VMDK Forensic Artifact Extractor (VFAE) is windows based tool written in C++ that extracts files with a known location from VMDK images running the Windows operating system. The tool utilizes the VDDK (Virtual Disk Development Kit) API for the heavy lifting such as mounting, opening, and reading the VMDK selected. When vfae.exe is executed, i…
☆17Aug 7, 2015Updated 11 years ago
Alternatives and similar repositories for VFAE
Users that are interested in VFAE are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- Hunt for SQLite files used by various applications☆31Jun 17, 2026Updated last month
- C library of device-side LongFi Protocol☆14Jan 13, 2020Updated 6 years ago
- Netwitness Maltego integration Project☆18May 9, 2017Updated 9 years ago
- A collection of Terraform and Ansible scripts that automatically (and quickly) deploys a small Velociraptor R&D lab.☆22Apr 16, 2021Updated 5 years ago
- MasterParser is a simple, all-in-one, digital forensics artifact parser☆24Jul 9, 2021Updated 5 years ago
- Managed hosting for WordPress and PHP on Cloudways • AdManaged hosting for WordPress, Magento, Laravel, or PHP apps, on multiple cloud providers. Deploy in minutes on Cloudways by DigitalOcean.
- PyVelociraptor contains the python bindings for the Velociraptor API.☆23May 5, 2026Updated 3 months ago
- ☆26Mar 10, 2022Updated 4 years ago
- A command line utility to aid in using autofocus for IR and research☆27Oct 22, 2019Updated 6 years ago
- A simple powershell tool to unpin all Windows Start Menu tiles.☆12Jul 13, 2017Updated 9 years ago
- $MFT parser (from live systems or a copy of the $MFT) and raw file copy utility☆38Jul 18, 2024Updated 2 years ago
- Defence Against the Dark Arts☆34Sep 15, 2019Updated 6 years ago
- Forensic tool for acquisition, triage and analysis of remote block devices via iSCSI protocol.☆44Oct 25, 2024Updated last year
- Pulse Secure SSL VPN pre-auth file reading☆50Aug 26, 2019Updated 6 years ago
- A ZSH plugin to allow easy named directory creation - shortcuts to any directory you want☆16Mar 25, 2018Updated 8 years ago
- Managed hosting for WordPress and PHP on Cloudways • AdManaged hosting for WordPress, Magento, Laravel, or PHP apps, on multiple cloud providers. Deploy in minutes on Cloudways by DigitalOcean.
- The "DFUR" Splunk application and data that was presented at the 2020 SANS DFIR Summit.☆13Sep 9, 2020Updated 5 years ago
- A command-line tool for parsing Windows Master File Table ($MFT) and importing the results into Elasticsearch.☆12Jun 3, 2026Updated 2 months ago
- Generate an "Enigma Virtual Box" project file☆23Feb 11, 2022Updated 4 years ago
- WhoCalls can query a directory of files, find the binaries, and search for a user specified Win API import. It and works with both 32-bit…☆19Jul 2, 2022Updated 4 years ago
- Matt's DFIR blog☆14Jun 23, 2026Updated last month
- A library for performing memory forensics over the IEEE 1394 interface.☆19Jul 8, 2018Updated 8 years ago
- A Backup for BMC Viewer☆38Nov 4, 2017Updated 8 years ago
- Capstone Engine bindings on PHP 7.0+☆12Sep 22, 2022Updated 3 years ago
- Documentation for DFIR ORC, artefact collection tool dedicated to Microsoft Windows☆12May 4, 2026Updated 3 months ago
- Wordpress hosting with auto-scaling - Free Trial Offer • AdFully Managed hosting for WordPress and WooCommerce businesses that need reliable, auto-scalable performance. Cloudways SafeUpdates now available.
- Demonstrate the behavior of the tunnel cache on Windows☆11Aug 13, 2019Updated 7 years ago
- Windows Filesystem explorer which helps the user clean their disk☆23Jun 3, 2020Updated 6 years ago
- Documentation site for Velociraptor☆72Updated this week
- MBR manipulation tool☆18Jan 13, 2014Updated 12 years ago
- This is a script to harden Windows 10 after initial installation and remove many of the default apps.☆20Sep 11, 2018Updated 7 years ago
- CyberSecurity Resources (Threat Intelligence, Malware Analysis, Pentesting, DFIR, etc)☆11Nov 30, 2023Updated 2 years ago
- Declarative method for binding handlers to document and window - and cleaning them up.☆23Jun 14, 2026Updated last month
- About C# loader that copies a chunk at the time of the shellcode in memory in a suspended process, rather that all at once☆13Jul 14, 2022Updated 4 years ago
- A Binary Ninja plugin providing a set of BinaryViews for loading Motorola SREC, Intel HEX, and TI-TXT "hex" files☆10Sep 5, 2024Updated last year
- Deploy to Railway using AI coding agents - Free Credits Offer • AdUse Claude Code, Codex, OpenCode, and more. Autonomous software development now has the infrastructure to match with Railway.
- Exploits made practicing for OSCE☆23Dec 3, 2020Updated 5 years ago
- Tool for analysts to perform simultaneous lookups (IP, Domain, URL, MD5) against multiple data sources☆28Jan 27, 2017Updated 9 years ago
- PowerShell module to free up disk space on Windows machines.☆23Dec 6, 2022Updated 3 years ago
- Indicators of compromise relating to our report on APT10's targeting of global MSPs☆10Sep 26, 2017Updated 8 years ago
- Play your videos in VLC right from the Plex Web Player interface.☆28Apr 7, 2023Updated 3 years ago
- Simple Windows cleanup utility☆25Oct 30, 2023Updated 2 years ago
- Python code injection library☆10Jul 30, 2018Updated 8 years ago