jeffbryner / pyMFTGrabber

Related projects: ⓘ

• Neo23x0 / ImpHash-Generator
  PE Import Hash Generator
  ☆72Updated 7 years ago
• jeffbryner / pyioc
  Python tools for IOC (Indicator of Compromise) handling
  ☆96Updated 2 years ago
• sysforensics / RecentFileCacheParser
  ☆15Updated this week
• sysforensics / python-regparse
  ☆45Updated this week
• PoorBillionaire / USN-Record-Carver
  Carve NTFS USN records from binary data
  ☆24Updated 7 years ago
• darkquasar / WMI_Persistence
  A repo to hold some scripts pertaining WMI (Windows implementation of WBEM) forensics
  ☆85Updated 6 years ago
• YahooArchive / PyIOCe
  Python IOC Editor
  ☆61Updated 9 years ago
• dnlongen / RegLister
  Recurse through a registry, identifying values with large data -- a registry malware hunter
  ☆43Updated 8 years ago
• devgc / EventMonkey
  A Windows Event Processing Utility
  ☆46Updated 6 years ago
• hiddenillusion / IR
  Some dfir stuff
  ☆31Updated 2 years ago
• superponible / DFIR
  Various DFIR Tools
  ☆26Updated 6 years ago
• binarlyhq / binarly-query
  Command-line Interface for Binar.ly
  ☆37Updated 7 years ago
• log2timeline / l2tbinaries
  Binaries for the log2timeline projects and dependencies
  ☆38Updated this week
• 4n6k / Jump_List_AppIDs
  ☆12Updated this week
• mandiant / Volatility-Plugins
  ☆82Updated 8 years ago
• devgc / SrumMonkey
  Tool to parse SRU database
  ☆24Updated 6 years ago
• cylance / GetNETGUIDs
  Extract GUIDs from .NET assemblies
  ☆21Updated 8 years ago
• jjo-sec / volatility_plugins
  Volatility Plugins
  ☆21Updated 9 years ago
• phishme / malware_analysis
  ☆37Updated this week
• Big5-sec / SourceFu
  hopefully a source-to-source deobfuscator, aiming at deobfuscating common scripts languages such as Powershell, VBA and Javascript. Curre…
  ☆40Updated 5 years ago
• davidpany / rr_parseomater
  RegRipper wrapper for simplified bulk parsing or registry hives
  ☆10Updated 6 years ago
• idiom / pftriage
  Python tool and library to help analyze files during malware triage and analysis.
  ☆77Updated 4 years ago
• Kafeine / public
  ☆19Updated 6 years ago
• boolaz / BooLet
  Log Examination Tool
  ☆26Updated 7 years ago
• kslgroup / threadmap
  threadmap plugin for Volatility Foundation
  ☆27Updated 3 years ago
• TakahiroHaruyama / onigiri
  onigiri - remote malware triage script
  ☆24Updated 8 years ago
• jipegit / IRNotes
  Some IR notes
  ☆73Updated 8 years ago
• techbliss / Yara_Mailware_Quick_menu_scanner
  Work Fast With the pattern matching swiss knife for malware researchers.
  ☆34Updated 8 years ago
• DissectMalware / MalwareCMDMonitor
  Shows command lines used by latest instances analyzed on Hybrid-Analysis
  ☆43Updated 6 years ago
• woanware / usbdeviceforensics
  Python script for extracting USB information from Windows registry hives
  ☆124Updated 5 years ago