VMDK Forensic Artifact Extractor (VFAE) is windows based tool written in C++ that extracts files with a known location from VMDK images running the Windows operating system. The tool utilizes the VDDK (Virtual Disk Development Kit) API for the heavy lifting such as mounting, opening, and reading the VMDK selected. When vfae.exe is executed, i…
☆17Aug 7, 2015Updated 11 years ago
Alternatives and similar repositories for VFAE
Users that are interested in VFAE are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- Quick script to build host or investigation timelines using Carbon Black Response☆12Sep 25, 2018Updated 8 years ago
- It is based on bulk_extractor (https://github.com/simsong/bulk_extractor) and add scanners for record carving☆44Apr 23, 2020Updated 6 years ago
- Netwitness Maltego integration Project☆18May 9, 2017Updated 9 years ago
- Windows日志清除工具☆10Apr 3, 2023Updated 3 years ago
- A collection of Terraform and Ansible scripts that automatically (and quickly) deploys a small Velociraptor R&D lab.☆23Apr 16, 2021Updated 5 years ago
- Managed hosting for WordPress and PHP on Cloudways • AdManaged hosting for WordPress, Magento, Laravel, or PHP apps, on multiple cloud providers. Deploy in minutes on Cloudways by DigitalOcean.
- Hides background windows when using fullscreen in BSPWM☆13Apr 8, 2020Updated 6 years ago
- PyVelociraptor contains the python bindings for the Velociraptor API.☆23May 5, 2026Updated 5 months ago
- less ~ a clean-compiling, more Windows-friendly, fork of the original `less` by Mark Nudelman☆14Apr 10, 2026Updated 6 months ago
- ☆26Mar 10, 2022Updated 4 years ago
- A windows BDS .pdb dumper written in rust which dumps symbols and Relative Virtual Addresses into either a C++ header or a text file and …☆10Jul 1, 2023Updated 3 years ago
- A command line utility to aid in using autofocus for IR and research☆27Oct 22, 2019Updated 6 years ago
- A simple powershell tool to unpin all Windows Start Menu tiles.☆12Jul 13, 2017Updated 9 years ago
- file based virtual disk drive written in C++, C#, and .Net framework. A basic virtual disk kernel driver for learning. We have a user int…☆14Feb 27, 2022Updated 4 years ago
- A fresh Windows image over docker and kvm to accelerate tests over a clean environment accessible over ssh☆14Jun 21, 2024Updated 2 years ago
- Proton VPN Special Offer - Get 70% off • AdSpecial partner offer. Trusted by over 100 million users worldwide. Tested, Approved and Recommended by Experts.
- $MFT parser (from live systems or a copy of the $MFT) and raw file copy utility☆38Jul 18, 2024Updated 2 years ago
- Spy FS - A tool to create a virtual copy of a folder and spy on that folder, to know which files are read and at what locations (file off…☆12Dec 19, 2020Updated 5 years ago
- Clean-up ideas for a faster and lighter Windows OS☆11Feb 24, 2026Updated 7 months ago
- Help you to clean up Windows 11/10/8/Vista/7/XP junk files。☆13Oct 1, 2026Updated last week
- Defence Against the Dark Arts☆35Sep 15, 2019Updated 7 years ago
- Forensic tool for acquisition, triage and analysis of remote block devices via iSCSI protocol.☆44Oct 25, 2024Updated last year
- Pulse Secure SSL VPN pre-auth file reading☆50Aug 26, 2019Updated 7 years ago
- Jupyter Notebooks for Digital Forensics & Incident Response☆10Nov 23, 2021Updated 4 years ago
- FileDisk is a virtual disk utility on Windows x86 platform with on-the-fly encryption written in C language.☆48Jul 30, 2017Updated 9 years ago
- Managed Database hosting by DigitalOcean • AdPostgreSQL, MySQL, MongoDB, Kafka, Valkey, and OpenSearch available. Automatically scale up storage and focus on building your apps.
- A ZSH plugin to allow easy named directory creation - shortcuts to any directory you want☆16Mar 25, 2018Updated 8 years ago
- Scripts to uninstall Microsoft applications, installer packages, and other things I don't need, from Windows 10☆15Jan 16, 2017Updated 9 years ago
- The "DFUR" Splunk application and data that was presented at the 2020 SANS DFIR Summit.☆13Sep 9, 2020Updated 6 years ago
- A command-line tool for parsing Windows Master File Table ($MFT) and importing the results into Elasticsearch.☆12Oct 5, 2026Updated last week
- MemoryCleaner (A.K.A. MemCleaner) is a simple and very lightweight program to keep RAM memory clean in Windows machines.☆10Feb 22, 2022Updated 4 years ago
- Generate an "Enigma Virtual Box" project file☆24Feb 11, 2022Updated 4 years ago
- Digital Forensics and Incident Response notes and Autopsy tool walkthrough☆11Feb 3, 2022Updated 4 years ago
- Matt's DFIR blog☆14Updated this week
- A library for performing memory forensics over the IEEE 1394 interface.☆19Jul 8, 2018Updated 8 years ago
- Deploy to Railway using AI coding agents - Free Credits Offer • AdUse Claude Code, Codex, OpenCode, and more. Autonomous software development now has the infrastructure to match with Railway.
- Library of threat hunts to get any user started!☆51Sep 4, 2020Updated 6 years ago
- Documentation for DFIR ORC, artefact collection tool dedicated to Microsoft Windows☆12May 4, 2026Updated 5 months ago
- Various tools and scripts☆43Nov 30, 2022Updated 3 years ago
- Demonstrate the behavior of the tunnel cache on Windows☆11Aug 13, 2019Updated 7 years ago
- Windows Filesystem explorer which helps the user clean their disk☆23Jun 3, 2020Updated 6 years ago
- CleanerX — Windows Optimizer☆18Apr 9, 2021Updated 5 years ago
- Documentation site for Velociraptor☆73Updated this week