kacos2000 / Prefetch-Browser
Browse Windows Prefetch versions: 17,23,26,30v1/2,31 & some of SuperFetch .7db/.db's
☆59Updated 2 months ago
Alternatives and similar repositories for Prefetch-Browser:
Users that are interested in Prefetch-Browser are comparing it to the libraries listed below
- Yara Rules for Modern Malware☆73Updated 11 months ago
- ☆33Updated 2 years ago
- Create a cool process tree like https://twitter.com/ACEResponder.☆35Updated last year
- a tiny program to consume from ETW providers for research☆46Updated last month
- A proof-of-concept re-assembler for reverse VNC traffic.☆25Updated last year
- Simple PowerShell script to enable process scanning with Yara.☆91Updated 2 years ago
- This is a repo for fetching Applocker event log by parsing the win-event log☆30Updated 2 years ago
- Live memory analysis detecting malware IOCs in processes, modules, handles, tokens, threads, .NET assemblies, memory address space and en…☆38Updated 4 months ago
- Placeholder for my detection repo and misc detection engineering content☆42Updated last year
- Windows.EDB Browser☆54Updated last year
- Contains compiled binaries of Volatility☆33Updated 3 weeks ago
- Default Detections for EDR☆97Updated last year
- ☆45Updated last year
- Evtx Log (xml) Browser☆56Updated last year
- A repository hosting example goodware evtx logs containing sample software installation and basic user interaction☆76Updated last year
- ☆14Updated 9 months ago
- Python based tool to extract forensic info from EventTranscript.db (Windows Diagnostic Data)☆68Updated last year
- Detection rule validation☆41Updated last year
- An exercise to practice deobfuscating PowerShell Scripts.☆28Updated 2 years ago
- RegRipper4.0☆44Updated last year
- This repository is meant to catalog network and host artifacts associated with various EDR products "shell" and response functionalities.☆76Updated 5 months ago
- A collection of small scripts and tools for deobfuscation and malware analysis.☆66Updated last year
- ☆20Updated last year
- Reads and prints information from the website MalAPI.io☆19Updated 2 years ago
- Repo containing my public talks☆23Updated last year
- Quickly search for references to a GUID in DLLs, EXEs, and drivers☆70Updated 3 years ago
- ☆25Updated 2 years ago
- ☆28Updated this week
- A C# based tool for analysing malicious OneNote documents☆110Updated last year
- MITRE TTPs derived from Conti's leaked playbooks from XSS.IS☆36Updated 3 years ago