manage OpenRelik instances☆15Updated 5 months ago
- USN Journal full path builder☆62Updated last year
- PowerShell scripts for running Magnet RESPONSE forensic collection tool in large enterprises.☆29Updated 10 months ago
- Get-MiniTimeline - Triage Collection and Timeline Generation w/ KAPE☆33Updated last year
- ☆22Updated 2 years ago
- Quick ESXi Log Parser☆28Updated 3 weeks ago
- Project based on RegRipper, to extract add'l value/pivot points from TLN events file☆88Updated 9 months ago
- A sample VHDX file with multiple verbose examples of forensic and anti-forensics artifacts. Meant to be basic and can be expanded upon. P…☆28Updated 2 years ago
- A tool for fetching DFIR and other GitHub tools.☆24Updated 3 months ago
- Vault of Windows Registry forensic artifacts☆22Updated last week
- Remote access and Antivirus Logging Database☆43Updated last year
- Python script to walk a folder or a zip file for SQLite Databases☆37Updated 2 years ago
- Cumulonimbus-UAL_Extractor is a PowerShell based tool created by the Tesorion CERT team to help gather the Unified Audit Logging out of a…☆21Updated 2 years ago
- Linux Baseline and Forensic Triage Tool - BETA☆57Updated 3 years ago
- Contains compiled binaries of Volatility☆37Updated 5 months ago
- A script that updates KAPE (using Get-KAPEUpdate.ps1) as well as EZ Tools (within .\KAPE\Modules\bin) and the ancillary files that enhanc…☆58Updated 4 months ago
- orc2timeline extracts and analyzes artifacts contained in archives generated with DFIR-ORC.exe to create a timeline from them☆34Updated 4 months ago
- A repository containing the research output from my GCFE Gold Paper which compared Windows 10 and Windows 11.☆27Updated 3 years ago
- CryptnetURLCacheParser is a tool to parse CryptAPI cache files☆19Updated last year
- ☆68Updated last week
- Forensics scripts aimed at automating & enhancing the Forensics Legend Eric Zimmerman's techniques, integrating the statistical detection…☆18Updated 2 years ago
- A repository hosting example goodware evtx logs containing sample software installation and basic user interaction☆82Updated last month
- Just Another broken Registry Parser (JARP)☆16Updated last year
- The core backend server handling API requests and task management☆49Updated 3 weeks ago
- PowerShell 'Hero': scripts for DFIR and automation with a PowerShell menu example.☆36Updated 2 years ago
- ☆21Updated 3 years ago
- Public tools, scripts or code snippets that can help when working with our products☆46Updated 6 months ago