Timestomper and Timestamp checker with nanosecond accuracy for NTFS volumes
☆53Sep 14, 2021Updated 5 years ago
Alternatives and similar repositories for nTimetools
Users that are interested in nTimetools are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- Penguin OS Forensic (or Flight) Recorder☆42Mar 27, 2026Updated 7 months ago
- DFIR Reference☆11Jul 30, 2026Updated 3 months ago
- There are android apps that helpful for reversing practice native libraries.☆10Aug 31, 2020Updated 6 years ago
- extract and parse WEVT_TEMPLATEs from PE files☆18Dec 30, 2023Updated 2 years ago
- This repository contains relevant samples and data related to "Malware Reverse Engineering for Beginners" articles.☆65Feb 8, 2022Updated 4 years ago
- AI Agents on DigitalOcean Gradient AI Platform • AdBuild production-ready AI agents using customizable tools or access multiple LLMs through a single endpoint. Create custom knowledge bases or connect external data.
- AIFT is a GUI, CLI, REST API, and MCP tool that helps DFIR analysts get oriented quickly. Point it at disk images, VM images, forensic ar…☆53Jun 13, 2026Updated 4 months ago
- Golang Command & Control Server For Managing And Remote Accessing Machines Via Web Interface☆11Apr 13, 2023Updated 3 years ago
- Basic Linux binary shim method on the passwd binary from the shadow package to steal credentials as they are changed.☆14Nov 14, 2024Updated last year
- This is my own programming language called fluffy(similar to python)☆13Apr 12, 2020Updated 6 years ago
- Regipy is an os independent python library for parsing offline registry hives☆277Oct 18, 2026Updated last week
- A tool is designed to streamline the process of interacting with virtual cybersecurity competition environments.☆13Oct 24, 2025Updated last year
- MS Word (DOCx) Parsing Tool☆25Updated this week
- Repo to hold my PowerShell Scripts☆17Oct 19, 2022Updated 4 years ago
- Linux Kernel Module Rootkit with module hiding, RCE/reverse shell, and persistence capabilities☆15Feb 23, 2023Updated 3 years ago
- Deploy open-source AI quickly and easily - Special Bonus Offer • AdRunpod Hub is built for open source. One-click deployment and autoscaling endpoints without provisioning your own infrastructure.
- Linux rust keylogger☆18Mar 1, 2024Updated 2 years ago
- lnk_parser is a full rust implementation to parse windows LNK files☆25Feb 17, 2026Updated 8 months ago
- Factual rules are YARA rules to find legitimate software on raw disk acquisition.☆13Jan 18, 2022Updated 4 years ago
- Enumerate all processes and get specified file's handle,then close it.☆12Jul 2, 2018Updated 8 years ago
- This repository contains hands-on Jupyter notebooks for learning threat intelligence analysis using CIRCL's open source tools and service…☆13Dec 12, 2025Updated 10 months ago
- NTFS Security Descriptor Stream ($Secure:$SDS) parser☆15Jan 9, 2023Updated 3 years ago
- Support code for youtube demo video☆17Nov 22, 2022Updated 3 years ago
- This post is inspired by all the hard working DFIR, and more broadly security professionals, who have put in the hard yards over the year…☆14Nov 15, 2019Updated 6 years ago
- Windows NTLM Authentication Backdoor☆18Jan 27, 2022Updated 4 years ago
- Managed Database hosting by DigitalOcean • AdPostgreSQL, MySQL, MongoDB, Kafka, Valkey, and OpenSearch available. Automatically scale up storage and focus on building your apps.
- Malkom is an extensible and simple similarity graph generator for malware analysis aimed at helping analysts visualize and cluster sets o…☆17Apr 6, 2023Updated 3 years ago
- Information about the open-source-dfir slack community☆29Jun 17, 2023Updated 3 years ago
- PyVelociraptor contains the python bindings for the Velociraptor API.☆23May 5, 2026Updated 5 months ago
- This is to edit a training forensic image file (raw/dd) and zero out all the unnecessary files.☆11Jun 21, 2025Updated last year
- ☆64Aug 11, 2023Updated 3 years ago
- Registry to JSON. This Project is for learning purposes and is not maintained.☆12Dec 28, 2021Updated 4 years ago
- Bruteforcing from various scanner output - Automatically attempts default creds on found services.☆15Mar 10, 2025Updated last year
- Publicly shareable windows event log message data☆29Nov 29, 2019Updated 6 years ago
- ☆11Apr 10, 2024Updated 2 years ago
- Managed hosting for WordPress and PHP on Cloudways • AdManaged hosting for WordPress, Magento, Laravel, or PHP apps, on multiple cloud providers. Deploy in minutes on Cloudways by DigitalOcean.
- Files for http://blog.deniable.org/posts/windows-callbacks/☆86Feb 26, 2022Updated 4 years ago
- http://moaistory.blogspot.com/2018/10/winsearchdbanalyzer.html☆134Jul 20, 2024Updated 2 years ago
- A tool for fetching DFIR and other GitHub tools.☆32Sep 17, 2026Updated last month
- 🧭 The artifactcollector is a customizable agent to collect forensic artifacts on any Windows, macOS or Linux system☆308May 7, 2025Updated last year
- DirectNtApi - simple method to make ntapi function call without importing or walking export table. Work under Windows 7, 8 and 10☆53Mar 12, 2024Updated 2 years ago
- Burp suite extension that lets you easily copy issues☆17Apr 3, 2026Updated 6 months ago
- Tools by cooey comrades for cooey comrades.☆16Feb 23, 2023Updated 3 years ago