mandiant/AuditParser external links

---

GitHub - View repository

GitHub.dev - Open in online code editor

Star history - Growth chart over time

deps.dev - Dependencies and security vulnerabilities

Gitingest - Export source code for LLM usage

Repomix - Export source code for LLM usage

uithub - Export source code for LLM usage

Close

mandiant/AuditParser

Readme badge preview -

If you own this repo, copy the snippet below and add it to your README.md

---

Copy

[![RelatedRepos](https://img.shields.io/badge/related-repos-yellow)](https://relatedrepos.com/gh/mandiant/AuditParser)

Close

mandiant / AuditParserView on GitHubMore

• External links
• Readme badge

AuditParser

☆60Aug 28, 2013Updated 12 years ago

Alternatives and similar repositories for AuditParser

Users that are interested in AuditParser are comparing it to the libraries listed below

• fireeye / RProxy

  View on GitHub
  ☆109Nov 21, 2013Updated 12 years ago
• mandiant / ioc_writer

  View on GitHub
  ☆207May 3, 2023Updated 2 years ago
• mandiant / Volatility-Plugins

  View on GitHub
  ☆82Jul 5, 2016Updated 9 years ago
• keydet89 / Tools

  View on GitHub
  Tools from WFA 4/e, timeline tools, etc.
  ☆145Feb 29, 2024Updated 2 years ago
• mandiant / goauditparser

  View on GitHub
  ☆46Jun 1, 2023Updated 2 years ago
• mandiant / ShimCacheParser

  View on GitHub
  ☆280Apr 6, 2023Updated 2 years ago
• fireeye / OpenIOC_1.1

  View on GitHub
  ☆134Jun 11, 2021Updated 4 years ago
• mandiant / flare-wmi

  View on GitHub
  ☆432May 3, 2023Updated 2 years ago
• Silv3rHorn / 4n6_misc

  View on GitHub
  Miscellaneous Scripts
  ☆17Sep 11, 2020Updated 5 years ago
• PoorBillionaire / USN-Record-Carver

  View on GitHub
  Carve NTFS USN records from binary data
  ☆27May 21, 2017Updated 8 years ago
• grayfold3d / POSH-Triage

  View on GitHub
  Tools for parsing Forensic images
  ☆41Dec 14, 2018Updated 7 years ago
• randomaccess3 / googleURLParser

  View on GitHub
  parser for Google search strings
  ☆40Sep 14, 2019Updated 6 years ago
• MatthewClarkMay / fTriage

  View on GitHub
  Automating forensic data extraction, reduction, and overall triage of cold disk and memory images.
  ☆21Mar 12, 2019Updated 7 years ago
• bigsnarfdude / Malware-Probabilistic-Data-Structres

  View on GitHub
  NSRL BloomFilter, Mandiant BloomFilter, Hyperloglog Malware Data Structure
  ☆15Mar 14, 2014Updated 12 years ago
• yarox24 / evtkit

  View on GitHub
  Fix acquired .evt - Windows Event Log files (Forensics)
  ☆18Mar 29, 2016Updated 9 years ago
• google / binplist

  View on GitHub
  Binary property list (plist) parser
  ☆54Nov 13, 2018Updated 7 years ago
• mutedmouse / ta-volatility

  View on GitHub
  Technical add-on to ingest json formatted volatility memory analysis plugin outputs
  ☆13May 21, 2018Updated 7 years ago
• tstillz / cbr-timeliner

  View on GitHub
  Quick script to build host or investigation timelines using Carbon Black Response
  ☆12Sep 25, 2018Updated 7 years ago
• jschicht / MftCarver

  View on GitHub
  Carve $MFT records from a chunk of data (for instance a memory dump)
  ☆16Aug 21, 2016Updated 9 years ago
• dlcowen / dfirwizard

  View on GitHub
  Example programs used in the automating DFIR series
  ☆63Mar 4, 2019Updated 7 years ago
• Velocidex / evtx-data

  View on GitHub
  Publicly shareable windows event log message data
  ☆28Nov 29, 2019Updated 6 years ago
• sans-blue-team / course_indices

  View on GitHub
  Indices for courses in SANS' Network Security Operations curriculum
  ☆17Feb 5, 2016Updated 10 years ago
• TTP0 / info

  View on GitHub
  Public Landing Page
  ☆16Jan 7, 2023Updated 3 years ago
• Dutchy- / volatility-plugins

  View on GitHub
  Container for assorted volatility plugins.
  ☆23Oct 22, 2013Updated 12 years ago
• MatthewClarkMay / kali-setup-scripts

  View on GitHub
  Kali Linux fresh installation setup scripts.
  ☆14Feb 10, 2017Updated 9 years ago
• sumeshi / ntfsdump

  View on GitHub
  An efficient tool for extracting files, directories, and alternate data streams directly from NTFS image files.
  ☆22Mar 12, 2026Updated last week
• fox-it / ponmocup

  View on GitHub
  Ponmocup Indicators of Compromise
  ☆11Feb 4, 2016Updated 10 years ago
• OSLockdown / OSLockdown

  View on GitHub
  OS Lockdown
  ☆13Nov 21, 2017Updated 8 years ago
• yahoo / winjob

  View on GitHub
  Parser for Windows Scheduled Task files.
  ☆13Apr 26, 2023Updated 2 years ago
• msuhanov / registry-miner

  View on GitHub
  Registry Miner
  ☆14Apr 10, 2018Updated 7 years ago
• mosesschwartz / extract_iocs

  View on GitHub
  Extracts indicators of compromise (IOCs), including domain names, IPv4 addresses, email addresses, and hashes, from text.
  ☆11Dec 10, 2017Updated 8 years ago
• farsightsec / dnsdbflex

  View on GitHub
  command line tool to use the DNSDB Flexible Search API extensions.
  ☆16Aug 5, 2024Updated last year
• CofenseLabs / Coronavirus-Phishing-Yara-Rules

  View on GitHub
  Repository of Cofense Coronavirus Phishing Yara Rules (details can be found here: https://cofense.com/solutions/topic/coronavirus-infocen…
  ☆10Jul 7, 2020Updated 5 years ago
• thirdeyeintelligence / ThreatHunting

  View on GitHub
  An informational repo about hunting for adversaries in your IT environment.
  ☆14Apr 10, 2017Updated 8 years ago
• pidydx / PyIOCe

  View on GitHub
  Python OpenIOC Editor
  ☆18Dec 28, 2015Updated 10 years ago
• williballenthin / INDXParse

  View on GitHub
  Tool suite for inspecting NTFS artifacts.
  ☆226Nov 1, 2023Updated 2 years ago
• ranguli / ioccheck

  View on GitHub
  A tool for simplifying the process of researching IOCs.
  ☆25Sep 24, 2021Updated 4 years ago
• cisagov / guacamole-packer

  View on GitHub
  Create machine images containing the Guacamole remote desktop gateway
  ☆11Updated this week
• malwageddon / iris-h

  View on GitHub
  Placeholder for IRIS-H Digital Forensics Tool
  ☆15May 30, 2018Updated 7 years ago